$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft File: A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft (raw, json) Hash identifier: HXJM0ElVc93rmZ2LnurjoYaCVF9DaXjNtzvPJcB813Y= Subject key identifier: 43:53:63:2F:AD:C1:4A:FD:9D:9E:07:E8:A8:25:96:C0:A7:A5:5E:5D Authority key identifier: 03:70:6F:A3:9B:8E:45:4E:BA:1D:C3:E7:3F:ED:C8:8A:1E:40:AF:74 Certificate issuer: /CN=03706FA39B8E454EBA1DC3E73FEDC88A1E40AF74 Certificate serial: 16 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft Manifest number: 0509 Signing time: Thu 05 Jun 2025 17:28:42 +0000 Manifest this update: Thu 05 Jun 2025 17:28:42 +0000 Manifest next update: Fri 20 Jun 2025 17:28:42 +0000 Files and hashes: 1: A3Bvo5uORU66HcPnP-3Iih5Ar3Q.crl (hash: 2sfCtuk1hJAbo17sBmQLW0w+jLdm41pdGRAwg5r8SWw=) 2: ZXvDioglJrKZ5klMtW2fHwRLrjY.roa (hash: TuQtJIaftfiZTHzoUCbGhnLWz4+7q2odXkFzDej2anY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 18:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03706FA39B8E454EBA1DC3E73FEDC88A1E40AF74 Validity Not Before: May 23 10:03:37 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=4353632FADC14AFD9D9E07E8A82596C0A7A55E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:e5:b8:92:8f:96:ac:c7:e8:e2:61:ef:9a: c3:d8:43:10:3a:af:01:39:7c:5a:d8:49:d4:36:01: 6a:95:17:18:52:d0:e8:57:ed:80:d6:09:40:35:31: b0:6f:c1:84:c3:4f:aa:8e:03:46:d5:cc:2a:88:3c: fe:62:19:a8:62:be:f4:4d:7d:a4:e0:8c:e2:23:4a: b5:19:8c:a9:a7:35:46:27:91:1b:3b:19:d4:e6:7d: a4:a0:e1:cc:2c:12:c0:33:d3:70:a2:42:d9:d1:c7: ee:53:e2:d4:70:2d:f0:11:e1:3b:db:e8:46:b7:7b: ff:8a:53:b6:ee:79:d0:74:d0:36:8f:d4:65:4a:f2: 49:62:c3:61:fd:60:27:dc:5f:d3:39:81:68:77:34: ef:9f:5c:62:40:bf:9c:18:54:7f:d4:06:02:8a:ed: 11:00:14:5c:5f:1e:e1:35:c1:47:03:d5:38:18:c3: ea:c7:24:c5:85:8d:a5:f8:61:6f:34:3e:47:31:98: dd:9b:c4:00:cb:b8:ba:41:84:31:df:af:03:c7:df: ed:b5:15:be:b8:d0:a3:0f:09:5b:8d:a2:94:ad:5f: c5:19:83:b5:3d:8f:cc:9c:eb:d0:0e:5f:bc:b1:b8: 39:0d:5a:31:d7:b0:fe:51:ff:d8:11:d9:80:7d:83: 78:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:53:63:2F:AD:C1:4A:FD:9D:9E:07:E8:A8:25:96:C0:A7:A5:5E:5D X509v3 Authority Key Identifier: keyid:03:70:6F:A3:9B:8E:45:4E:BA:1D:C3:E7:3F:ED:C8:8A:1E:40:AF:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:97:b5:38:c4:8f:4e:1c:0b:23:25:d4:27:f9:4e:5f:af:d2: 