$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft File: guWyiiD0xqYqRhL2xd-3o9ZNneo.mft (raw, json) Hash identifier: nINa1RMuNoKcWXC4yKmX2SYLnYykSH3jZNOsnU/awjE= Subject key identifier: 38:6B:8C:A4:A5:FD:B1:EE:07:A1:24:DD:EC:82:A3:B3:00:7F:F3:50 Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA Certificate issuer: /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA Certificate serial: 45 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft Manifest number: 059A Signing time: Thu 05 Jun 2025 16:32:00 +0000 Manifest this update: Thu 05 Jun 2025 16:32:00 +0000 Manifest next update: Fri 20 Jun 2025 16:32:00 +0000 Files and hashes: 1: 2BNI2Wb5Mkw6-2A40fyC1nR5hj4.roa (hash: acnVgy0vikcd1cp4i6J4K3HcFRFGyzbTlBp2CCSW2qo=) 2: 8l1yGgbRhKXc8YLiWlBjYORgxVU.roa (hash: qo5+ZUNixdUnwoBN/DfIP2IGq/vCAAu4h6AVZu6qphg=) 3: HCP2hiVnh9cn0htU3pNTk0PR9F4.roa (hash: Ngqy3zLR0l6n06ujxAmNymBAyPzNXncUZttp6wwqWAA=) 4: Yp-AHdFoYHq_JJTGdhfkBATIvsE.roa (hash: PxD1BrxRHg/HUChYt23RB03R+3bE6IDwHh58mzI2cq4=) 5: e0djzTgeveHHSdjiRHdUJRsjwD0.roa (hash: EV33+66eBe27B/FJAHNynuFdhThDBK4/5SaVcn5RsY4=) 6: guWyiiD0xqYqRhL2xd-3o9ZNneo.crl (hash: 1Uk/H7w0G/JhOUUbWAfYgD/Q4gm0T6d7RHvwa16A78Q=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 16:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA Validity Not Before: May 23 09:57:41 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=386B8CA4A5FDB1EE07A124DDEC82A3B3007FF350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:58:3a:1c:75:36:98:50:2e:a7:58:ad:9d: 64:60:e1:10:97:ed:fc:94:b1:4d:69:ba:67:0e:8a: 56:e6:38:64:76:b1:43:84:bd:3d:e5:bf:12:59:a1: 68:b1:11:92:cc:82:9d:b9:fd:76:f9:5c:15:39:a5: c1:42:5e:03:25:66:6f:bd:91:3a:34:4c:46:e5:77: 5f:6d:d1:97:74:5a:50:1b:2c:db:74:1f:e0:f7:76: 15:68:a7:b8:a6:46:bd:e5:91:0c:0f:70:38:53:fc: f7:09:4a:37:98:d7:e4:f6:79:42:02:b7:4f:d7:16: 28:f3:f0:ee:43:fd:81:4b:05:6b:5a:82:91:02:42: 01:25:ea:a6:ad:a7:df:19:10:9e:6a:ed:f8:5d:77: 72:f2:17:20:56:45:4d:d2:5c:eb:cd:7a:ed:22:eb: 4d:dc:4f:d4:98:b1:bc:61:b9:91:86:6c:47:58:6c: aa:f1:ce:bf:66:c1:5b:fd:79:06:8e:a6:07:d9:71: 2c:e7:c5:b6:ec:d6:72:fd:d5:87:c7:2b:da:3c:3c: 97:43:1c:00:52:bb:e2:16:6b:ea:9f:4c:46:6a:4f: bf:26:f9:33:25:b4:85:05:77:51:a0:d2:df:83:5b: d9:8b:58:d6:c7:b2:9a:23:15:75:19:a1:bd:bb:85: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6B:8C:A4:A5:FD:B1:EE:07:A1:24:DD:EC:82:A3:B3:00:7F:F3:50 X509v3 