$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft File: KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft (raw, json) Hash identifier: HaU4K7S2gbf2dercEspdXmciqyqfzVjoJtqaAwQVdh8= Subject key identifier: C9:89:E7:EA:9B:CF:0E:1F:C5:B6:BF:5C:D8:FE:A5:D2:5C:90:F5:D6 Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76 Certificate issuer: /CN=28393FAE129B501824696BAE24B64734A203C376 Certificate serial: 99 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft Manifest number: 0D1B Signing time: Tue 07 Apr 2026 13:08:12 +0000 Manifest this update: Tue 07 Apr 2026 13:08:12 +0000 Manifest next update: Wed 22 Apr 2026 13:08:12 +0000 Files and hashes: 1: 0c0nmlw7d56o2deSZ81XsyiWZlk.roa (hash: pq0eYu1MKdTlgjZu6ot49dXudA4NI1e2cbGTWyo9QEE=) 2: 4QH08ZXn_YBwJwkkB3-w5RZRDSE.roa (hash: uSOXTdKP8SQy7+eFV6YsDlUa5GO3EP4y5JlKhKBzyeI=) 3: 4xbcPpBtziijTA5_jFpagzw3rrg.roa (hash: 23q5n4VvIfsFFvUaKE6Xl7j5wSYRaUjUhTmpLc90M1o=) 4: CSTnGfj-WRow27cT-kp3Qvc9sUo.roa (hash: NHjEqSvBJgQZvsjr/tLNWwx4QtK0eW9OBeG0RGwUc14=) 5: KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl (hash: DDJqHbKHiKCXcPP0E3BhQKRUP9gyzy2YyswGA+uhhyM=) 6: N8_hG9Lj_Qtc-rsqPmWK5kCuxuU.roa (hash: b2tzebuWqTLCHFVAa6gmLYgzAqg1ARvcky6hudpgToM=) 7: SEogcakFseouhatOmD9dgEIHnmU.roa (hash: ZyHe04/VAmY/hZcDqs0Jdd8J2BSAnHoU9InMfp2f65o=) 8: W_CBTQ6pPy7ctKb6EssjPUBs8t0.roa (hash: bwPjj1mk0rW4rNMBlArUpfXrBKowxO6kIZImNabc3/A=) 9: ja2XsEsO42l7b1-uQE2pwMdGKhk.roa (hash: V+TX4vlmlWAU+WJXIFa5pKqv4BJG9Wp/yYInT62UVQ8=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 14:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28393FAE129B501824696BAE24B64734A203C376 Validity Not Before: Mar 31 07:40:58 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C989E7EA9BCF0E1FC5B6BF5CD8FEA5D25C90F5D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:08:fb:6c:bd:4d:3a:51:a6:62:c9:24:9a:64: 7f:1b:0f:1f:86:b7:98:6f:33:d2:3a:44:d9:92:89: 57:2f:13:18:2b:d1:b0:fc:d4:b5:75:85:56:c8:74: 12:b3:18:a1:1c:56:ec:3d:a6:4b:c3:66:ae:95:02: df:51:cb:dd:65:6e:f8:31:44:25:2d:a6:e0:71:bb: 72:71:32:0b:3a:15:ba:6d:fe:8a:15:d6:23:11:e8: 0a:03:56:9b:51:d4:7a:77:88:2f:aa:4e:10:6f:16: 08:48:70:ee:df:6b:b1:ad:e5:25:91:5f:4a:c3:30: d8:4d:24:6f:47:b8:9d:f7:6e:81:ba:2b:21:40:a8: 6a:2c:9b:4a:35:d4:52:65:5c:87:01:d8:51:1a:f1: 3f:62:cd:65:f0:d2:ba:e1:8e:1c:ac:55:d9:db:1c: 07:da:09:6b:3f:56:a0:52:ee:e7:c5:de:1e:68:5c: f1:6e:9d:6b:63:58:e7:73:d1:a0:5d:8a:72:6a:f3: 6e:df:e5:85:d2:36:58:13:93:b6:16:aa:77:ba:ec: f2:e1:95:1a:06:bd:fd:99:2f:87:1f:f1:7f:7b:db: ee:6c:04:bf:62:0e:fd:3f:ee:ca:0d:28:6b:29:68: