$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft File: Xe_54al9RszcEvYG7rOKPmTbyB8.mft (raw, json) Hash identifier: f7q9lAoHO0ptVu4hQW9tn0EVYgi5Y1R0mSJ75eHwL4Y= Subject key identifier: 58:12:DA:EC:97:6F:6D:31:FF:20:1C:8A:6A:5E:66:77:F9:E2:E0:BC Authority key identifier: 5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F Certificate issuer: /CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F Certificate serial: 3E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft Manifest number: 0C70 Signing time: Tue 07 Apr 2026 14:50:59 +0000 Manifest this update: Tue 07 Apr 2026 14:50:59 +0000 Manifest next update: Wed 22 Apr 2026 14:50:59 +0000 Files and hashes: 1: N4lwQTQnKjsL5FIzyoUD18PDCx8.roa (hash: xa56TOBPMJVriTLuvJH40f/hlH49Jw3vSBPz6qF+5Mo=) 2: Xe_54al9RszcEvYG7rOKPmTbyB8.crl (hash: /Qxnp1w4gvutiUn2sCGAGOGSBEGIp2W0fSCE5QgUVrw=) 3: hRteotIrjDWW1S65BNeVMiPCUJ8.roa (hash: LqOtMkCEy9TtS5epfx0p7nUdBCEWJOI0/6Uyu7YQ5/M=) 4: ivDe82b1D6y4LKlxKGeIRJ38KpE.roa (hash: v1ZEV/ThyOOYEpYIHTlkJs2O8dWpICMcWt+gmhB5CwM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F Validity Not Before: Mar 31 08:31:34 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5812DAEC976F6D31FF201C8A6A5E6677F9E2E0BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:d0:35:86:7f:74:c3:2c:ed:a8:97:36:49: de:c6:da:f6:97:02:59:95:bb:4a:71:ce:b6:e8:e2: 04:12:68:f1:ec:21:b8:91:fc:6d:57:3c:f0:dd:a6: f0:4f:81:33:d2:cf:c2:17:7a:9c:74:68:e8:69:66: 2b:70:e3:d0:d7:60:65:fb:ad:b8:ad:f1:08:64:70: 11:26:5f:66:e2:12:98:ed:53:77:1e:67:7b:5e:e2: 06:37:e7:c8:b7:a2:17:61:f4:e4:40:ae:b8:15:bd: 69:b9:bd:7d:d6:2e:58:a8:01:9c:c1:51:53:02:a0: 84:48:12:9c:2b:f2:dd:1f:b5:f5:da:82:d7:00:d7: 2e:02:4f:20:d5:c1:da:c2:e3:f6:eb:33:38:09:72: de:91:3f:d9:25:50:f2:6b:10:14:d9:12:38:04:9e: ed:b3:f2:50:aa:98:70:2a:3c:cf:4a:58:15:62:39: 0b:96:77:01:5e:3a:eb:a4:d7:30:1b:62:b5:5b:c6: 03:a4:9f:41:95:f0:cc:93:f2:17:36:ff:05:31:be: 46:e7:13:7c:26:53:95:01:b9:94:27:fc:51:40:89: 5e:1e:a0:f3:a1:bd:f3:07:d1:9f:60:24:a0:58:89: 9c:f9:fa:18:0f:88:96:93:49:83:d3:27:f4:1a:70: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:12:DA:EC:97:6F:6D:31:FF:20:1C:8A:6A:5E:66:77:F9:E2:E0:BC X509v3 Authority Key Identifier: keyid:5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:a4:e2:02:73:b9:59:51:81:97:a2:af:51:2b:0f:32:10:f3: 05:12:36:92:6b:17:d9:4d:b5:75:58:b2:50:e6:fd:a6:36:7a: 91:3d:82:ef:c2:47:ea:03:18:ce:c6:48:ba:d1:dd:46:dc:84: 0b:60:66:6e:30:b5:ea:2a:c7:5a:70:a2:82:93:e3:bc:9c:a3: 7b:5f:6a:ec:80:8d:e5:77:eb:12:ce:b6:80:1a:ce:bd:8b:10: 44:d5:10:a7:5f:8e:de:72:2f:72:cc:75:3d:be:b8:e3:23:44: ca:95:10:c5:bb:11:88:84:8b:cf:87:cf:95:f2:6f:31:fe:13: 14:4f:14:43:55:30:74:7e:ca:3a:ad:6b:09:ec:04:be:d5:fb: d0:c8:ad:8a:1a:ef:56:fe:1c:9f:87:f0:c3:5b:ed:52:bd:55: de:e7:0a:90:07:cd:48:20:ff:21:8f:d4:ee:8b:0d:dc:00:34: f2:f1:23:d3:22:cf:f1:a4:b9:56:42:86:4e:b2:0f:fb:ab:90: 02:3e:53:0a:b3:b7:fe:dc:11:78:c9:91:55:98:38:2d:50:93: 36:3c:b2:ff:09:e2:c4:e6:07:5b:73:e1:93:53:d6:a4:68:32: 49:c5:b9:4b:14:45:03:b2:5a:44:52:22:ec:c8:8e:eb:01:53: ff:fb:b4:6d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1REVG RjlFMUE5N0Q0NkNDREMxMkY2MDZFRUIzOEEzRTY0REJDODFGMB4XDTI2MDMzMTA4 MzEzNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTgxMkRBRUM5NzZGNkQz MUZGMjAxQzhBNkE1RTY2NzdGOUUyRTBCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMWp0DWGf3TDLO2olzZJ3sba9pcCWZW7SnHOtujiBBJo8ewhuJH8 bVc88N2m8E+BM9LPwhd6nHRo6GlmK3Dj0NdgZfutuK3xCGRwESZfZuISmO1Tdx5n e17iBjfnyLeiF2H05ECuuBW9abm9fdYuWKgBnMFRUwKghEgSnCvy3R+19dqC1wDX LgJPINXB2sLj9uszOAly3pE/2SVQ8msQFNkSOASe7bPyUKqYcCo8z0pYFWI5C5Z3 AV4666TXMBtitVvGA6SfQZXwzJPyFzb/BTG+RucTfCZTlQG5lCf8UUCJXh6g86G9 8wfRn2AkoFiJnPn6GA+IlpNJg9Mn9Bpw9HUCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBRYEtrsl29tMf8gHIpqXmZ3+eLgvDAfBgNVHSMEGDAWgBRd7/nhqX1GzNwS9gbu s4o+ZNvIHzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQbVRieUI4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQ bVRieUI4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMDQwL1hlXzU0YWw5UnN6Y0V2WUc3ck9LUG1UYnlCOC5tZnQw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlpOICc7lZUYGXoq9RKw8yEPMF EjaSaxfZTbV1WLJQ5v2mNnqRPYLvwkfqAxjOxki60d1G3IQLYGZuMLXqKsdacKKC k+O8nKN7X2rsgI3ld+sSzraAGs69ixBE1RCnX47eci9yzHU9vrjjI0TKlRDFuxGI hIvPh8+V8m8x/hMUTxRDVTB0fso6rWsJ7AS+1fvQyK2KGu9W/hyfh/DDW+1SvVXe 5wqQB81IIP8hj9Tuiw3cADTy8SPTIs/xpLlWQoZOsg/7q5ACPlMKs7f+3BF4yZFV mDgtUJM2PLL/CeLE5gdbc+GTU9akaDJJxblLFEUDslpEUiLsyI7rAVP/+7Rt -----END CERTIFICATE-----Generated at Tue Apr 7 18:13:53 2026 by rpki-client