$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.mft File: iTJXvBVrUtqLlKIUINjTXa5v9K0.mft (raw, json) Hash identifier: u4mmVxVQNqd37ATau1aYKxUjo1gCOqL34s5FpkRoDto= Subject key identifier: AD:2E:3B:1E:D5:79:5A:D8:5F:FE:90:8A:AB:67:37:70:FD:45:20:7C Authority key identifier: 89:32:57:BC:15:6B:52:DA:8B:94:A2:14:20:D8:D3:5D:AE:6F:F4:AD Certificate issuer: /CN=893257BC156B52DA8B94A21420D8D35DAE6FF4AD Certificate serial: 1D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iTJXvBVrUtqLlKIUINjTXa5v9K0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.mft Manifest number: 0524 Signing time: Fri 06 Jun 2025 13:47:22 +0000 Manifest this update: Fri 06 Jun 2025 13:47:22 +0000 Manifest next update: Sat 21 Jun 2025 13:47:22 +0000 Files and hashes: 1: 2x63rnkcsFrODsY1Lj-l5eoal8A.roa (hash: hwbtAe8Bl562Pf3FjxFlgmdOVtPmfaR2XgYpxk/ozVY=) 2: iTJXvBVrUtqLlKIUINjTXa5v9K0.crl (hash: jNO/WCX8/IfZHrXENSAbniU/vFXiqtO6zbARWE6YK/k=) 3: qw3yz2AbXytt3iMTbrOwfi1bUfk.roa (hash: +9uqLyuHxBdI4baHbveE0BoSD8py8NfFfZ9nTMEiPfU=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iTJXvBVrUtqLlKIUINjTXa5v9K0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 14:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893257BC156B52DA8B94A21420D8D35DAE6FF4AD Validity Not Before: May 23 10:02:15 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=AD2E3B1ED5795AD85FFE908AAB673770FD45207C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5a:36:7c:94:f7:98:39:00:df:a2:d1:39:a3: 06:14:d9:13:24:7b:d7:0a:68:76:85:b3:d8:36:ec: 29:65:fd:2f:cd:b6:3b:8b:3a:af:66:3e:6c:5e:10: d3:61:48:3a:62:96:55:d4:4a:73:70:57:37:b5:21: 98:3f:5f:8a:06:31:4f:36:86:89:ab:20:75:1d:7c: e3:86:d9:ad:9c:28:af:e6:fc:5f:32:44:d3:70:04: f1:62:25:d9:d9:7c:f7:20:b4:f3:2b:12:34:af:79: 36:24:dc:27:3a:0f:ba:65:e9:7c:01:d6:96:0b:16: 10:37:c6:66:e1:dd:a7:b1:60:0c:61:f6:77:71:ec: 1d:0e:f7:f8:f7:e8:7f:9f:2b:5f:6c:20:ef:f8:e0: e4:96:c1:81:f7:8c:4c:af:13:37:cc:cc:62:00:99: 9f:e7:69:66:68:9a:31:29:2c:5e:2b:d3:1b:8b:c7: 72:39:e1:ee:ed:09:d0:b4:91:10:f9:1a:4e:07:45: dd:99:05:be:ea:c3:d3:16:95:fa:88:b7:75:0d:bf: 96:6c:a1:ef:96:94:e6:5a:f7:69:73:9a:9c:d4:25: 74:2e:d8:9b:e1:49:29:f4:6d:ea:ae:a6:ca:65:f4: 02:eb:d7:e7:07:9f:d0:d1:9b:7d:38:0d:55:55:36: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2E:3B:1E:D5:79:5A:D8:5F:FE:90:8A:AB:67:37:70:FD:45:20:7C X509v3 Authority Key Identifier: