$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft File: 7hOsz353sCkq4XsFNAIRyPlxdgs.mft (raw, json) Hash identifier: lcAZAxF2Bq03+Z3FsI1xoklqiDUggq+HM/wKic7ap0M= Subject key identifier: A1:57:2E:60:59:AA:59:06:0E:81:A7:95:85:0D:A2:F0:07:C1:3A:A4 Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B Certificate issuer: /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B Certificate serial: 41 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft Manifest number: 0548 Signing time: Mon 02 Jun 2025 14:27:35 +0000 Manifest this update: Mon 02 Jun 2025 14:27:35 +0000 Manifest next update: Tue 17 Jun 2025 14:27:35 +0000 Files and hashes: 1: 1SJbYUd8p8oMen6RPa00IOWV9mE.roa (hash: UDpcHQ+0Abc5mWmR8ULJBoE8aKN+3NO2e+ukT6tgxHE=) 2: 2tfCUV_uz9A4cuYQPukBhWSb95s.roa (hash: rLb9OLvnUAWM0boRqUkiI5TRFDZgMEpErnM1W8cSidY=) 3: 7Iv6J08zRQ7NsO3jJ0oHbfI2bEk.roa (hash: 3LyiamrnzDGpP8Svs8FK2CISDqoO7UiQPpQOYaoqlPA=) 4: 7hOsz353sCkq4XsFNAIRyPlxdgs.crl (hash: UTYE/N5fRewadGpWIPX2mwk1zxZTJbUwWQiNl0p4PoM=) 5: 85Nf2Qq391Vv7HxJ-kHXZY1pjc0.roa (hash: 9QoDjSKM9fHDfVtU1sq5tzZVzvHN7kh4uN+rudSmHfg=) 6: BkA8wyb8wW-wUM7VW6oPScpAa3c.roa (hash: SWTK7ZnqM8yHvUMKBTyOUXDewy5cp5fXqoSaN/6NwFw=) 7: HULAEhTEaPKAAqiwCPVJLRXA4c4.roa (hash: 3MawhDuyFtU+QZk+8/cvyWSFt4HpWdrcXZf0icZpJKg=) 8: PlXujQnIvaBVcgfdZUzMCXjJkDo.roa (hash: aCxl5jvQ7JXLWmmFHmSbXTq8loJZ9FyWSuvvPH4W5oM=) 9: pdXpMRQzmzHKpbd5WN1-fHvtxX4.roa (hash: iFw35uTbq7FkqOf44/VRS8oi7idiiwS4oRODoDjRvoU=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B Validity Not Before: May 26 01:09:50 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=A1572E6059AA59060E81A795850DA2F007C13AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:3b:f4:8c:d7:04:25:47:ed:0d:44:65:3e: 85:54:48:9a:0e:b7:4c:3c:5a:2e:3b:7b:2d:aa:bf: b8:24:01:16:7e:7b:75:fa:9a:36:6d:5e:47:84:d7: 45:a2:e2:60:14:20:1a:2c:0b:a7:77:03:08:b3:b9: fc:32:03:26:23:2e:dd:e3:e8:ed:f9:cf:f0:9f:ff: f2:7d:d0:e8:57:ba:bc:03:05:d4:7c:af:c1:32:ed: fb:b2:cf:01:f1:39:58:ab:aa:6d:df:4d:56:79:89: af:7a:37:44:b4:7c:78:1e:30:66:75:d3:ce:73:fe: 13:2f:b0:3a:0f:e2:28:aa:14:f8:97:66:78:cc:2f: 56:89:6b:58:f8:15:24:c7:f1:2f:df:11:37:a3:ac: 80:48:1d:b8:a4:4d:fb:ff:cc:27:34:1f:c4:b2:ef: 2c:e5:63:b4:ed:30:5e:ac:0b:8a:38:c9:c8:ac:22: eb:b2:43:a4:18:7d:a5:cf:96:37:e4:b3:57:54:85: a3:98:e7:04:a4:13:69:74:8b:24:29:4b:fa:29:f3: c0:1f:98:6c:07:96:cc:90:d4:35:14:aa:f2:f1:d9: 38:07:d3:1f:4e:57:b2:1a:46:c8:ad:3e:ae:88:8d: