$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft File: BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft (raw, json) Hash identifier: kI1AQXy+ZJSpQdkCw8gj6RRVFI72Zfv3kG9swVqu8AY= Subject key identifier: 27:15:D4:C7:64:A9:9A:AE:4D:95:45:5E:56:66:40:28:A0:E3:CE:45 Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: 9A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft Manifest number: 0395 Signing time: Sun 16 Feb 2025 17:53:02 +0000 Manifest this update: Sun 16 Feb 2025 17:53:02 +0000 Manifest next update: Mon 03 Mar 2025 17:53:02 +0000 Files and hashes: 1: 0yO7Y9DPofFvJxywdLCmjgxvwgc.roa (hash: AhXaO70d/WfP9QnrExkd9QWfwYAxrXrg8IDuePSuGCw=) 2: 2zinTuMIZL5lgGAcCpLQIrNVBhg.roa (hash: /zYjlL2IN82GCgUnl+2cQ8t8MCnxRE9WWOG/cxKbkfU=) 3: 5u3rw1GQyWIz0eojHBEnuas7eG4.roa (hash: PYXJQ1C9TqHNcF6BOU+B+JGNiZOiqezJTiMu6/cE3bI=) 4: 6eHGfGLe-TqwyQKLkw1MevbIA0c.roa (hash: GGuCAFfizkKtjyvY5Dm2vwF8bBDLxRED9qBYDhj5/ak=) 5: 9oYd5g-qig8jdZADHL0rkSpI7yQ.roa (hash: CE+13neiAOgNEbnWmAzu/38TSXtXmAsPBex5k6JuA94=) 6: BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl (hash: CE4M/qWjAr0RPX1nMJjmpmP1pZbwmRDxmO3xHi4dArQ=) 7: BcMTJj0i_b8wi6rbUZoRhvhs7bs.roa (hash: wkp8jCWMGS/oET4RWCnYrWZiq8mVa0AwpzDk2vd50Nk=) 8: G6LBSx-QZb1yFmxsv8awKmd7pKw.roa (hash: kw/IqeKsZJchdRq76UxUKxAEtYOX6Cr6rTdei9tIaGI=) 9: TX6pU3PQMOquwh3eIGhMOEUX-tI.roa (hash: 1LqEpiPEQMLFbHyVil60bC+WpI9UxwDsp1/rpZfarUU=) 10: URkAARRYKF5msftEx9z2KdBUQkc.roa (hash: 4vUM/KJo7nI/bfEOT2KIsRLOC/5iw5PjR/KiPsuBzNA=) 11: V0lIEzUaTHmFKJEKFTuetCpJm_s.roa (hash: 6znOBloPeSZMG1ShYh79xDg4QMinRkcS2VKosfI6EFg=) 12: V1q3Yh-pHMsEB-xLtxVnx60RWd8.roa (hash: 2faih0O/raDLRO8TgzOgtLWo6yIhEuJOMDtn7p12A1g=) 13: iFI2mUdFnt87YLASDUgPPQ443P0.roa (hash: 8EhuWE8sx66/hFWLaoPBQ3mkiI+EPdGSU4gXtsAessw=) 14: nbJhDqh0Cp0Sh3iXEAS7-TMF9_U.roa (hash: eQcQgtf8UdsxuLrQ2Ngxm4PoA10/NI8nLPszhuZTYws=) 15: nh3XWMTyBfqKJZT4CJCvykqxK9k.roa (hash: fZ11XMECb73GPOOfIJejuoGsDLNytDLols9FNwZS1RA=) 16: nj0oETTYDBMPnBW_0OnHBHaN_3Q.roa (hash: HAesfNykLiVc03WIXob8fHJ+cx+ud5q38IbXPiSC9LI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Feb 15 01:35:31 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=2715D4C764A99AAE4D95455E56664028A0E3CE45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:95:0b:b8:b4:39:c8:7d:ce:a8:84:46:5f: 8a:d4:14:92:8f:67:6c:cf:ae:04:87:e8:b2:fe:0e: 3d:ac:96:c5:22:dc:2a:80:44:a0:79:71:f5:03:bd: 6c:91:d6:88:44:60:6d:4b:02:fc:b7:1a:9f:71:5d: e2:58:a2:a7:5c:6f:c6:d5:55:8a:73:34:ae:fa:f3: 03:d9:b2:54:1c:b5:65:48:5b:bc:dc:83:6b:a0:58: 54:cf:b1:95:69:f7:6d:6f:e5:f7:6a:35:d0:a6:4c: ac:a4:9a:45:5b:ee:09:5a:6f:50:38:71:53:d3:ba: ad:d8:14:4c:a4:1a:e9:3d:60:bd:ca:44:1d:99:e7: 