$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft File: s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft (raw, json) Hash identifier: v3xELMvEJ1e3b/zkd1XUPf+Zy9OnwOZFRSJ/N3d3Uh0= Subject key identifier: F3:9D:76:7B:D6:A3:65:36:53:1E:A7:1C:74:C6:B4:FF:E4:00:7E:70 Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F Certificate issuer: /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Certificate serial: 34 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft Manifest number: 02C7 Signing time: Sun 16 Feb 2025 17:49:55 +0000 Manifest this update: Sun 16 Feb 2025 17:49:55 +0000 Manifest next update: Mon 03 Mar 2025 17:49:55 +0000 Files and hashes: 1: 2ri6EfIaV_3Z0clg7EtNc1aQxVM.roa (hash: F2n5LwBuRQG775xneXqSpj/fPvXiM2j5Fj8nisaps/A=) 2: ATkduMFWdylzpK1C6Xw_BIUlOcY.roa (hash: h7FvwRdVAfOfL6zpy5y3qBXfp4ZiR+Pc3U1Kc09qP1o=) 3: EFFbleVgO5TTDyXEzfjf6CEsxP4.roa (hash: IWMts76kP6A1s6q8/NO1tMMglpyAQJXLsj8r1rR4o6o=) 4: HcMXuBvFRPmqQ7VxgtsBQawtROE.roa (hash: jXZ9Evxq6QMy75IjKsaxNmmkfEwE0f+SUloAH04ntyA=) 5: Ihw8NKCJL1nOsKFGZ14FcKJRORs.roa (hash: 3HmIL9Hq01DlBPCUCB3efL8WEhSYmF+Es+0ygzPc7t4=) 6: NXnX206RoUI89iJCfXSwvil_hrw.roa (hash: 9MoBosalUndd4OEgfBX4AGlPMf19mHVhWZKtH3XP6IM=) 7: fTcgW8hibOOKCsdPQCgoIJdNXBs.roa (hash: RGc/npokdN4aq5YQsqmgSwYYnYrJAU9g3uMGrin39bM=) 8: hWZKyv4crt0bGDmk-l15WnfM3XU.roa (hash: GK3bHNAfMAbXjErPYZzmCiJMFBNwl/ztfVNs4P6F928=) 9: r_srQtU1P_yJLwPTnA2DQXJnUlY.roa (hash: 5lC4phFGKyqW1l2AQzOBSfuQnQoe7DFuC79u2AWvqns=) 10: s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl (hash: UVCY+Kg2Eztj6U9AE195HBDJvgmGXB8Pm65JUbgFPBA=) 11: vTvjC4EuKvQsxHhIlFowoV8CG8U.roa (hash: e8epzosR9Ts3CLf+wqeCyLd5db0R1fqVLjnYXzqt8qo=) 12: xFOODJPaw8qE8vB-TeBDNGfZJAI.roa (hash: kG2D1twu7Hysk/lRHnRZbNA1gMDcv2Hnw64bKj+SUdo=) 13: xeme3BjouB2YfWRAX4w2OaMVu9s.roa (hash: Dr80ty9tv0jYQMWoMSiWyNybSRV483MJ3mrnDSljb2s=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Validity Not Before: Feb 15 01:32:45 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=F39D767BD6A36536531EA71C74C6B4FFE4007E70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:02:c3:9c:2c:8c:ab:2e:0e:72:bb:dd:43: a7:f9:ff:cb:41:f6:31:ca:f6:11:ca:40:59:49:18: 54:16:e5:08:b1:88:fd:2e:8b:98:30:d3:38:0c:b8: 72:1f:42:cc:f3:16:53:ac:12:5a:e4:96:eb:55:8e: 2c:1d:d7:4d:c3:5e:e9:2b:d4:a4:bc:93:4d:97:24: 2a:96:95:73:05:b3:69:e4:df:f8:ae:4c:ae:e6:a6: 32:bd:90:f4:ae:a7:ac:41:20:46:82:13:ae:b4:d7: 79:05:74:f0:33:31:7f:32:95:81:c7:a7:06:83:e5: 97:db:63:de:03:0c:61:da:5f:87:4b:08:a5:e4:da: d4:62:56:15:a2:84:96:60:b3:a9:02:68:24:f3:d1: 82:55:96:c4:73:71:b5:8b:71:32:74:b0:e4:9c:f1: 16:2f:32:98:4e:6c:e2:cb:ad:d8:17:a7:81:df:88: 8b:29:0e:93:64:76:60:67:d7:9f:15:26:0a:93:cd: 