$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft File: mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft (raw, json) Hash identifier: h73vg9Z+UX9MNEc+3YS/bcwzHXdmsSD1dM7NRJbOwtY= Subject key identifier: 25:57:C2:B6:7D:5C:EC:87:35:6B:C7:AD:6F:62:9B:95:BE:83:67:AC Authority key identifier: 98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0 Certificate issuer: /CN=989E82672C98A627120ABA72DEBEBE22015849A0 Certificate serial: 22 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft Manifest number: 0520 Signing time: Tue 03 Jun 2025 20:46:41 +0000 Manifest this update: Tue 03 Jun 2025 20:46:41 +0000 Manifest next update: Wed 18 Jun 2025 20:46:41 +0000 Files and hashes: 1: 2GlfNZemEu2k0jV-73uoiytXxNs.roa (hash: EpU8NDYPGXDeOveduAY4GQ6T5O7u0+z7HF6PjjVaaos=) 2: Z_gtlGulRhAjU0l0frDIM-3rfds.roa (hash: ci5tfJ1GnbJdXnUKb8rNgK4TTH8m1nMX83yu6hiKa1I=) 3: mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl (hash: osPQjARp6oQ06m9taHOND+UOWJSSp7R8/ZWOx8cOy9Y=) 4: udt0lG_tZB8R18vtGykImhucsvs.roa (hash: tyC2IIQtm/GLDnuBpwDIHuOXwTwrNeAvzdHDDhR0PUg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 21:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989E82672C98A627120ABA72DEBEBE22015849A0 Validity Not Before: May 23 10:01:44 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=2557C2B67D5CEC87356BC7AD6F629B95BE8367AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:1e:da:87:2a:57:8d:99:1e:4a:30:7b:f2: 7e:15:f7:e0:68:3f:bf:c0:a7:7e:44:35:bb:7d:d3: da:fc:e9:44:c5:90:ed:49:8a:bb:6f:4d:58:e2:55: 4f:72:86:bf:51:97:af:b1:96:39:07:28:aa:9d:30: 1f:01:fd:98:f7:a1:16:8f:1e:b1:b9:1e:67:2f:7f: 89:a3:48:34:20:bf:7f:69:fb:6f:b5:fe:96:9b:8b: 6d:92:ab:ce:02:48:bf:09:3f:6b:e9:33:26:c8:18: 0c:83:24:70:dd:be:eb:63:7f:ab:b5:b6:1a:2b:ff: cf:6e:bd:bc:68:6f:d6:1d:eb:fe:40:27:77:a1:d6: 1d:2b:a0:17:f8:12:8c:e8:01:c1:c5:5a:61:64:e0: 0e:8e:15:de:ae:a6:ee:16:9d:ed:d1:02:3b:43:19: 9f:12:78:1f:93:1b:3a:80:52:81:a0:3b:78:c6:57: 2a:7f:d9:af:a6:0b:68:9a:5d:d4:f7:4c:d4:98:9e: 16:b9:b3:4d:56:91:a4:d9:00:4f:cb:17:b3:ec:9d: 10:f1:ab:b2:88:fc:74:d9:47:22:98:57:ec:5b:f6: 81:a6:b9:96:39:25:aa:8d:3c:1e:20:54:be:38:b5: 58:bb:7e:ce:b6:0e:85:74:56:32:15:47:ad:f0:03: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:57:C2:B6:7D:5C:EC:87:35:6B:C7:AD:6F:62:9B:95:BE:83:67:AC X509v3 Authority Key Identifier: keyid:98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:7a:ed:24:20:32:bd:3a:11:18:d6:1e:41:6c:33:96:6f:1e: e0:6e:04:2b:58:6b:60:25:5d:e9:62:cd:9d:70:bf:ca:bc:ed: 57:73:c0:73:08:6a:39:d3:cb:53:29:7d:35:68:c1:10:82:f9: 06:3d:60:e8:1d:77:fd:62:73:17:d1:b0:1a:c1:bd:fb:76:3c: 13:55:97:52:4f:d2:b9:12:c4:ee:93:b8:b3:fc:ee:06:91:12: ca:45:37:30:b4:56:c8:be:76:69:ce:37:17:b2:ec:f9:0c:10: 52:8e:fa:b6:55:3b:16:52:7a:35:61:38:21:34:cf:29:60:84: b4:b1:49:fe:ec:0f:14:41:09:39:7f:5d:0e:4a:5a:01:19:6e: 69:f8:70:a8:9e:9e:a3:a1:26:1e:77:ee:96:37:64:09:01:08: bd:9a:bf:d3:11:39:94:e3:26:dc:a0:9a:77:91:f1:93:4c:61: 5f:b4:68:27:9a:a6:e2:16:07:c2:6d:bd:03:49:fa:47:62:b5: f2:bc:66:9b:59:b6:a6:b3:d0:4e:f2:fb:5a:63:bb:f9:22:a2: 10:15:db:ed:8b:ed:28:7a:f2:70:1d:d3:e7:26:32:86:32:4c: bc:1f:61:21:2c:59:8b:da:38:87:62:dd:76:d5:a9:36:a2:54: 14:2a:8d:e1 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5ODlF ODI2NzJDOThBNjI3MTIwQUJBNzJERUJFQkUyMjAxNTg0OUEwMB4XDTI1MDUyMzEw MDE0NFoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoMjU1N0MyQjY3RDVDRUM4 NzM1NkJDN0FENkY2MjlCOTVCRTgzNjdBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMKzHtqHKleNmR5KMHvyfhX34Gg/v8CnfkQ1u33T2vzpRMWQ7UmK u29NWOJVT3KGv1GXr7GWOQcoqp0wHwH9mPehFo8esbkeZy9/iaNINCC/f2n7b7X+ lpuLbZKrzgJIvwk/a+kzJsgYDIMkcN2+62N/q7W2Giv/z269vGhv1h3r/kAnd6HW HSugF/gSjOgBwcVaYWTgDo4V3q6m7had7dECO0MZnxJ4H5MbOoBSgaA7eMZXKn/Z r6YLaJpd1PdM1JieFrmzTVaRpNkAT8sXs+ydEPGrsoj8dNlHIphX7Fv2gaa5ljkl qo08HiBUvji1WLt+zrYOhXRWMhVHrfADAGECAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQlV8K2fVzshzVrx61vYpuVvoNnrDAfBgNVHSMEGDAWgBSYnoJnLJimJxIKunLe vr4iAVhJoDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTY1L21KNkNaeXlZcGljU0NycHkzcjYtSWdGWVNhQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21KNkNaeXlZcGljU0NycHkzcjYtSWdG WVNhQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NjUvbUo2Q1p5eVlwaWNTQ3JweTNyNi1JZ0ZZU2FBLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFd67SQgMr06ERjWHkFsM5ZvHuBuBCtYa2AlXelizZ1wv8q87VdzwHMIajnT y1MpfTVowRCC+QY9YOgdd/1icxfRsBrBvft2PBNVl1JP0rkSxO6TuLP87gaREspF NzC0Vsi+dmnONxey7PkMEFKO+rZVOxZSejVhOCE0zylghLSxSf7sDxRBCTl/XQ5K WgEZbmn4cKienqOhJh537pY3ZAkBCL2av9MROZTjJtygmneR8ZNMYV+0aCeapuIW B8JtvQNJ+kditfK8ZptZtqaz0E7y+1pju/kiohAV2+2L7Sh68nAd0+cmMoYyTLwf YSEsWYvaOIdi3XbVqTaiVBQqjeE= -----END CERTIFICATE-----Generated at Wed Jun 4 00:09:22 2025 by rpki-client