$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft File: 0imUh5wlgSP_oJfoTgU3X2ClkaU.mft (raw, json) Hash identifier: y3J1Bf43sVtSXWOtI+Uhl7fBA6C7Jlvk2jkaO8h94do= Subject key identifier: 39:D1:00:CF:01:51:78:F8:85:34:72:CD:78:62:6D:69:6B:55:E2:13 Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5 Certificate issuer: /CN=D22994879C258123FFA097E84E05375F60A591A5 Certificate serial: 2B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft Manifest number: 09AD Signing time: Tue 07 Apr 2026 14:17:27 +0000 Manifest this update: Tue 07 Apr 2026 14:17:27 +0000 Manifest next update: Wed 22 Apr 2026 14:17:27 +0000 Files and hashes: 1: 0imUh5wlgSP_oJfoTgU3X2ClkaU.crl (hash: eK8Q8NrJvauXJsjZ9I/XKSUtNXlgDm7u7E0nAi1qL7k=) 2: YO0xHd0WS0PiUxFddFoZ0bxIo90.roa (hash: jED7La9Jt98TVPWecLsuEbyNxPeRKMtOsahKYCuPTMI=) 3: lKFnuHw1nis7qcjeNjFeOFss30Q.roa (hash: rtz4Wl62XuoGei2UY3Rt4pg7hFgtcMQiUpAUAkrOrwc=) 4: mPyd-BKvCKEzonmg7GB1BPLsMl8.roa (hash: z7bjLYUTfBJYDXpCq+qqVwRKGrnVohpkyKUmqAvacPI=) 5: qRzK3cPR2YhBjwmypwbOxnqV4zs.roa (hash: 2qWfdVawYsSMd7ClXuMFksHB+kMjlzBZKKLKeuaiF5E=) 6: rO_73jM4JzO0qmtCbCzui48rcyU.roa (hash: m+r+XumAyZSI9MWujUVx+p9FnZ0CVnYRHSBroVYdWSQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 14:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5 Validity Not Before: Mar 31 08:45:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=39D100CF015178F8853472CD78626D696B55E213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:36:3d:e5:15:06:be:94:60:db:06:fd:e0: f8:3f:60:b4:9d:5f:68:f0:00:74:28:20:55:f9:b0: cc:08:3a:24:ac:e2:54:da:21:dc:9e:e3:5d:25:fb: ac:5c:d0:cb:1e:a3:59:f5:f8:20:df:21:f7:36:03: 73:26:0e:10:6b:2a:a8:20:0b:1e:be:1e:b4:e0:d9: da:d9:81:8a:c5:91:b5:2f:06:e2:71:ef:80:52:22: 36:b8:15:42:3a:f4:36:35:bc:db:6a:3d:34:77:af: a2:35:fd:5c:38:7e:96:74:3f:dd:e8:5e:4d:54:5f: 86:a5:82:8e:27:d4:98:64:2b:80:bd:77:40:e9:3b: 90:fc:f1:fb:f5:c4:16:5f:7a:a8:f0:53:f1:1e:2d: b3:3a:fd:0e:66:49:dc:a6:67:8c:19:55:59:84:06: 6d:98:a2:36:e0:f4:de:ff:b4:17:51:f0:3a:59:7b: 98:78:80:9d:f2:93:1e:7b:cc:fd:92:ba:37:99:fb: c1:d1:8f:2e:91:5d:1b:cd:c5:91:e5:fb:f9:4a:89: 42:82:59:03:a3:0d:16:5d:a8:17:dc:a5:69:58:7d: 68:c3:b2:ed:3f:6a:3d:2b:a2:18:0b:55:d2:a7:e3: ef:f4:d7:6e:bb:d0:ed:17:54:b1:46:61:af:f7:b0: 2e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D1:00:CF:01:51:78:F8:85:34:72:CD:78:62:6D:69:6B:55:E2:13 X509v3 