$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft File: HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft (raw, json) Hash identifier: 9PR0/JWPMIRS37q8JU3q9fQ277aeFZrH2qJ1Oz6HiIQ= Subject key identifier: 6C:AD:96:DC:D0:75:CD:5A:F9:6A:4F:C8:4B:0B:AE:0E:2B:D6:10:70 Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B Certificate issuer: /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B Certificate serial: 3B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft Manifest number: 0871 Signing time: Wed 22 Oct 2025 15:28:03 +0000 Manifest this update: Wed 22 Oct 2025 15:28:03 +0000 Manifest next update: Thu 06 Nov 2025 15:28:03 +0000 Files and hashes: 1: 3CJYWmE_6Q8aHaYPkyVoial1Ilw.roa (hash: aPaR7Ck8WLT8HEPQeWkKhXDMxP0/omdHDZUhVz4BDdo=) 2: 4W9lf-wM2k3x5c2XQlLyerU9qEk.roa (hash: ch6fNeFpzyI4pxVZNyQXZqcTb+7gyMrQMnlSifOcoPQ=) 3: GE0meQRJLmOO_c5f13Ms6HdXNdQ.roa (hash: vv0rNyucCA/o0J0JXnvPS3K++WEDxkLh5pdw+XUvHUY=) 4: GSB61T4LaF8TEfuCu6rmOXGnoFw.roa (hash: 5zDTf/i90wT6aj2j+y41WqEjTLyc0bUyF1AtalDSof0=) 5: HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl (hash: /flcXbdW0l2cVcjbjx0CVc3sm/z1A1USa9hQPFCqEaI=) 6: PYsmhfnDLAm0fvFpvC9v8vBqEfo.roa (hash: MXKmPBGTejsyCq91YnsAMgO5ROtpw1+QT6ZWE66VAPw=) 7: bKF-H9TXIpugKjGd00XviQjPhVk.roa (hash: iYbvi/rPAEPlSdGiWEl313DptgiaKiWf3AjrLTTH5EI=) 8: tVQHM3_tvlE7l8ycGZ2JOeBtu7E.roa (hash: N4KG3gTOGo7Zd83+VCkS921nAuZGli8Qz7MLBCCr5Qw=) 9: z1Wa2Ebe0z6vp7XPpYuY7Tpt7A0.roa (hash: GSSF5QzeJk2DRTRQj+iFqBjfiesN2N012msnN4UywWI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 16:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B Validity Not Before: Oct 15 01:31:20 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=6CAD96DCD075CD5AF96A4FC84B0BAE0E2BD61070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7d:89:f0:69:7a:1f:58:dd:27:ee:25:a6:1d: 5d:f5:b8:26:03:1c:09:4a:d2:4b:96:83:70:09:df: c2:c8:01:78:cd:95:e4:1e:60:68:f0:be:a6:91:27: 2c:6e:8a:35:82:b1:8a:61:a9:7b:f0:7c:1b:0c:fd: f8:f1:6b:79:02:c6:51:74:d1:b7:b0:3e:12:0b:c4: a1:2e:56:3c:56:56:74:d1:26:62:aa:41:53:f9:c2: b7:49:4e:fc:28:f6:0a:95:30:3b:d8:d1:36:eb:1f: 0e:ed:0f:95:7f:3c:c8:06:47:4d:09:7d:23:a9:c6: 4b:d7:be:95:96:8f:32:88:f4:d2:67:eb:de:5f:dc: 7e:1f:c1:bc:a7:1a:96:6c:99:d7:1c:8b:45:1e:b3: e2:47:b2:7f:b1:6f:99:25:a9:3c:ab:30:2f:e5:45: 84:ed:4a:11:1c:81:45:b5:73:8a:42:b0:80:0c:a4: ff:26:27:67:c3:7e:4f:cf:39:90:ef:eb:e8:a4:55: 2f:c8:20:9d:5d:0c:3a:3c:40:1c:5c:a4:03:fd:f4: 61:75:f6:8a:23:c7:1a:88:80:73:cc:87:ff:6a:0e: 24:18:d0:14:96:37:3e:8a:eb:5f:d4:75:e3:8e:ce: 