61:4e:1c:52:00:a7:e9:a1:be:4e:96:55:58:7f:37: de:3c:16:40:68:66:3b:3d:ca:08:ce:80:ca:fa:c2: c5:26:23:f0:f6:ee:0c:bc:ad:6c:da:0d:e1:24:2c: e7:33:97:7f:59:ce:d5:a0:b6:ae:4c:76:da:00:ac: 16:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9D:76:7B:D6:A3:65:36:53:1E:A7:1C:74:C6:B4:FF:E4:00:7E:70 X509v3 Authority Key Identifier: keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:74:b8:e7:c4:14:5f:84:1f:75:ae:b2:02:c0:a9:b4:a7:a8: e8:d6:1f:a4:eb:0c:ea:c4:8e:c9:a0:dc:9a:73:13:1e:aa:fe: 5c:00:10:c4:a6:1c:8a:05:83:7a:1f:a0:7d:4f:fa:28:9c:ba: 96:48:13:57:1d:c1:6e:d8:9a:ff:14:ab:bd:6d:95:97:ec:1a: 95:a4:54:55:a3:eb:79:2e:26:cf:35:4d:56:9f:75:b9:b1:ac: 39:6d:2d:ac:90:04:b4:3a:1c:18:94:4e:58:6b:97:6d:b5:dd: 16:d9:8f:eb:b1:06:be:08:5b:9d:d1:54:d4:d2:62:31:79:f2: 18:f5:c1:5f:96:ef:c4:49:c3:52:e1:5a:e2:ed:8b:f2:bd:1c: cc:e7:c3:f7:27:bb:52:2b:63:3b:68:ca:85:28:96:a8:b3:8a: 2a:51:41:27:c9:96:b4:b2:d3:76:a3:ab:9b:99:53:06:ee:a5: c1:15:87:75:e6:ea:09:5d:71:07:75:c4:8d:43:61:7f:c6:bf: 01:09:f0:55:9a:32:41:f7:17:f0:5d:a9:9b:c1:43:8c:a7:f3: 4c:4c:19:15:cd:45:c6:7d:48:d0:a3:17:ef:f6:c6:53:5a:3b: c1:ac:c4:34:be:95:64:35:da:af:8d:47:3d:8e:83:0a:08:34: 14:9a:3b:c6 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzkz NUVFQkI0MjZCNUZGODcyQjE0MDAxNkE0NDQxQ0RFMjM5RjNGMB4XDTI1MDIxNTAx MzI0NVoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoRjM5RDc2N0JENkEzNjUz NjUzMUVBNzFDNzRDNkI0RkZFNDAwN0U3MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMYIAsOcLIyrLg5yu91Dp/n/y0H2Mcr2EcpAWUkYVBblCLGI/S6L mDDTOAy4ch9CzPMWU6wSWuSW61WOLB3XTcNe6SvUpLyTTZckKpaVcwWzaeTf+K5M ruamMr2Q9K6nrEEgRoITrrTXeQV08DMxfzKVgcenBoPll9tj3gMMYdpfh0sIpeTa 1GJWFaKElmCzqQJoJPPRglWWxHNxtYtxMnSw5JzxFi8ymE5s4sut2Bengd+IiykO k2R2YGfXnxUmCpPNYU4cUgCn6aG+TpZVWH833jwWQGhmOz3KCM6AyvrCxSYj8Pbu DLytbNoN4SQs5zOXf1nO1aC2rkx22gCsFpkCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTznXZ71qNlNlMepxx0xrT/5AB+cDAfBgNVHSMEGDAWgBSzk17rtCa1/4crFAAW pEQc3iOfPzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgyL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40am56OC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40 am56OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODIvczVOZTY3UW10Zi1IS3hRQUZxUkVITjRqbno4Lm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFR0uOfEFF+EH3WusgLAqbSnqOjWH6TrDOrEjsmg3JpzEx6q/lwAEMSmHIoF g3ofoH1P+iicupZIE1cdwW7Ymv8Uq71tlZfsGpWkVFWj63kuJs81TVafdbmxrDlt LayQBLQ6HBiUTlhrl2213RbZj+uxBr4IW53RVNTSYjF58hj1wV+W78RJw1LhWuLt i/K9HMznw/cnu1IrYztoyoUolqiziipRQSfJlrSy03ajq5uZUwbupcEVh3Xm6gld cQd1xI1DYX/GvwEJ8FWaMkH3F/BdqZvBQ4yn80xMGRXNRcZ9SNCjF+/2xlNaO8Gs xDS+lWQ12q+NRz2OgwoINBSaO8Y= -----END CERTIFICATE-----Generated at Sun Feb 16 22:11:43 2025 by rpki-client