53:6b:90:f2:9c:7a:74:17:34:49:bf:6f:87:85:bd: 47:1e:bb:ad:41:a6:0b:64:d6:5e:d7:74:fa:eb:11: 63:06:02:a0:9f:55:1f:4c:72:b7:3b:9e:0b:40:ee: 2d:a5:2e:30:1c:27:d8:85:d9:f9:b5:17:86:81:10: af:36:86:6a:27:5a:81:0e:97:b2:06:c5:2b:25:56: 9e:6e:9a:85:a6:57:8c:d7:19:f1:ed:6c:1f:55:cb: 1e:4d:81:25:4d:c9:66:a8:9f:d0:49:b2:d9:59:e0: 8f:cc:2e:59:f7:54:d6:76:30:04:aa:16:49:82:de: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:15:D4:C7:64:A9:9A:AE:4D:95:45:5E:56:66:40:28:A0:E3:CE:45 X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3b:46:d5:51:f9:1f:35:d2:66:8c:de:a6:4e:c5:c3:f2:b6: e4:2a:e7:0a:20:e3:c8:3f:fb:93:28:92:49:7c:f5:b9:53:8b: 8a:fb:c5:cc:60:b2:20:36:ba:33:ed:7c:9f:ea:ac:a1:f5:cc: 04:6b:25:15:24:bb:74:e4:b3:f5:65:f6:81:6e:62:bb:79:92: 4f:b6:fe:5c:9c:4f:65:53:be:09:61:6b:f8:d2:01:11:c0:36: 15:16:88:9f:d8:4c:ab:22:95:7d:48:93:26:c9:a4:98:9b:80: ef:75:dd:bc:8c:b5:89:7a:c8:c1:8f:d1:9d:06:47:94:3c:84: 0f:23:81:2b:13:fb:b7:0a:20:b2:2d:40:8d:f0:4c:d0:76:8f: f3:df:6d:54:97:5f:22:d5:91:f9:41:98:b4:c2:04:a8:41:91: 78:87:10:e7:83:17:60:db:4a:99:c4:05:7c:1a:56:3d:81:46: 92:78:cb:9c:ce:3e:0b:24:5f:14:8c:c4:2e:f4:9c:cc:c5:42: c5:67:63:2e:91:14:61:d2:d5:c6:b2:4a:bf:59:6d:b2:7f:f4: 00:cc:d3:c9:38:0c:b6:c4:8d:54:1f:43:4a:ec:b3:fc:f1:b2: a5:73:2c:90:2f:95:59:90:bd:de:cd:0d:1c:d0:db:18:1a:36: d1:fa:8c:b0 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgICAJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNTAyMTUw MTM1MzFaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI3MTVENEM3NjRBOTlB QUU0RDk1NDU1RTU2NjY0MDI4QTBFM0NFNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrr5ULuLQ5yH3OqIRGX4rUFJKPZ2zPrgSH6LL+Dj2slsUi3CqA RKB5cfUDvWyR1ohEYG1LAvy3Gp9xXeJYoqdcb8bVVYpzNK768wPZslQctWVIW7zc g2ugWFTPsZVp921v5fdqNdCmTKykmkVb7glab1A4cVPTuq3YFEykGuk9YL3KRB2Z 51NrkPKcenQXNEm/b4eFvUceu61Bpgtk1l7XdPrrEWMGAqCfVR9Mcrc7ngtA7i2l LjAcJ9iF2fm1F4aBEK82hmonWoEOl7IGxSslVp5umoWmV4zXGfHtbB9Vyx5NgSVN yWaon9BJstlZ4I/MLln3VNZ2MASqFkmC3thnAgMBAAGjggI7MIICNzAdBgNVHQ4E FgQUJxXUx2Spmq5NlUVeVmZAKKDjzkUwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v /yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9CTXBfTmE4YWoxSlhXcF92X3lIRXBIQ0EzZm8ubWZ0MEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmztG1VH5HzXSZozepk7Fw/K25CrnCiDjyD/7kyiSSXz1uVOLivvFzGCyIDa6 M+18n+qsofXMBGslFSS7dOSz9WX2gW5iu3mST7b+XJxPZVO+CWFr+NIBEcA2FRaI n9hMqyKVfUiTJsmkmJuA73XdvIy1iXrIwY/RnQZHlDyEDyOBKxP7twogsi1AjfBM 0HaP899tVJdfItWR+UGYtMIEqEGReIcQ54MXYNtKmcQFfBpWPYFGknjLnM4+CyRf FIzELvSczMVCxWdjLpEUYdLVxrJKv1ltsn/0AMzTyTgMtsSNVB9DSuyz/PGypXMs kC+VWZC93s0NHNDbGBo20fqMsA== -----END CERTIFICATE-----Generated at Sun Feb 16 22:28:42 2025 by rpki-client