$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft File: GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft (raw, json) Hash identifier: 7kQkNk4MhVTat6tKoJ4f1Dlo8BhTUUDCJTeDjBI2Xe4= Subject key identifier: A5:17:67:EE:38:AC:6C:6B:F0:F7:82:2E:43:15:86:09:DF:3B:2F:2D Authority key identifier: 18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24 Certificate issuer: /CN=1850341C0E586CF47547FD06E54EDBE6902A0E24 Certificate serial: 3E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft Manifest number: 0130 Signing time: Fri 22 Nov 2024 14:45:48 +0000 Manifest this update: Fri 22 Nov 2024 14:45:48 +0000 Manifest next update: Sat 07 Dec 2024 14:45:48 +0000 Files and hashes: 1: AKbXwp7F6lGBS8SR82Ryf4RM4Ks.roa (hash: l2yCs1/fIG2Lrx8HDPtHdTac1GCKJDZiNfWX730kkRk=) 2: GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl (hash: HvGttEguXA53fzLI8B4/t8t+7XybffHyz1yi0HDhMQk=) 3: Kxngo8QDvSaeo52m2gwOh-P0m_4.roa (hash: wjajpBXziVHFsb3iFMUUn3guhzPbqNKtFvw8pyd+V5g=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1850341C0E586CF47547FD06E54EDBE6902A0E24 Validity Not Before: Nov 15 01:35:55 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=A51767EE38AC6C6BF0F7822E43158609DF3B2F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:e2:19:0e:40:55:d2:fb:58:bc:ca:67:f7: 52:73:d2:ac:01:57:f4:f8:8e:5b:19:e3:3b:10:ee: ed:ef:c0:e2:f8:80:ba:cf:24:a6:14:21:8a:49:e1: ea:cd:38:41:e6:1f:af:2f:8c:0b:f0:a0:ba:16:03: 79:8f:0d:88:fe:ab:3c:9b:d1:4e:1a:7b:20:c3:29: ac:f5:bb:6d:81:86:dc:10:59:4e:a3:72:b9:4e:d0: 64:b0:03:47:32:9c:43:a1:01:64:c7:be:f9:36:2c: 06:54:97:77:d6:3d:cc:da:f8:89:68:08:c1:97:29: a8:ba:d0:7e:69:f0:d0:78:42:cf:d4:c6:b8:1f:3b: 68:68:e5:9f:01:01:94:c8:46:16:a1:da:28:f3:35: 55:a3:a0:d5:85:d9:db:a9:32:7a:6a:dc:98:7b:91: 52:3b:d6:88:ef:27:2b:6e:a0:d8:84:9c:36:c7:a2: 6f:ed:88:f8:36:d5:90:8f:e3:99:69:1a:5b:a9:f0: 7d:33:a1:56:7f:eb:61:8e:be:18:dc:83:c1:0e:f4: 0d:dc:e9:f5:91:ca:e3:ef:66:b0:a8:89:db:c9:64: da:f5:a5:bb:f6:61:e4:62:e6:db:18:49:15:0f:4f: cf:71:43:57:9e:20:08:8e:fd:01:a1:22:83:5c:ae: 5b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:17:67:EE:38:AC:6C:6B:F0:F7:82:2E:43:15:86:09:DF:3B:2F:2D X509v3 Authority Key Identifier: keyid:18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:b4:7d:0d:e2:b2:a5:2f:95:1b:d1:e4:26:f7:c2:5b:f4:ff: b0:dc:ff:5f:0a:7a:6c:a1:09:1b:2c:da:7f:44:f2:f3:03:39: 5e:08:97:81:01:d1:07:e1:8b:bc:e9:e2:2b:64:73:ef:cb:f3: 24:15:87:2a:c0:c3:8c:0a:d5:4e:b8:12:49:42:ac:2f:4d:a3: cb:38:86:2a:85:13:a0:2b:01:8f:1e:0e:9a:b8:16:2c:d1:80: f3:32:d7:a7:55:92:31:7f:60:5f:66:be:e5:ea:c5:27:56:1d: 3c:ff:bc:ce:8e:2b:62:e1:73:58:34:c7:68:14:a1:08:22:a0: aa:34:01:2f:6c:ab:aa:ef:b7:9f:27:06:d9:93:67:5e:08:cf: c7:29:cd:3c:7f:04:49:8d:31:a4:a3:f1:6f:10:0c:a9:30:8e: df:92:b7:66:1e:a5:a5:d6:44:75:6f:82:9f:f6:9e:18:08:1f: a3:98:0b:b9:b8:00:46:07:16:f7:38:c3:c3:99:b9:35:84:77: 4e:1a:0a:df:97:6f:e5:e9:06:61:cd:56:82:2d:fa:0f:0e:0e: ce:44:72:27:5c:03:25:96:21:d6:cb:76:c3:10:78:56:3a:7e: 2a:65:fb:73:13:0b:a8:01:5e:3f:53:ae:b5:03:78:d7:78:37: aa:61:e3:21 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxODUw MzQxQzBFNTg2Q0Y0NzU0N0ZEMDZFNTRFREJFNjkwMkEwRTI0MB4XDTI0MTExNTAx MzU1NVoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoQTUxNzY3RUUzOEFDNkM2 QkYwRjc4MjJFNDMxNTg2MDlERjNCMkYyRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMjI4hkOQFXS+1i8ymf3UnPSrAFX9PiOWxnjOxDu7e/A4viAus8k phQhiknh6s04QeYfry+MC/CguhYDeY8NiP6rPJvRThp7IMMprPW7bYGG3BBZTqNy uU7QZLADRzKcQ6EBZMe++TYsBlSXd9Y9zNr4iWgIwZcpqLrQfmnw0HhCz9TGuB87 aGjlnwEBlMhGFqHaKPM1VaOg1YXZ26kyemrcmHuRUjvWiO8nK26g2IScNseib+2I +DbVkI/jmWkaW6nwfTOhVn/rYY6+GNyDwQ70Ddzp9ZHK4+9msKiJ28lk2vWlu/Zh 5GLm2xhJFQ9Pz3FDV54gCI79AaEig1yuWxkCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBSlF2fuOKxsa/D3gi5DFYYJ3zsvLTAfBgNVHSMEGDAWgBQYUDQcDlhs9HVH/Qbl TtvmkCoOJDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM0L0dGQTBIQTVZYlBSMVJfMEc1VTdiNXBBcURpUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0dGQTBIQTVZYlBSMVJfMEc1VTdiNXBB cURpUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzQvR0ZBMEhBNVliUFIxUl8wRzVVN2I1cEFxRGlRLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADO0fQ3isqUvlRvR5Cb3wlv0/7Dc/18KemyhCRss2n9E8vMDOV4Il4EB0Qfh i7zp4itkc+/L8yQVhyrAw4wK1U64EklCrC9No8s4hiqFE6ArAY8eDpq4FizRgPMy 16dVkjF/YF9mvuXqxSdWHTz/vM6OK2Lhc1g0x2gUoQgioKo0AS9sq6rvt58nBtmT Z14Iz8cpzTx/BEmNMaSj8W8QDKkwjt+St2YepaXWRHVvgp/2nhgIH6OYC7m4AEYH Fvc4w8OZuTWEd04aCt+Xb+XpBmHNVoIt+g8ODs5EcidcAyWWIdbLdsMQeFY6fipl +3MTC6gBXj9TrrUDeNd4N6ph4yE= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:28 2024 by rpki-client on console-ams.rpki-client.org