Authority Key Identifier: keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f2:db:42:db:b7:df:ec:08:ce:19:53:56:a1:3d:ba:aa:34: b9:54:24:50:b3:cf:93:24:df:6e:62:83:1d:09:4e:fd:dc:4b: 78:dd:4a:6c:39:4d:10:a2:e3:c9:4c:75:bf:f1:ca:07:92:70: 71:60:04:c8:4b:97:6e:f7:b6:e0:20:f5:08:ed:da:3b:d4:ff: 2f:cf:2b:1c:16:71:7f:87:7c:79:99:d9:28:51:ad:92:e9:79: 2f:25:eb:34:d4:d5:63:42:d0:60:9b:00:e9:e5:78:d0:0a:f9: f8:15:72:d8:91:4a:77:0e:ed:b8:ed:a2:86:0e:41:9f:93:64: ee:62:75:1b:36:e1:1f:50:be:bf:f7:88:a6:e6:33:d1:dd:b1: da:4d:1f:32:31:7a:15:4c:08:14:98:f7:53:b6:8e:f2:4f:49: 5a:ed:4e:e4:3f:b4:72:d7:5c:bc:05:b4:bf:78:be:d3:20:98: 23:67:c4:55:17:2f:c1:b9:fb:73:54:28:18:e4:38:73:f8:4e: 85:2d:36:d3:a7:98:b8:54:d9:57:97:57:74:7a:c6:58:f5:ac: a7:d5:fe:81:52:55:17:d5:d3:56:0b:09:f8:8c:79:d9:bf:c9: f4:70:b0:a3:0b:c8:8b:4f:26:37:c0:68:c2:3d:4b:0c:ba:db: 1b:d5:70:75 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MkU1 QjI4QTIwRjRDNkE2MkE0NjEyRjZDNURGQjdBM0Q2NEQ5REVBMB4XDTI1MDUyMzA5 NTc0MVoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoMzg2QjhDQTRBNUZEQjFF RTA3QTEyNERERUM4MkEzQjMwMDdGRjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL27WDocdTaYUC6nWK2dZGDhEJft/JSxTWm6Zw6KVuY4ZHaxQ4S9 PeW/ElmhaLERksyCnbn9dvlcFTmlwUJeAyVmb72ROjRMRuV3X23Rl3RaUBss23Qf 4Pd2FWinuKZGveWRDA9wOFP89wlKN5jX5PZ5QgK3T9cWKPPw7kP9gUsFa1qCkQJC ASXqpq2n3xkQnmrt+F13cvIXIFZFTdJc68167SLrTdxP1JixvGG5kYZsR1hsqvHO v2bBW/15Bo6mB9lxLOfFtuzWcv3Vh8cr2jw8l0McAFK74hZr6p9MRmpPvyb5MyW0 hQV3UaDS34Nb2YtY1seymiMVdRmhvbuFlOkCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQ4a4ykpf2x7gehJN3sgqOzAH/zUDAfBgNVHSMEGDAWgBSC5bKKIPTGpipGEvbF 37ej1k2d6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNjcvZ3VXeWlpRDB4cVlxUmhMMnhkLTNvOVpObmVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZ3VXeWlpRDB4cVlxUmhMMnhkLTNv OVpObmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzY3L2d1V3lpaUQweHFZcVJoTDJ4ZC0zbzlaTm5lby5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ8ttC27ff7AjOGVNWoT26qjS5VCRQs8+TJN9uYoMdCU793Et43Ups OU0QouPJTHW/8coHknBxYATIS5du97bgIPUI7do71P8vzyscFnF/h3x5mdkoUa2S 6XkvJes01NVjQtBgmwDp5XjQCvn4FXLYkUp3Du247aKGDkGfk2TuYnUbNuEfUL6/ 94im5jPR3bHaTR8yMXoVTAgUmPdTto7yT0la7U7kP7Ry11y8BbS/eL7TIJgjZ8RV Fy/BuftzVCgY5Dhz+E6FLTbTp5i4VNlXl1d0esZY9ayn1f6BUlUX1dNWCwn4jHnZ v8n0cLCjC8iLTyY3wGjCPUsMutsb1XB1 -----END CERTIFICATE-----Generated at Thu Jun 5 19:16:14 2025 by rpki-client