7b:ff:e6:b5:69:e8:71:b6:0c:b2:88:5d:c1:d3:40:4e:a8:ef: c8:8f:a7:54:21:2e:ee:6d:52:af:af:a4:69:54:68:74:45:38: 93:92:ff:0e:75:90:aa:ba:47:93:1f:68:19:17:1e:9b:64:14: 7d:2d:5a:b0:19:cb:68:c9:5a:50:28:9d:43:b9:51:66:e2:61: d4:51:73:cd:04:d5:b5:b3:b1:5c:32:22:f3:ee:9c:85:29:ae: 9e:62:2b:b8:8a:f5:c7:9c:a4:fc:bd:0b:ef:3c:10:3a:a1:bc: 1c:78:9f:11:6f:a4:ba:1a:8b:9c:94:47:7e:a9:07:84:05:93: 7f:19:f9:22:c7:5f:18:b5:5a:7b:df:15:2b:a6:37:12:64:8f: 41:fa:a0:a5:99:83:22:1a:9a:0b:cb:ce:2e:f1:74:1d:99:2d: e7:74:b3:22:0b:34:0c:7c:21:42:a1:b1:3a:a4:f8:70:59:19: 4e:1c:18:03:c8:df:5d:71:e1:fe:3b:60:87:63:a0:ff:ec:6a: 24:4f:3c:a0:8f:a9:c2:25:c0:24:87:0a:b4:b0:08:77:65:1d: 85:48:bc:45:88:de:6c:bb:b0:7f:c9:4c:e0:c4:71:ef:fc:12: ca:6a:e5:8d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMzcw NkZBMzlCOEU0NTRFQkExREMzRTczRkVEQzg4QTFFNDBBRjc0MB4XDTI1MDUyMzEw MDMzN1oXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoNDM1MzYzMkZBREMxNEFG RDlEOUUwN0U4QTgyNTk2QzBBN0E1NUU1RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALmR5biSj5asx+jiYe+aw9hDEDqvATl8WthJ1DYBapUXGFLQ6Fft gNYJQDUxsG/BhMNPqo4DRtXMKog8/mIZqGK+9E19pOCM4iNKtRmMqac1RieRGzsZ 1OZ9pKDhzCwSwDPTcKJC2dHH7lPi1HAt8BHhO9voRrd7/4pTtu550HTQNo/UZUry SWLDYf1gJ9xf0zmBaHc0759cYkC/nBhUf9QGAortEQAUXF8e4TXBRwPVOBjD6sck xYWNpfhhbzQ+RzGY3ZvEAMu4ukGEMd+vA8ff7bUVvrjQow8JW42ilK1fxRmDtT2P zJzr0A5fvLG4OQ1aMdew/lH/2BHZgH2DeGECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRDU2MvrcFK/Z2eB+ioJZbAp6VeXTAfBgNVHSMEGDAWgBQDcG+jm45FTrodw+c/ 7ciKHkCvdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyNTUvQTNCdm81dU9SVTY2SGNQblAtM0lpaDVBcjNRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQTNCdm81dU9SVTY2SGNQblAtM0lp aDVBcjNRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjU1L0EzQnZvNXVPUlU2NkhjUG5QLTNJaWg1QXIzUS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbl7U4xI9OHAsjJdQn+U5fr9J7/+a1aehxtgyyiF3B00BOqO/Ij6dU IS7ubVKvr6RpVGh0RTiTkv8OdZCqukeTH2gZFx6bZBR9LVqwGctoyVpQKJ1DuVFm 4mHUUXPNBNW1s7FcMiLz7pyFKa6eYiu4ivXHnKT8vQvvPBA6obwceJ8Rb6S6Gouc lEd+qQeEBZN/Gfkix18YtVp73xUrpjcSZI9B+qClmYMiGpoLy84u8XQdmS3ndLMi CzQMfCFCobE6pPhwWRlOHBgDyN9dceH+O2CHY6D/7GokTzygj6nCJcAkhwq0sAh3 ZR2FSLxFiN5su7B/yUzgxHHv/BLKauWN -----END CERTIFICATE-----Generated at Thu Jun 5 20:29:16 2025 by rpki-client