keyid:89:32:57:BC:15:6B:52:DA:8B:94:A2:14:20:D8:D3:5D:AE:6F:F4:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iTJXvBVrUtqLlKIUINjTXa5v9K0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:63:28:ff:c4:2a:7a:5a:ca:2b:84:4b:2b:a8:9c:72:a6:d0: 89:7d:a0:3d:f2:f4:a3:7b:67:41:98:87:23:77:d4:bf:ff:94: eb:4b:a3:58:8c:f5:05:4a:0d:a6:1d:ae:a3:29:0e:63:35:c0: 32:21:34:52:77:70:df:67:38:04:20:57:4e:32:d9:6c:f9:db: ab:e4:17:e0:f6:93:4a:d1:8d:86:95:9c:c4:d9:06:37:9c:5c: 1a:25:3e:62:bc:f3:21:80:b6:a4:aa:97:fe:48:e4:40:cb:19: 3e:67:9f:0f:4e:50:73:d2:9d:06:82:d8:22:27:5c:c9:87:fb: 91:0a:3c:57:15:46:c1:f2:a5:b7:b6:e5:16:7e:30:b8:a3:88: a7:a4:04:b5:67:9f:2c:97:a4:ce:42:02:7e:45:9b:e4:c3:a2: 4c:6f:ad:33:b9:58:4d:3c:c5:9a:6f:f1:51:9a:66:b2:13:7e: d3:91:34:30:12:55:3e:2b:fd:1b:17:97:17:91:81:12:ed:b0: 3c:64:4b:05:8c:bf:77:e2:5f:39:7b:6f:d8:15:72:d7:e7:db: 9a:38:4f:71:a2:74:6e:39:c1:27:7f:76:2c:74:6b:b9:b7:08: f2:e2:62:3f:99:21:a0:8a:d3:05:0c:75:d0:b8:ba:d2:6d:8b: a6:0a:73:b7 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OTMy NTdCQzE1NkI1MkRBOEI5NEEyMTQyMEQ4RDM1REFFNkZGNEFEMB4XDTI1MDUyMzEw MDIxNVoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoQUQyRTNCMUVENTc5NUFE ODVGRkU5MDhBQUI2NzM3NzBGRDQ1MjA3QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANFaNnyU95g5AN+i0TmjBhTZEyR71wpodoWz2DbsKWX9L822O4s6 r2Y+bF4Q02FIOmKWVdRKc3BXN7UhmD9figYxTzaGiasgdR1844bZrZwor+b8XzJE 03AE8WIl2dl89yC08ysSNK95NiTcJzoPumXpfAHWlgsWEDfGZuHdp7FgDGH2d3Hs HQ73+Pfof58rX2wg7/jg5JbBgfeMTK8TN8zMYgCZn+dpZmiaMSksXivTG4vHcjnh 7u0J0LSREPkaTgdF3ZkFvurD0xaV+oi3dQ2/lmyh75aU5lr3aXOanNQldC7Ym+FJ KfRt6q6mymX0AuvX5wef0NGbfTgNVVU2i5UCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBStLjse1Xla2F/+kIqrZzdw/UUgfDAfBgNVHSMEGDAWgBSJMle8FWtS2ouUohQg 2NNdrm/0rTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyMTYvaVRKWHZCVnJVdHFMbEtJVUlOalRYYTV2OUswLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaVRKWHZCVnJVdHFMbEtJVUlOalRY YTV2OUswLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjE2L2lUSlh2QlZyVXRxTGxLSVVJTmpUWGE1djlLMC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgYyj/xCp6WsorhEsrqJxyptCJfaA98vSje2dBmIcjd9S//5TrS6NY jPUFSg2mHa6jKQ5jNcAyITRSd3DfZzgEIFdOMtls+dur5Bfg9pNK0Y2GlZzE2QY3 nFwaJT5ivPMhgLakqpf+SORAyxk+Z58PTlBz0p0GgtgiJ1zJh/uRCjxXFUbB8qW3 tuUWfjC4o4inpAS1Z58sl6TOQgJ+RZvkw6JMb60zuVhNPMWab/FRmmayE37TkTQw ElU+K/0bF5cXkYES7bA8ZEsFjL934l85e2/YFXLX59uaOE9xonRuOcEnf3YsdGu5 twjy4mI/mSGgitMFDHXQuLrSbYumCnO3 -----END CERTIFICATE-----Generated at Fri Jun 6 17:36:41 2025 by rpki-client