6c:eb:cf:75:a9:22:3b:03:8e:9d:51:f2:bf:d3:6a: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AD:96:DC:D0:75:CD:5A:F9:6A:4F:C8:4B:0B:AE:0E:2B:D6:10:70 X509v3 Authority Key Identifier: keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:5d:aa:da:f0:3d:45:51:f5:b0:cc:ad:02:1c:32:6c:ce:60: b4:dc:5d:d3:77:92:37:13:30:62:6c:bb:29:90:20:53:c8:dd: a0:59:36:e9:e2:89:46:f8:12:88:8d:d4:a3:00:93:0c:fe:b1: 90:77:36:74:17:50:55:f9:8e:a9:86:bb:22:06:3f:4c:6c:ff: 41:5a:76:bb:9c:6a:6d:0b:b3:47:be:00:97:20:96:22:5c:f0: 2f:3a:18:ea:2d:23:c7:07:11:37:3b:81:00:92:59:ab:5b:4a: a3:9f:ff:78:e2:cf:64:db:73:c3:af:f5:13:58:54:bc:be:28: 54:11:95:9f:e9:8a:3b:43:84:ae:43:5d:4a:07:2b:e3:45:0f: b3:17:b9:8e:8f:c7:61:e1:08:6a:50:dd:23:7a:e6:82:05:3b: 77:11:d9:c6:41:8d:c2:4d:e7:33:e7:28:a5:87:33:8c:6f:48: c3:c8:1c:04:e1:9d:2e:b3:24:ab:b5:a3:9a:91:07:25:44:69: 49:5a:86:d3:af:39:0f:6e:d8:08:17:7a:d4:e3:11:54:51:ab: 39:a9:81:01:87:7c:0a:74:a3:5c:58:58:0a:ee:92:1f:a4:b2: 86:8f:bb:d1:45:2b:9f:6a:98:3d:69:2c:2f:32:87:c1:03:ae: 18:dd:d0:99 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjI4 OEEyMjg1MDI0RTE0OEEyN0U0NUZFNUFDOTBEMjhCMzAzRDRCMB4XDTI1MTAxNTAx MzEyMFoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNkNBRDk2RENEMDc1Q0Q1 QUY5NkE0RkM4NEIwQkFFMEUyQkQ2MTA3MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMh9ifBpeh9Y3SfuJaYdXfW4JgMcCUrSS5aDcAnfwsgBeM2V5B5g aPC+ppEnLG6KNYKximGpe/B8Gwz9+PFreQLGUXTRt7A+EgvEoS5WPFZWdNEmYqpB U/nCt0lO/Cj2CpUwO9jRNusfDu0PlX88yAZHTQl9I6nGS9e+lZaPMoj00mfr3l/c fh/BvKcalmyZ1xyLRR6z4keyf7FvmSWpPKswL+VFhO1KERyBRbVzikKwgAyk/yYn Z8N+T885kO/r6KRVL8ggnV0MOjxAHFykA/30YXX2iiPHGoiAc8yH/2oOJBjQFJY3 PorrX9R1447ObOvPdakiOwOOnVHyv9NqMEMCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBRsrZbc0HXNWvlqT8hLC64OK9YQcDAfBgNVHSMEGDAWgBQfKIoihQJOFIon5F/l rJDSizA9SzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzEzL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9zd1BVcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9z d1BVcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83MTMvSHlpS0lvVUNUaFNLSi1SZjVheVEwb3N3UFVzLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAldqtrwPUVR9bDMrQIcMmzOYLTcXdN3kjcTMGJsuymQIFPI3aBZNuniiUb4 EoiN1KMAkwz+sZB3NnQXUFX5jqmGuyIGP0xs/0Fadrucam0Ls0e+AJcgliJc8C86 GOotI8cHETc7gQCSWatbSqOf/3jiz2Tbc8Ov9RNYVLy+KFQRlZ/pijtDhK5DXUoH K+NFD7MXuY6Px2HhCGpQ3SN65oIFO3cR2cZBjcJN5zPnKKWHM4xvSMPIHAThnS6z JKu1o5qRByVEaUlahtOvOQ9u2AgXetTjEVRRqzmpgQGHfAp0o1xYWArukh+ksoaP u9FFK59qmD1pLC8yh8EDrhjd0Jk= -----END CERTIFICATE-----Generated at Wed Oct 22 18:22:54 2025 by rpki-client