$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft File: 1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft (raw, json) Hash identifier: rJN1/EO9sWnEBzvkbuYIbVMtnspDYtmU7+t+y6jre/c= Subject key identifier: E0:F6:6B:23:43:7D:B9:F3:64:7F:23:3A:C5:14:E7:B8:14:D9:04:75 Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A Certificate issuer: /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Certificate serial: 58 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft Manifest number: 052D Signing time: Mon 28 Apr 2025 20:16:06 +0000 Manifest this update: Mon 28 Apr 2025 20:16:06 +0000 Manifest next update: Tue 13 May 2025 20:16:06 +0000 Files and hashes: 1: 1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl (hash: fqcspL+ig9N6bs4rrveyWv0pTjK7Bi9G8BmqmH7dVEI=) 2: a_EDNZTeRPpY4YVtX5W6JULtf1M.roa (hash: U6l3w/dsr99RpBJPR0DtMvZyS/zVIbYk9oqtrrXVdbE=) 3: gXuiA1e97M2lsBDNhVxRjHkMNGw.roa (hash: 6gWRhueMxewcN2yPoPCv9AcspoNcMHHI59mUZZFxK/U=) 4: m1D65ylCQgyFrNpcbnF_SQOdO_M.roa (hash: +0S78jw+xGyXF7P2cty9ByEptHhN8wx6zagrobkfPBg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Validity Not Before: Apr 15 01:35:14 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=E0F66B23437DB9F3647F233AC514E7B814D90475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:7f:5f:22:a8:cb:51:62:86:54:c3:23:46: 0c:9b:c0:e8:ed:59:5c:1d:1e:70:52:d6:a9:28:7a: 83:54:3e:4a:8e:5a:2b:96:b6:28:25:f8:e8:2f:10: 14:ef:35:f8:b8:c0:ee:73:76:ac:d0:e8:63:1b:40: 2e:3e:1d:3d:20:fe:97:0e:9e:2d:84:50:41:c5:d3: c2:6a:f0:ad:29:8e:96:ec:ab:3e:0e:0c:31:2d:b3: dc:2a:9d:64:31:7c:64:f2:f6:33:7f:c8:0c:0a:3d: bf:5d:42:fd:cf:a7:06:da:08:ca:0e:db:6b:5f:ab: af:bd:17:2a:85:b8:d0:2d:12:ae:06:cd:2c:c8:27: 65:4d:2a:5e:5a:8e:ef:44:73:cd:c8:94:c8:e6:95: 25:6e:f7:ec:44:5b:d2:a2:c1:1d:60:7e:2f:a6:dd: c9:95:96:3b:65:2c:74:01:b9:c2:96:62:36:7c:65: 52:1b:f5:21:31:ef:15:a5:fc:e2:81:2d:36:f7:0e: 76:67:eb:d6:9a:09:4f:5a:9b:b5:84:a4:f1:51:d7: d6:8d:8b:7b:a5:f3:a3:4a:51:9e:c4:a7:e6:88:4a: e2:85:1a:8e:51:98:48:2d:da:30:4e:a9:62:0c:9c: f6:39:93:8f:37:9e:43:07:bf:ee:24:df:f0:7f:86: 14:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F6:6B:23:43:7D:B9:F3:64:7F:23:3A:C5:14:E7:B8:14:D9:04:75 X509v3 Authority Key Identifier: keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:82:53:9e:09:a8:c5:d0:35:0d:cd:62:eb:54:ed:60:6e:90: df:c2:cc:68:5b:2d:88:e6:7f:dc:23:bb:53:d2:8b:d1:4d:e5: 93:31:fe:a9:c4:45:be:9d:e9:df:22:bc:01:6c:6a:d8:74:c3: 8e:f6:1f:9c:cc:9e:bc:ef:51:d3:e2:ba:61:9b:9f:f3:6e:34: 1b:83:a9:f5:8e:09:28:27:5b:7f:38:17:da:57:95:68:4f:0e: 3f:36:6a:6e:5a:9f:b5:83:db:86:6d:59:b1:54:fa:5a:73:44: 54:ea:de:f3:fa:37:38:6a:11:7c:8e:c3:cc:98:79:10:79:f1: fe:ac:46:d6:c0:d5:c3:69:6a:69:64:4e:e2:88:29:94:35:09: a0:ee:82:0a:4c:43:02:fd:68:98:dd:53:12:af:b8:39:ed:26: 4d:d9:49:a4:bc:7e:2e:f9:8e:c4:6d:ac:49:82:ae:5b:da:a0: 92:73:ad:36:08:ab:c0:de:38:34:4b:52:22:17:53:99:21:84: fc:07:cc:8b:22:cb:67:7a:e8:7c:4f:d8:1e:e1:29:d6:64:a4: 1c:f8:3d:d0:58:93:37:19:e0:75:e6:6a:9e:66:98:f1:67:09: ed:6b:86:b5:7e:a0:17:63:4a:ec:d6:f5:0f:95:4e:0e:aa:9a: f7:aa:1f:19 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjkw MEYxRTMxMjZFNjA5RUY0RjFBMEZCODU1RUI0REU0RTNBMThBMB4XDTI1MDQxNTAx MzUxNFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRTBGNjZCMjM0MzdEQjlG MzY0N0YyMzNBQzUxNEU3QjgxNEQ5MDQ3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALu2f18iqMtRYoZUwyNGDJvA6O1ZXB0ecFLWqSh6g1Q+So5aK5a2 KCX46C8QFO81+LjA7nN2rNDoYxtALj4dPSD+lw6eLYRQQcXTwmrwrSmOluyrPg4M MS2z3CqdZDF8ZPL2M3/IDAo9v11C/c+nBtoIyg7ba1+rr70XKoW40C0SrgbNLMgn ZU0qXlqO70RzzciUyOaVJW737ERb0qLBHWB+L6bdyZWWO2UsdAG5wpZiNnxlUhv1 ITHvFaX84oEtNvcOdmfr1poJT1qbtYSk8VHX1o2Le6Xzo0pRnsSn5ohK4oUajlGY SC3aME6pYgyc9jmTjzeeQwe/7iTf8H+GFGECAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTg9msjQ32582R/IzrFFOe4FNkEdTAfBgNVHSMEGDAWgBTWkA8eMSbmCe9PGg+4 VetN5OOhijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODk3LzFwQVBIakVtNWdudlR4b1B1RlhyVGVUam9Zby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFwQVBIakVtNWdudlR4b1B1RlhyVGVU am9Zby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84OTcvMXBBUEhqRW01Z252VHhvUHVGWHJUZVRqb1lvLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJSCU54JqMXQNQ3NYutU7WBukN/CzGhbLYjmf9wju1PSi9FN5ZMx/qnERb6d 6d8ivAFsath0w472H5zMnrzvUdPiumGbn/NuNBuDqfWOCSgnW384F9pXlWhPDj82 am5an7WD24ZtWbFU+lpzRFTq3vP6NzhqEXyOw8yYeRB58f6sRtbA1cNpamlkTuKI KZQ1CaDuggpMQwL9aJjdUxKvuDntJk3ZSaS8fi75jsRtrEmCrlvaoJJzrTYIq8De ODRLUiIXU5khhPwHzIsiy2d66HxP2B7hKdZkpBz4PdBYkzcZ4HXmap5mmPFnCe1r hrV+oBdjSuzW9Q+VTg6qmveqHxk= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:58 2025 by rpki-client on console.sobornost.net