f9:36:88:85:1c:ab:c6:0e:3d:7f:f6:f4:ef:87:4f: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:57:2E:60:59:AA:59:06:0E:81:A7:95:85:0D:A2:F0:07:C1:3A:A4 X509v3 Authority Key Identifier: keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2d:61:46:e4:46:0e:63:db:1e:ff:fb:e6:38:d3:a8:1c:35: 47:25:68:97:94:8b:4e:73:cb:b3:35:df:a4:c6:51:26:f8:6e: e3:c9:3c:35:0a:17:9a:70:01:02:16:2d:7a:80:40:5a:22:e2: 0f:a7:b3:1c:0c:24:be:df:2e:03:2a:86:a6:9f:59:df:32:ed: 8d:74:1e:81:9e:c3:2b:22:15:52:66:25:75:a3:a3:53:6b:e9: 7a:ad:18:44:65:ee:55:8f:6e:ca:b7:0b:50:ce:75:55:4c:0f: c4:e4:d5:bd:ab:d7:b3:ec:bb:2b:39:39:42:da:7a:b0:d1:ca: a7:cd:fe:9b:1f:01:ba:ce:39:15:e9:96:7e:9c:ad:1e:3c:d0: da:12:9b:f4:a0:0f:2c:87:17:74:8f:4c:f0:59:11:34:7b:2e: 32:49:c8:be:d2:6e:6a:73:5a:b9:83:dc:ee:52:ff:a1:8f:07: cb:32:31:06:66:e4:ba:17:c5:81:01:83:ef:ac:46:56:1a:a6: c4:c2:9c:91:a5:63:47:cd:a6:87:95:40:1f:64:ac:45:3b:18: 1d:e4:02:ea:22:33:39:a3:d8:1b:4b:47:f1:75:d9:d9:03:b3: 61:8b:fe:5a:42:55:67:26:b7:a8:f0:a8:db:1c:54:83:b5:dc: f7:58:f3:53 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTEz QUNDRjdFNzdCMDI5MkFFMTdCMDUzNDAyMTFDOEY5NzE3NjBCMB4XDTI1MDUyNjAx MDk1MFoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoQTE1NzJFNjA1OUFBNTkw NjBFODFBNzk1ODUwREEyRjAwN0MxM0FBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK4pO/SM1wQlR+0NRGU+hVRImg63TDxaLjt7Laq/uCQBFn57dfqa Nm1eR4TXRaLiYBQgGiwLp3cDCLO5/DIDJiMu3ePo7fnP8J//8n3Q6Fe6vAMF1Hyv wTLt+7LPAfE5WKuqbd9NVnmJr3o3RLR8eB4wZnXTznP+Ey+wOg/iKKoU+JdmeMwv VolrWPgVJMfxL98RN6OsgEgduKRN+//MJzQfxLLvLOVjtO0wXqwLijjJyKwi67JD pBh9pc+WN+SzV1SFo5jnBKQTaXSLJClL+inzwB+YbAeWzJDUNRSq8vHZOAfTH05X shpGyK0+roiN+TaIhRyrxg49f/b074dPOK0CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBShVy5gWapZBg6Bp5WFDaLwB8E6pDAfBgNVHSMEGDAWgBTuE6zPfnewKSrhewU0 AhHI+XF2CzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTI0LzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBseGRncy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBs eGRncy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MjQvN2hPc3ozNTNzQ2txNFhzRk5BSVJ5UGx4ZGdzLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEwtYUbkRg5j2x7/++Y406gcNUclaJeUi05zy7M136TGUSb4buPJPDUKF5pw AQIWLXqAQFoi4g+nsxwMJL7fLgMqhqafWd8y7Y10HoGewysiFVJmJXWjo1Nr6Xqt GERl7lWPbsq3C1DOdVVMD8Tk1b2r17Psuys5OULaerDRyqfN/psfAbrOORXpln6c rR480NoSm/SgDyyHF3SPTPBZETR7LjJJyL7SbmpzWrmD3O5S/6GPB8syMQZm5LoX xYEBg++sRlYapsTCnJGlY0fNpoeVQB9krEU7GB3kAuoiMzmj2BtLR/F12dkDs2GL /lpCVWcmt6jwqNscVIO13PdY81M= -----END CERTIFICATE-----Generated at Mon Jun 2 17:26:56 2025 by rpki-client