f8:99:1c:1f:e8:9c:9d:d5:e1:ee:ca:6e:f7:af:4e: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:89:E7:EA:9B:CF:0E:1F:C5:B6:BF:5C:D8:FE:A5:D2:5C:90:F5:D6 X509v3 Authority Key Identifier: keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2f:6f:17:98:b5:fa:3c:bd:58:4c:b5:07:14:f4:53:d0:10: 9b:b0:ae:dc:ea:8d:fb:ec:fe:8d:a0:59:19:fc:56:62:b5:74: 52:e4:61:f9:fe:49:a1:11:63:39:7b:e2:13:ac:61:ab:0d:1d: f5:00:f7:da:49:42:56:75:21:b2:d1:54:bb:93:54:8a:f0:d7: da:e3:49:8f:dc:d4:b3:52:65:62:85:b7:6b:fc:19:a4:55:f6: 2f:d7:cc:b0:8c:da:44:c1:c3:84:c3:3f:68:72:aa:01:91:83: 2d:48:09:d7:7b:87:ac:56:87:ec:0c:a8:3d:4a:75:65:19:b7: c6:94:c3:c5:08:41:1b:6a:fc:98:8f:b7:21:b7:a9:69:33:ed: 3f:74:ec:f0:d6:a4:d4:4f:83:a1:6b:10:97:9a:12:0d:8a:13: 5a:97:74:9a:e7:32:f9:c8:5a:2e:1e:69:ea:e7:8d:b1:c2:bc: 44:e4:33:00:38:13:94:ef:46:0f:6e:52:09:82:d6:8a:7b:42: 12:67:a4:17:c9:70:eb:8c:ed:54:11:6a:d6:f0:09:77:ad:1c: 11:2c:ea:e8:bf:ba:53:05:54:69:00:60:38:89:01:8b:37:08: 20:20:ae:79:6b:16:ce:c8:db:73:b2:d4:db:ec:54:fe:29:b8: 1e:f7:ad:42 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjgz OTNGQUUxMjlCNTAxODI0Njk2QkFFMjRCNjQ3MzRBMjAzQzM3NjAeFw0yNjAzMzEw NzQwNThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM5ODlFN0VBOUJDRjBF MUZDNUI2QkY1Q0Q4RkVBNUQyNUM5MEY1RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChCPtsvU06UaZiySSaZH8bDx+Gt5hvM9I6RNmSiVcvExgr0bD8 1LV1hVbIdBKzGKEcVuw9pkvDZq6VAt9Ry91lbvgxRCUtpuBxu3JxMgs6Fbpt/ooV 1iMR6AoDVptR1Hp3iC+qThBvFghIcO7fa7Gt5SWRX0rDMNhNJG9HuJ33boG6KyFA qGosm0o11FJlXIcB2FEa8T9izWXw0rrhjhysVdnbHAfaCWs/VqBS7ufF3h5oXPFu nWtjWOdz0aBdinJq827f5YXSNlgTk7YWqne67PLhlRoGvf2ZL4cf8X972+5sBL9i Dv0/7soNKGspaPiZHB/onJ3V4e7KbvevTs0zAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUyYnn6pvPDh/Ftr9c2P6l0lyQ9dYwHwYDVR0jBBgwFoAUKDk/rhKbUBgkaWuu JLZHNKIDw3YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwNzYyL0tEa19yaEtiVUJna2FXdXVKTFpITktJRHczWS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0tEa19yaEtiVUJna2FXdXVKTFpI TktJRHczWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDc2Mi9LRGtfcmhLYlVCZ2thV3V1SkxaSE5LSUR3M1kubWZ0 MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEALy9vF5i1+jy9WEy1BxT0U9AQ m7Cu3OqN++z+jaBZGfxWYrV0UuRh+f5JoRFjOXviE6xhqw0d9QD32klCVnUhstFU u5NUivDX2uNJj9zUs1JlYoW3a/wZpFX2L9fMsIzaRMHDhMM/aHKqAZGDLUgJ13uH rFaH7AyoPUp1ZRm3xpTDxQhBG2r8mI+3IbepaTPtP3Ts8Nak1E+DoWsQl5oSDYoT Wpd0mucy+chaLh5p6ueNscK8ROQzADgTlO9GD25SCYLWintCEmekF8lw64ztVBFq 1vAJd60cESzq6L+6UwVUaQBgOIkBizcIICCueWsWzsjbc7LU2+xU/im4HvetQg== -----END CERTIFICATE-----Generated at Tue Apr 7 18:12:57 2026 by rpki-client