Authority Key Identifier: keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d3:67:5e:43:dc:36:51:f4:50:4c:0d:a8:71:3b:68:35:1e: f6:c1:f1:1e:d5:5b:2f:00:58:69:53:9b:68:74:d0:90:40:3e: 71:75:19:a5:dc:97:9b:96:3c:85:98:9f:f7:b9:33:7a:fc:c4: ab:8a:a9:86:f6:61:bd:66:b5:51:90:73:23:f1:21:f8:08:7d: 32:99:5a:14:9b:13:1b:09:0f:45:ce:34:02:70:74:02:ed:62: 3a:38:eb:a6:13:f3:06:96:8b:d7:7e:74:bb:2f:b7:c7:b9:4a: 24:fb:73:64:36:e0:b7:61:62:4a:5c:af:17:8f:89:0c:06:12: fa:f3:5f:fa:85:6d:39:56:af:02:d8:49:db:1b:16:5d:5f:89: c1:b6:50:11:38:a5:3a:f6:36:10:ae:83:36:90:0a:8b:58:e9: 87:54:78:1f:dc:c1:fe:fd:8b:2f:76:2d:30:c7:1f:68:ab:4c: 5e:70:c9:b2:bd:f3:cb:e0:86:af:84:7d:26:58:2e:b2:0e:1c: 17:04:e2:dd:ea:5d:77:82:be:01:89:64:55:14:7c:8d:e7:b1: eb:3e:fa:c0:b4:72:42:08:93:49:d0:d0:5d:23:be:6b:1b:8a: 7e:b6:4c:d4:0c:2d:a4:bb:3c:a5:3c:64:0e:8e:2a:2c:a8:0a: 88:f0:63:0e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMjI5 OTQ4NzlDMjU4MTIzRkZBMDk3RTg0RTA1Mzc1RjYwQTU5MUE1MB4XDTI2MDMzMTA4 NDUxNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzlEMTAwQ0YwMTUxNzhG ODg1MzQ3MkNENzg2MjZENjk2QjU1RTIxMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMLmNj3lFQa+lGDbBv3g+D9gtJ1faPAAdCggVfmwzAg6JKziVNoh 3J7jXSX7rFzQyx6jWfX4IN8h9zYDcyYOEGsqqCALHr4etODZ2tmBisWRtS8G4nHv gFIiNrgVQjr0NjW822o9NHevojX9XDh+lnQ/3eheTVRfhqWCjifUmGQrgL13QOk7 kPzx+/XEFl96qPBT8R4tszr9DmZJ3KZnjBlVWYQGbZiiNuD03v+0F1HwOll7mHiA nfKTHnvM/ZK6N5n7wdGPLpFdG83FkeX7+UqJQoJZA6MNFl2oF9ylaVh9aMOy7T9q PSuiGAtV0qfj7/TXbrvQ7RdUsUZhr/ewLuECAwEAAaOCAfYwggHyMB0GA1UdDgQW BBQ50QDPAVF4+IU0cs14Ym1pa1XiEzAfBgNVHSMEGDAWgBTSKZSHnCWBI/+gl+hO BTdfYKWRpTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMTMvMGltVWg1d2xnU1Bfb0pmb1RnVTNYMkNsa2FVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMGltVWg1d2xnU1Bfb0pmb1RnVTNY MkNsa2FVLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMTEzLzBpbVVoNXdsZ1NQX29KZm9UZ1UzWDJDbGthVS5tZnQw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCb02deQ9w2UfRQTA2ocTtoNR72 wfEe1VsvAFhpU5todNCQQD5xdRml3JebljyFmJ/3uTN6/MSriqmG9mG9ZrVRkHMj 8SH4CH0ymVoUmxMbCQ9FzjQCcHQC7WI6OOumE/MGlovXfnS7L7fHuUok+3NkNuC3 YWJKXK8Xj4kMBhL681/6hW05Vq8C2EnbGxZdX4nBtlAROKU69jYQroM2kAqLWOmH VHgf3MH+/Ysvdi0wxx9oq0xecMmyvfPL4IavhH0mWC6yDhwXBOLd6l13gr4BiWRV FHyN57HrPvrAtHJCCJNJ0NBdI75rG4p+tkzUDC2kuzylPGQOjiosqAqI8GMO -----END CERTIFICATE-----Generated at Tue Apr 7 18:12:16 2026 by rpki-client