$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft File: U5vfL-GP84f9A4QsUIGhRe7rHPc.mft (raw, json) Hash identifier: klIZJ7NNL0F1r79qKI817oyNJGDwyvc2gKxVCpvadcU= Subject key identifier: 23:06:FD:64:C5:01:0C:E0:33:EC:76:13:95:42:E8:EF:87:B2:6A:AD Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Certificate serial: 30 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft Manifest number: 02AC Signing time: Sun 16 Feb 2025 17:46:02 +0000 Manifest this update: Sun 16 Feb 2025 17:46:02 +0000 Manifest next update: Mon 03 Mar 2025 17:46:02 +0000 Files and hashes: 1: 4fNGRt2-p5tQCAfAaNNl-Lw5eqw.roa (hash: jTn/zyhHRUemxsd0vCzG0tOcCP2Ct6O6FdMoGjuuTVQ=) 2: 52497COl931g2k2VBJFOt-NY-vg.roa (hash: wyf0GpGMEhlKgtCP4RfuSzWyQ+1LwpQWic9+0RVSgEM=) 3: 6w8IYpbISe_HzHFPBs-h8gjzpH8.roa (hash: HsiScO8zHYefkhs8jfjN8LAaAAuc4DG1sVizBR0w1NM=) 4: D9rtA0soNnb7kB-r6_1lVpcl7h0.roa (hash: vVuu73lAZ23Ollf5QOhlFBwiOjHF1DZG2dmERZCsA68=) 5: F5Cax4UZDcLQKJ2aRJdCuRZTSgQ.roa (hash: n/1i0YgOpn4My8OHpnPryBpentZf+vfUkdDcamlQv08=) 6: IF-RTS3mdbUm9AgziyuVcKAjhR8.roa (hash: KhLg7LBXqfp/DwOm5Q2Dj9hQkvSwPprf7NLcsWkMyME=) 7: LAgcHO-Bk5gwk8n9ulEItxFpCpg.roa (hash: mTVAl4j6lyvDx/bKu3RDytoYzSWpZkBP/h+npUxd26k=) 8: U5vfL-GP84f9A4QsUIGhRe7rHPc.crl (hash: Kjf29lNvY+I26RrB5YLnXtN5kuiCWjkxRzzWA/JnI4M=) 9: VOCDex3RqLU6HTSkplOvhfBLy2w.roa (hash: uYnewaFGxVMNIirSW58KCdkkkKugoluE+d2h3j9OZGA=) 10: b1SK1X5sVs_n2uudFa_lUgkg32Q.roa (hash: UkWOUTWrG3MoUa2bMHRHa3V+oZIfHUJDZg4e0Vv8Fcw=) 11: b_6pn9o6_C98A7nY-eNCIT1ucBo.roa (hash: suM0596vlhHmEnJ9ON9yFiGIugEJ7qfvu2SGhTJsEEI=) 12: g3MBKplLkmrmCq3oB1BTQmWgUDw.roa (hash: 3Zbk6XM08vAOyaZ8SifDII8CVzsnsE/UfDlDSKHB+GQ=) 13: n-RlGacdnwRRtDYgFIxV2mcA7xg.roa (hash: qEPIebvBvpVDrpfjYnjW/QFloOwRv87ui/9o+sezxhM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Validity Not Before: Feb 15 01:33:14 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=2306FD64C5010CE033EC76139542E8EF87B26AAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e7:9c:9b:7b:d4:00:2b:07:28:3d:78:8f:d4: 90:eb:4c:7e:a9:9d:48:33:6e:3f:73:8a:30:d8:eb: 45:23:88:af:47:9e:a1:fa:c8:03:74:ea:ac:bb:8c: 59:bc:9c:aa:b7:fb:65:d6:f4:81:ca:05:45:75:2b: 92:66:ba:4e:7d:61:a3:68:11:96:07:cb:38:9a:88: 8f:9b:d5:c6:90:78:a6:54:71:ad:9e:a2:70:3c:eb: c7:a6:f9:41:a5:4c:98:44:1c:19:40:85:cd:8f:7d: a9:74:8c:1e:c0:04:27:3f:f2:45:0c:d8:60:82:0f: 4f:f3:96:28:b8:ac:f6:dd:8e:7a:5e:bc:30:0c:12: b1:b9:5c:2e:95:a9:68:ef:05:2c:17:92:8b:9f:9c: 98:80:b6:a6:f6:2b:26:a0:58:b4:da:c0:a8:9f:a0: c3:6d:f2:07:6e:0d:1b:24:52:32:46:73:86:df:91: 