$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft File: zgXnGt3sD442G7VasQP1PThWxgo.mft (raw, json) Hash identifier: qMrqUc6LoLzD4Nl4+jUSkqpUCjVul+opORl36dLQL0w= Subject key identifier: BB:89:C0:2D:63:E5:1E:AD:61:74:D3:61:08:C1:A9:29:38:DB:16:31 Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A Certificate issuer: /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Certificate serial: 24 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft Manifest number: 06D9 Signing time: Wed 20 Aug 2025 23:29:51 +0000 Manifest this update: Wed 20 Aug 2025 23:29:51 +0000 Manifest next update: Thu 04 Sep 2025 23:29:51 +0000 Files and hashes: 1: -9JaxDwswvAQjLzAyiNRz8teJUk.roa (hash: dD0c/M+2IH7N5f3WVM7gw3CAfv7/BaSsrCe8z7BT1RI=) 2: H_2Z0rQ4lFVS_t_4vqcd9QVR6_k.roa (hash: vVgSBCNMSjCvZXvXhszjUZaYYnZLOpxOv2+H1spliCA=) 3: IxZgprQlYFPc4O_aLN9eNDjwQc4.roa (hash: px+tfL7aBBNwfCvHQ8qdV0JTnvPL+/5lwzfROahJBZI=) 4: JPJ1dNzJ6LMzJflQvKxCMd_Sm-I.roa (hash: nLbNOJNWQ+vk+Lj7DDY4VcqW2h8sreZ0KTwkzvjd6H8=) 5: qkutPpnEcKBM92MkdsKCn8d9Qns.roa (hash: Hb6ZtPvMy1PQaa6eYkShP2BgH9e8SRRTRRl8SOn7e20=) 6: zgXnGt3sD442G7VasQP1PThWxgo.crl (hash: KibEOL6XP3XHX2je6xcBmlam4xaxS0t1ESelPboZ6ZM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Validity Not Before: Aug 15 01:42:48 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=BB89C02D63E51EAD6174D36108C1A92938DB1631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:8b:f6:1d:a0:50:6d:4a:b7:b8:f4:05:42: ab:f1:61:76:e7:81:24:bd:b0:b1:f8:33:b7:70:f5: b2:34:10:0f:c1:39:c1:42:01:16:cc:89:a7:ae:ae: b2:a0:6c:0e:71:6a:ec:20:2c:8d:e8:a0:f6:96:5d: 17:64:c5:e6:b0:03:03:cf:cb:4c:ca:3d:a8:c8:23: ba:83:5c:37:8a:39:6a:45:54:66:dc:c8:49:96:72: f0:7f:aa:18:26:18:16:eb:a7:c9:97:ab:e2:63:24: be:85:82:df:c6:d4:2e:83:53:2f:d7:86:d5:23:31: 76:8c:d7:04:8e:81:12:65:4d:3e:15:e5:4d:03:3f: 9c:0b:0c:c8:4a:9d:45:66:42:10:94:5a:f3:77:5a: 3c:a9:8e:f3:fa:59:a8:a4:81:6d:b5:55:23:87:28: dd:29:6b:1c:1e:25:ea:bb:61:eb:d7:0f:95:e4:81: e4:03:2c:f8:d1:70:2f:54:8b:e9:c3:6b:d8:30:b2: 8b:4d:02:e9:ca:e0:53:7f:31:43:12:f1:2c:9e:81: ba:80:3a:13:59:1f:e9:98:9a:b0:56:48:1a:af:70: 29:5f:3e:ae:91:73:98:40:c0:5a:8a:d7:3f:db:52: 00:44:96:fd:bd:d3:c1:6b:df:1c:11:e2:2f:57:68: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:89:C0:2D:63:E5:1E:AD:61:74:D3:61:08:C1:A9:29:38:DB:16:31 X509v3 Authority Key Identifier: keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:8c:dd:49:ff:85:db:5f:cc:46:44:8c:8a:67:73:f3:32:ba: e5:0c:b6:5d:e1:2a:b5:ec:51:fe:6c:78:b4:ee:ea:5d:2c:67: d2:e6:4f:02:97:86:32:7b:cc:f4:ec:17:24:a5:81:86:e1:ce: 8a:c2:9c:c1:c5:1a:db:01:03:06:83:63:e4:f8:7a:24:a9:f7: 8b:8a:a4:2e:e1:15:61:a0:c8:8b:d5:fc:04:6a:b0:31:3c:c4: 86:0f:96:d9:c8:61:50:b2:88:0b:7d:ed:cd:5a:2f:e4:35:14: 27:3b:4b:43:dc:92:cd:cf:82:0f:5e:0e:52:fc:3a:9a:2b:62: 47:9f:0e:0d:11:5f:6c:24:7f:f5:77:db:0a:d1:93:c5:78:41: 78:e3:ac:c4:f3:4b:61:29:35:0f:94:02:be:97:78:20:cf:f0: 61:e8:e3:e3:bf:62:71:94:d3:60:48:1f:c2:24:0a:ff:9c:87: 91:30:b7:c6:af:a0:02:d9:e9:21:98:73:83:66:38:4c:10:03: bb:a5:97:33:68:1d:7d:6e:ca:7a:64:17:66:00:c6:48:df:78: 6b:ed:10:af:6d:e8:c6:8a:cb:3a:db:c8:9f:26:8e:a6:1a:3b: 61:64:4d:4e:7e:24:8a:47:56:04:99:5b:47:3f:bc:ec:7a:bf: d7:d8:82:d7 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRTA1 RTcxQURERUMwRjhFMzYxQkI1NUFCMTAzRjUzRDM4NTZDNjBBMB4XDTI1MDgxNTAx NDI0OFoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQkI4OUMwMkQ2M0U1MUVB RDYxNzREMzYxMDhDMUE5MjkzOERCMTYzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKxYi/YdoFBtSre49AVCq/FhdueBJL2wsfgzt3D1sjQQD8E5wUIB FsyJp66usqBsDnFq7CAsjeig9pZdF2TF5rADA8/LTMo9qMgjuoNcN4o5akVUZtzI SZZy8H+qGCYYFuunyZer4mMkvoWC38bULoNTL9eG1SMxdozXBI6BEmVNPhXlTQM/ nAsMyEqdRWZCEJRa83daPKmO8/pZqKSBbbVVI4co3SlrHB4l6rth69cPleSB5AMs +NFwL1SL6cNr2DCyi00C6crgU38xQxLxLJ6BuoA6E1kf6ZiasFZIGq9wKV8+rpFz mEDAWorXP9tSAESW/b3TwWvfHBHiL1doOG0CAwEAAaOCAjswggI3MB0GA1UdDgQW BBS7icAtY+UerWF002EIwakpONsWMTAfBgNVHSMEGDAWgBTOBeca3ewPjjYbtVqx A/U9OFbGCjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzMvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhXeGdvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhX eGdvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMzL3pnWG5HdDNzRDQ0Mkc3VmFzUVAxUFRoV3hnby5tZnQwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCSjN1J/4XbX8xGRIyKZ3PzMrrlDLZd4Sq17FH+bHi07updLGfS5k8Cl4Yye8z0 7BckpYGG4c6KwpzBxRrbAQMGg2Pk+HokqfeLiqQu4RVhoMiL1fwEarAxPMSGD5bZ yGFQsogLfe3NWi/kNRQnO0tD3JLNz4IPXg5S/DqaK2JHnw4NEV9sJH/1d9sK0ZPF eEF446zE80thKTUPlAK+l3ggz/Bh6OPjv2JxlNNgSB/CJAr/nIeRMLfGr6AC2ekh mHODZjhMEAO7pZczaB19bsp6ZBdmAMZI33hr7RCvbejGiss628ifJo6mGjthZE1O fiSKR1YEmVtHP7zser/X2ILX -----END CERTIFICATE-----Generated at Thu Aug 21 04:31:00 2025 by rpki-client