$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft File: iYAdvb4WiGOrDoAvDskKNSXCNHw.mft (raw, json) Hash identifier: UETdTvotI8obJzVE5zUDGoAthWjkUz8xGvksTWNgSto= Subject key identifier: E3:07:F6:33:0E:BE:3A:54:FB:65:9D:93:53:A6:48:BE:04:34:08:97 Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C Certificate issuer: /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C Certificate serial: 6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft Manifest number: 1AE1 Signing time: Mon 27 Oct 2025 23:40:14 +0000 Manifest this update: Mon 27 Oct 2025 23:40:14 +0000 Manifest next update: Tue 11 Nov 2025 23:40:14 +0000 Files and hashes: 1: -g2EO2ghjKgG4SmQS_DcxKzexoY.roa (hash: Dfgg441H7c2wDjnbxDKVXhUSp17aK+b3+K16tyK5svc=) 2: Dl-LohYFZLIZtJ-Hp6Y9GeWfpxU.roa (hash: hGrjVrcbKpEoui3BnvLHHsOGhjJ3aAjgMVHYq6Ekwck=) 3: iYAdvb4WiGOrDoAvDskKNSXCNHw.crl (hash: SGJtbbNxSu8yOuDJmOvOsRjTdUZAoV0VsUQKHboXIs0=) 4: jylCkZX7ZHH1z-4qdNBWN3k0l0M.roa (hash: yLemOtzZCRNciUZVftPQg/Hf53yupBd7bPqntzQErY4=) 5: o9Jtwkqd341lE8eBGgyP_1zOEPE.roa (hash: 1+wa4kb3fY3bbhiVx2vAOeAIjTFtLHSH841h06c9NKA=) 6: oE9Bq3OieR3mrZeHhSJkmg0-TwY.roa (hash: mUpTibgiUHFiW2PCLaB6KaoV2P0Dwga4XPz5PInm2Pw=) 7: szbIiCZav7zIJ2orCti6Cj_PDHU.roa (hash: bkyira0dazPD+mV/0SPf5K00ya2LHrl4gzckbT+Cgbk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 01:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C Validity Not Before: Oct 15 01:40:29 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=E307F6330EBE3A54FB659D9353A648BE04340897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:91:3f:60:fd:40:ba:64:c3:30:76:c2:c2: 69:98:47:34:a8:3d:97:77:f9:bc:91:9e:9f:4f:45: da:49:27:48:d3:8e:43:78:dd:b5:50:a7:91:7a:d6: 72:8a:6a:ac:6c:84:0c:a3:80:74:99:fa:e3:13:6a: c7:17:99:9b:db:cc:aa:9a:1e:16:1a:2d:b3:28:88: b8:7f:ee:dd:c6:9f:90:a9:c2:0f:6c:cb:79:6f:fe: 0d:4b:11:8a:17:d0:af:82:bd:29:15:15:2e:5f:aa: 5e:d5:c9:87:cd:37:22:76:e1:cd:da:97:62:5c:7a: d6:39:93:30:f6:31:74:6f:98:69:fd:2c:af:92:c8: 6b:95:14:e5:1c:b5:20:06:89:58:d7:a9:3d:da:ec: 54:0f:c8:54:d8:35:5e:63:95:1e:de:93:60:41:4f: d4:8b:a4:a1:47:32:81:88:74:35:ba:f8:0e:5b:9e: b7:c6:e4:1a:28:57:cd:07:ea:fe:74:17:51:b9:ab: 53:82:87:a5:a0:49:ec:32:56:70:b9:2b:db:dd:0d: ca:27:61:8e:3c:03:87:fa:20:d9:32:27:6d:71:8e: 57:ab:a4:d4:99:3f:49:d7:13:b2:67:c0:fe:18:39: 97:c6:87:6f:0f:41:cc:dc:66:cf:ab:8b:de:98:d9: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:07:F6:33:0E:BE:3A:54:FB:65:9D:93:53:A6:48:BE:04:34:08:97 