$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft File: 1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft (raw, json) Hash identifier: olYGuHq36+Yo6gWfK1XpiZ/nJg7xf0uVmmW3Yvg8PVQ= Subject key identifier: E0:F6:6B:23:43:7D:B9:F3:64:7F:23:3A:C5:14:E7:B8:14:D9:04:75 Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A Certificate issuer: /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Certificate serial: 51 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft Manifest number: 0138 Signing time: Sun 10 Nov 2024 15:10:25 +0000 Manifest this update: Sun 10 Nov 2024 15:10:25 +0000 Manifest next update: Mon 25 Nov 2024 15:10:25 +0000 Files and hashes: 1: 1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl (hash: Vnfsvqtu4TdvnCgRHwSlrA2GNbEwyaeP8dB1F0AyWHE=) 2: a_EDNZTeRPpY4YVtX5W6JULtf1M.roa (hash: U6l3w/dsr99RpBJPR0DtMvZyS/zVIbYk9oqtrrXVdbE=) 3: gXuiA1e97M2lsBDNhVxRjHkMNGw.roa (hash: 6gWRhueMxewcN2yPoPCv9AcspoNcMHHI59mUZZFxK/U=) 4: m1D65ylCQgyFrNpcbnF_SQOdO_M.roa (hash: +0S78jw+xGyXF7P2cty9ByEptHhN8wx6zagrobkfPBg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Nov 2024 17:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Validity Not Before: Nov 7 10:28:50 2024 GMT Not After : Nov 7 10:27:51 2025 GMT Subject: CN=E0F66B23437DB9F3647F233AC514E7B814D90475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:7f:5f:22:a8:cb:51:62:86:54:c3:23:46: 0c:9b:c0:e8:ed:59:5c:1d:1e:70:52:d6:a9:28:7a: 83:54:3e:4a:8e:5a:2b:96:b6:28:25:f8:e8:2f:10: 14:ef:35:f8:b8:c0:ee:73:76:ac:d0:e8:63:1b:40: 2e:3e:1d:3d:20:fe:97:0e:9e:2d:84:50:41:c5:d3: c2:6a:f0:ad:29:8e:96:ec:ab:3e:0e:0c:31:2d:b3: dc:2a:9d:64:31:7c:64:f2:f6:33:7f:c8:0c:0a:3d: bf:5d:42:fd:cf:a7:06:da:08:ca:0e:db:6b:5f:ab: af:bd:17:2a:85:b8:d0:2d:12:ae:06:cd:2c:c8:27: 65:4d:2a:5e:5a:8e:ef:44:73:cd:c8:94:c8:e6:95: 25:6e:f7:ec:44:5b:d2:a2:c1:1d:60:7e:2f:a6:dd: c9:95:96:3b:65:2c:74:01:b9:c2:96:62:36:7c:65: 52:1b:f5:21:31:ef:15:a5:fc:e2:81:2d:36:f7:0e: 76:67:eb:d6:9a:09:4f:5a:9b:b5:84:a4:f1:51:d7: d6:8d:8b:7b:a5:f3:a3:4a:51:9e:c4:a7:e6:88:4a: e2:85:1a:8e:51:98:48:2d:da:30:4e:a9:62:0c:9c: f6:39:93:8f:37:9e:43:07:bf:ee:24:df:f0:7f:86: 14:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F6:6B:23:43:7D:B9:F3:64:7F:23:3A:C5:14:E7:B8:14:D9:04:75 X509v3 Authority Key Identifier: keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:04:bb:ab:d6:eb:66:53:ab:aa:a4:28:a6:cb:c4:5d:6e:18: 70:74:cf:42:6b:a4:3b:65:9a:32:79:a3:9b:b2:7b:19:89:3c: fd:92:5e:86:31:03:ea:9d:e9:6a:a8:11:f6:89:85:aa:cf:14: d4:d1:ce:5f:21:52:69:12:80:05:b5:17:e0:de:97:ae:dd:7f: 26:1f:e9:41:a7:27:33:83:ae:d4:15:a3:e0:a6:99:af:9e:3c: 3a:67:c5:1f:1e:9e:0a:4e:d3:8f:03:e3:90:2f:db:0a:17:ae: 78:3c:8e:f2:21:db:1e:fa:08:d6:eb:06:5b:c5:a5:28:cc:a5: e1:17:d5:5b:92:f7:d7:37:a8:93:ac:af:41:26:2a:9a:70:ec: 9e:30:21:07:e1:f8:70:de:7d:b9:eb:34:c6:fb:ce:37:8e:df: d0:e8:d4:02:52:18:ad:07:08:b7:7f:f7:de:74:81:1b:89:65: a8:05:19:25:51:c7:56:19:d1:3b:70:95:df:75:7f:b1:ed:5f: 65:77:f8:5a:96:38:d6:dc:ec:67:82:4c:ff:f9:bc:49:ea:90: 0d:3c:87:29:6f:3e:b9:55:7b:e6:1c:49:92:ec:ae:69:d5:82: 6a:9d:01:ea:9f:09:be:54:b9:8b:16:b9:87:c7:4e:91:2e:39: d0:b2:7c:e4 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjkw MEYxRTMxMjZFNjA5RUY0RjFBMEZCODU1RUI0REU0RTNBMThBMB4XDTI0MTEwNzEw Mjg1MFoXDTI1MTEwNzEwMjc1MVowMzExMC8GA1UEAxMoRTBGNjZCMjM0MzdEQjlG MzY0N0YyMzNBQzUxNEU3QjgxNEQ5MDQ3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALu2f18iqMtRYoZUwyNGDJvA6O1ZXB0ecFLWqSh6g1Q+So5aK5a2 KCX46C8QFO81+LjA7nN2rNDoYxtALj4dPSD+lw6eLYRQQcXTwmrwrSmOluyrPg4M MS2z3CqdZDF8ZPL2M3/IDAo9v11C/c+nBtoIyg7ba1+rr70XKoW40C0SrgbNLMgn ZU0qXlqO70RzzciUyOaVJW737ERb0qLBHWB+L6bdyZWWO2UsdAG5wpZiNnxlUhv1 ITHvFaX84oEtNvcOdmfr1poJT1qbtYSk8VHX1o2Le6Xzo0pRnsSn5ohK4oUajlGY SC3aME6pYgyc9jmTjzeeQwe/7iTf8H+GFGECAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTg9msjQ32582R/IzrFFOe4FNkEdTAfBgNVHSMEGDAWgBTWkA8eMSbmCe9PGg+4 VetN5OOhijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODk3LzFwQVBIakVtNWdudlR4b1B1RlhyVGVUam9Zby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFwQVBIakVtNWdudlR4b1B1RlhyVGVU am9Zby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84OTcvMXBBUEhqRW01Z252VHhvUHVGWHJUZVRqb1lvLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJYEu6vW62ZTq6qkKKbLxF1uGHB0z0JrpDtlmjJ5o5uyexmJPP2SXoYxA+qd 6WqoEfaJharPFNTRzl8hUmkSgAW1F+Del67dfyYf6UGnJzODrtQVo+Cmma+ePDpn xR8engpO048D45Av2woXrng8jvIh2x76CNbrBlvFpSjMpeEX1VuS99c3qJOsr0Em Kppw7J4wIQfh+HDefbnrNMb7zjeO39Do1AJSGK0HCLd/9950gRuJZagFGSVRx1YZ 0Ttwld91f7HtX2V3+FqWONbc7GeCTP/5vEnqkA08hylvPrlVe+YcSZLsrmnVgmqd AeqfCb5UuYsWuYfHTpEuOdCyfOQ= -----END CERTIFICATE-----Generated at Sun Nov 10 19:15:51 2024 by rpki-client on console-ams.rpki-client.org