$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft File: h9rsIO30ogEEI917AE4VdPETpzU.mft (raw, json) Hash identifier: jWTXGrIh1/2wcxPWFeiyIWgXReF/Tp9D+TQ1fhnvvlE= Subject key identifier: 1F:00:71:20:23:AD:96:60:85:1F:4E:4E:C5:D3:34:5D:4F:CA:60:BD Authority key identifier: 87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35 Certificate issuer: /CN=87DAEC20EDF4A2010423DD7B004E1574F113A735 Certificate serial: 41 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft Manifest number: 0907 Signing time: Sun 02 Nov 2025 21:50:48 +0000 Manifest this update: Sun 02 Nov 2025 21:50:48 +0000 Manifest next update: Mon 17 Nov 2025 21:50:48 +0000 Files and hashes: 1: MrD_YS1Mv1spqa-jT_dN2RQkxV0.roa (hash: FZ+J5DiDLrROXm6TZ4rQwDyuzaN1Xm3+olTcY/ip1TU=) 2: h9rsIO30ogEEI917AE4VdPETpzU.crl (hash: F6mNhYbNByvE+1eURCscPHhEHO1It4PF7kdBE3KToP4=) 3: hcpVdWaz68NS1lzqmKZe6RUW4lk.roa (hash: s5o9R3jz6Et+GYZYz//rTnJMZUngqYjE91uInA9SUeE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87DAEC20EDF4A2010423DD7B004E1574F113A735 Validity Not Before: Oct 15 01:42:33 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=1F00712023AD9660851F4E4EC5D3345D4FCA60BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9f:67:ef:0b:cb:3a:84:f1:2c:e7:d8:df:e8: 82:b1:d8:8b:da:34:68:4e:b6:f9:c7:99:fa:59:fa: d1:08:00:b8:04:c2:36:f9:1d:b4:73:5f:96:f0:d8: c4:5f:75:a4:10:44:33:35:1a:ce:7e:c1:fd:bd:d1: fa:4e:e6:f4:52:53:67:ec:71:76:c6:96:f9:96:d2: 95:30:78:a1:89:1a:c9:4a:da:a0:8f:ab:b0:63:bf: 4a:64:ea:1b:c7:7b:ec:a0:87:9e:63:a8:6a:79:a5: 60:57:4d:2f:50:d4:8c:81:e7:c6:38:45:f1:2c:96: a5:02:b6:f1:e2:8a:48:f7:4f:0c:91:0e:b7:1c:60: f1:9f:f2:50:ba:cd:e4:87:4e:d0:34:f0:2c:b3:f2: ff:4f:1f:37:a9:22:8f:50:aa:03:ed:e3:35:12:61: f5:fd:d7:0c:6a:01:82:91:90:35:b9:33:05:c0:d8: c4:25:03:ab:ba:92:f2:5f:2f:86:bb:e1:1a:78:c3: 93:63:95:c5:55:72:c4:c0:bf:ff:cd:63:2d:24:c7: af:1f:ce:1a:57:51:61:86:8d:f9:b5:5f:4e:0a:01: da:ca:89:62:23:97:12:61:62:7b:28:b9:fa:50:01: 93:c3:c3:a7:fd:a9:f8:e3:76:e0:28:1b:7b:df:30: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:00:71:20:23:AD:96:60:85:1F:4E:4E:C5:D3:34:5D:4F:CA:60:BD X509v3 Authority Key Identifier: keyid:87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b2:5c:b3:f6:58:1c:f1:b1:07:8e:2b:22:79:df:a2:e1:9a: 3d:46:53:0b:98:0c:32:e6:8a:ad:9a:9a:ac:e8:5a:cc:c1:21: 8e:f8:77:36:42:c2:69:95:2b:ea:57:d7:0b:2e:5e:83:ba:0e: 6f:57:7a:7e:55:5d:ae:36:b4:4a:ff:54:73:1a:31:f4:f8:00: 5d:c7:0a:3c:d1:3f:2e:e2:3e:00:a0:b6:d1:24:36:ca:17:02: 3c:50:39:c2:c4:bb:04:ea:0a:0b:cf:4b:5e:ee:e8:5a:3f:72: 47:63:e2:31:f2:73:33:a2:00:bc:0f:2c:3f:98:ba:f1:b6:16: 20:14:eb:b1:cd:20:18:77:f2:aa:9a:8d:4e:ee:c4:36:65:e9: 89:a0:76:3b:fe:1b:0c:80:d3:8c:46:2d:30:cc:7a:9e:a8:29: 46:98:f6:4f:da:cb:75:d6:59:7c:47:8b:7e:c9:84:84:39:70: 3e:93:ae:6b:49:bd:87:73:c6:42:bb:35:28:24:c9:6f:03:c8: a2:0c:12:04:e9:3f:2a:db:6e:96:00:45:e6:49:07:a1:db:8a: d5:96:d4:e3:5c:54:b1:26:51:a3:56:af:fd:e7:d5:c3:f9:2c: 31:0e:a8:1b:31:4e:eb:8e:77:7b:94:69:b9:07:44:de:25:85: 5d:a5:19:a3 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0RB RUMyMEVERjRBMjAxMDQyM0REN0IwMDRFMTU3NEYxMTNBNzM1MB4XDTI1MTAxNTAx NDIzM1oXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMUYwMDcxMjAyM0FEOTY2 MDg1MUY0RTRFQzVEMzM0NUQ0RkNBNjBCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOifZ+8LyzqE8Szn2N/ogrHYi9o0aE62+ceZ+ln60QgAuATCNvkd tHNflvDYxF91pBBEMzUazn7B/b3R+k7m9FJTZ+xxdsaW+ZbSlTB4oYkayUraoI+r sGO/SmTqG8d77KCHnmOoanmlYFdNL1DUjIHnxjhF8SyWpQK28eKKSPdPDJEOtxxg 8Z/yULrN5IdO0DTwLLPy/08fN6kij1CqA+3jNRJh9f3XDGoBgpGQNbkzBcDYxCUD q7qS8l8vhrvhGnjDk2OVxVVyxMC//81jLSTHrx/OGldRYYaN+bVfTgoB2sqJYiOX EmFieyi5+lABk8PDp/2p+ON24Cgbe98wTAMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQfAHEgI62WYIUfTk7F0zRdT8pgvTAfBgNVHSMEGDAWgBSH2uwg7fSiAQQj3XsA ThV08ROnNTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNDQvaDlyc0lPMzBvZ0VFSTkxN0FFNFZkUEVUcHpVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaDlyc0lPMzBvZ0VFSTkxN0FFNFZk UEVUcHpVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTQ0L2g5cnNJTzMwb2dFRUk5MTdBRTRWZFBFVHB6VS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaslyz9lgc8bEHjisied+i4Zo9RlMLmAwy5oqtmpqs6FrMwSGO+Hc2 QsJplSvqV9cLLl6Dug5vV3p+VV2uNrRK/1RzGjH0+ABdxwo80T8u4j4AoLbRJDbK FwI8UDnCxLsE6goLz0te7uhaP3JHY+Ix8nMzogC8Dyw/mLrxthYgFOuxzSAYd/Kq mo1O7sQ2ZemJoHY7/hsMgNOMRi0wzHqeqClGmPZP2st11ll8R4t+yYSEOXA+k65r Sb2Hc8ZCuzUoJMlvA8iiDBIE6T8q226WAEXmSQeh24rVltTjXFSxJlGjVq/959XD +SwxDqgbMU7rjnd7lGm5B0TeJYVdpRmj -----END CERTIFICATE-----Generated at Sun Nov 2 23:32:28 2025 by rpki-client