X509v3 Authority Key Identifier: keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:d4:5d:44:db:43:9b:01:b2:4b:ff:9b:be:ad:b0:e6:0f:91: 11:f1:39:dd:41:f4:33:32:4e:20:7e:92:97:37:a1:9d:9b:9f: f7:8b:0e:09:01:b3:8a:0e:f4:58:b8:ce:49:89:6e:20:bb:41: 6b:cb:51:71:f8:88:7e:d9:62:82:34:cb:ed:e0:8a:da:ff:2c: dc:a5:ac:bd:25:86:86:f4:93:1a:e8:3e:85:db:33:25:52:56: dc:df:6d:32:11:b8:f1:e0:2a:7f:22:aa:8d:aa:d4:fa:4c:5a: 18:f6:5e:88:b2:1b:95:6f:cd:25:15:e9:dc:5f:21:fa:1f:df: 90:be:a5:30:bf:0f:c6:72:c8:38:fd:c0:7b:ba:03:dc:32:e8: 96:1b:34:5f:86:47:2e:3e:16:28:46:7b:62:59:b9:de:6b:3b: fa:cd:af:f3:1c:db:48:e4:2a:0f:ca:d4:bf:45:d9:3f:6e:54: 9c:55:09:a0:ec:16:3a:e8:f3:a9:fc:5c:7e:3c:3a:22:ac:ad: 6d:65:2b:49:d7:c3:7e:d3:7c:6f:cb:ef:03:35:c2:b8:5c:4a: 04:ee:1b:7b:91:c0:15:ed:be:4d:18:97:5a:c0:82:53:15:b5: d7:ee:1f:6a:af:48:6d:14:97:80:fc:cc:a0:54:83:c9:c4:20: db:7a:fc:ff -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OTgw MURCREJFMTY4ODYzQUIwRTgwMkYwRUM5MEEzNTI1QzIzNDdDMB4XDTI1MTAxNTAx NDAyOVoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRTMwN0Y2MzMwRUJFM0E1 NEZCNjU5RDkzNTNBNjQ4QkUwNDM0MDg5NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALqjkT9g/UC6ZMMwdsLCaZhHNKg9l3f5vJGen09F2kknSNOOQ3jd tVCnkXrWcopqrGyEDKOAdJn64xNqxxeZm9vMqpoeFhotsyiIuH/u3cafkKnCD2zL eW/+DUsRihfQr4K9KRUVLl+qXtXJh803InbhzdqXYlx61jmTMPYxdG+Yaf0sr5LI a5UU5Ry1IAaJWNepPdrsVA/IVNg1XmOVHt6TYEFP1IukoUcygYh0Nbr4Dluet8bk GihXzQfq/nQXUbmrU4KHpaBJ7DJWcLkr290NyidhjjwDh/og2TInbXGOV6uk1Jk/ SdcTsmfA/hg5l8aHbw9BzNxmz6uL3pjZuBMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTjB/YzDr46VPtlnZNTpki+BDQIlzAfBgNVHSMEGDAWgBSJgB29vhaIY6sOgC8O yQo1JcI0fDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwOTEvaVlBZHZiNFdpR09yRG9BdkRza0tOU1hDTkh3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaVlBZHZiNFdpR09yRG9BdkRza0tO U1hDTkh3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDkxL2lZQWR2YjRXaUdPckRvQXZEc2tLTlNYQ05Idy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo1F1E20ObAbJL/5u+rbDmD5ER8TndQfQzMk4gfpKXN6Gdm5/3iw4J AbOKDvRYuM5JiW4gu0Fry1Fx+Ih+2WKCNMvt4Ira/yzcpay9JYaG9JMa6D6F2zMl Ulbc320yEbjx4Cp/IqqNqtT6TFoY9l6IshuVb80lFencXyH6H9+QvqUwvw/Gcsg4 /cB7ugPcMuiWGzRfhkcuPhYoRntiWbneazv6za/zHNtI5CoPytS/Rdk/blScVQmg 7BY66POp/Fx+PDoirK1tZStJ18N+03xvy+8DNcK4XEoE7ht7kcAV7b5NGJdawIJT FbXX7h9qr0htFJeA/MygVIPJxCDbevz/ -----END CERTIFICATE-----Generated at Tue Oct 28 03:33:05 2025 by rpki-client