25:0c:d1:b9:f0:8a:db:95:25:49:28:ee:f0:f3:1a: 4d:d1:29:1b:95:d0:7b:45:9c:b4:81:3a:99:d6:7b: 47:51:a1:2f:51:16:5f:2e:54:e0:97:f1:74:79:cb: 7e:d1:12:26:5b:01:2b:3b:d5:76:9c:5c:46:09:94: 88:7b:c7:1f:74:72:f8:6d:4e:31:56:e8:a7:5c:a7: c4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:06:FD:64:C5:01:0C:E0:33:EC:76:13:95:42:E8:EF:87:B2:6A:AD X509v3 Authority Key Identifier: keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ec:52:8b:94:94:e0:4c:c7:32:0e:4b:1e:03:e5:a0:b2:db: b9:20:48:6c:20:47:b7:78:ab:b8:ae:ce:4b:d3:2d:8f:74:d1: 08:c6:b9:f0:e7:0e:a2:07:94:a6:10:3a:15:48:7f:b2:73:4d: 3b:6e:b2:58:ea:67:4d:ea:49:02:b8:cf:ae:ba:88:0b:82:3f: 61:a0:c2:ad:c6:26:aa:3e:64:0d:f2:70:2a:6b:3b:45:db:7c: 32:ec:d6:fc:52:94:8c:97:3c:4a:9f:6e:ce:4a:26:33:8b:ba: 15:27:77:9f:8b:78:18:15:df:26:64:11:77:e0:ae:41:d8:4c: 33:5c:09:60:87:81:a8:14:a6:ae:d7:40:27:9a:3c:13:0b:1a: 78:99:57:27:e6:59:d6:37:7e:87:25:21:da:80:bd:c4:48:9e: 53:7c:60:bf:5a:dc:fe:dc:63:88:b7:b7:16:29:81:91:a4:e7: 6b:85:97:0f:3c:26:39:f9:89:41:29:8c:4d:f9:15:e8:6a:b8: fb:1b:de:bf:d4:6e:b6:18:00:11:10:93:45:1c:77:c8:68:cc: e3:fa:65:81:46:a2:8e:51:0b:5a:dc:0c:88:6b:95:10:52:42: 36:5e:61:ee:d6:93:ea:39:d0:79:c8:b1:ba:f3:74:b2:ee:16: f6:0c:85:c7 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTI1MDIxNTAx MzMxNFoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoMjMwNkZENjRDNTAxMENF MDMzRUM3NjEzOTU0MkU4RUY4N0IyNkFBRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOjnnJt71AArByg9eI/UkOtMfqmdSDNuP3OKMNjrRSOIr0eeofrI A3TqrLuMWbycqrf7Zdb0gcoFRXUrkma6Tn1ho2gRlgfLOJqIj5vVxpB4plRxrZ6i cDzrx6b5QaVMmEQcGUCFzY99qXSMHsAEJz/yRQzYYIIPT/OWKLis9t2Oel68MAwS sblcLpWpaO8FLBeSi5+cmIC2pvYrJqBYtNrAqJ+gw23yB24NGyRSMkZzht+RJQzR ufCK25UlSSju8PMaTdEpG5XQe0WctIE6mdZ7R1GhL1EWXy5U4JfxdHnLftESJlsB KzvVdpxcRgmUiHvHH3Ry+G1OMVbop1ynxKUCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQjBv1kxQEM4DPsdhOVQujvh7JqrTAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3 ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDYvVTV2ZkwtR1A4NGY5QTRRc1VJR2hSZTdySFBjLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAH3sUouUlOBMxzIOSx4D5aCy27kgSGwgR7d4q7iuzkvTLY900QjGufDnDqIH lKYQOhVIf7JzTTtusljqZ03qSQK4z666iAuCP2Ggwq3GJqo+ZA3ycCprO0XbfDLs 1vxSlIyXPEqfbs5KJjOLuhUnd5+LeBgV3yZkEXfgrkHYTDNcCWCHgagUpq7XQCea PBMLGniZVyfmWdY3foclIdqAvcRInlN8YL9a3P7cY4i3txYpgZGk52uFlw88Jjn5 iUEpjE35FehquPsb3r/UbrYYABEQk0Ucd8hozOP6ZYFGoo5RC1rcDIhrlRBSQjZe Ye7Wk+o50HnIsbrzdLLuFvYMhcc= -----END CERTIFICATE-----Generated at Sun Feb 16 22:32:16 2025 by rpki-client