$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft File: GyCgaiEgWCCyj9Bs4KhPA_za68U.mft (raw, json) Hash identifier: EjGIHcOELF6ekkFWZ5Ymt4wdwrn824oMKEIDrR4/gD8= Subject key identifier: D3:71:33:07:41:2B:08:B1:EB:29:FD:40:D6:57:39:6C:2E:DF:99:70 Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5 Certificate issuer: /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5 Certificate serial: 8A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft Manifest number: 1CA4 Signing time: Tue 07 Apr 2026 16:44:12 +0000 Manifest this update: Tue 07 Apr 2026 16:44:12 +0000 Manifest next update: Wed 22 Apr 2026 16:44:12 +0000 Files and hashes: 1: 02I9D1NaD0zGstL16-YHBAGUxwQ.roa (hash: kn0uysmss2euoq/ZNgml4cy1Qfg+9hvkpKi5Ul4tbws=) 2: 5GgkfvRTzr1_B36z8EWEAUermGI.roa (hash: ZIZYkIrh+9ApvD6Zyz6R4S/KbZCrKpH672bbX4Fu+L0=) 3: 8SqpGV1aJpar5CAtXWjpYi1_4BY.roa (hash: DoJBQts7w4UJidlIN2jSg70ofVAQ9ohbWMKVvT8YNQ0=) 4: GyCgaiEgWCCyj9Bs4KhPA_za68U.crl (hash: pBWUqe56iQV5r3LiL9GdGketTzGFL0HioOJL8/7tkTA=) 5: Vmp9264ei3oqLH5wELwC6D1ON7w.roa (hash: Bv4Px71cfFTw3LOkS/P9hpO7j6hbnDLGkMBhGO0h18s=) 6: p9AhlweaIB-tP2ZxqkMHQ3bu46A.roa (hash: sVw3RGP/JTbaXgCuo34NDJPYOVDxudFJ8yiP4zq+mg8=) 7: sI2hd2FzasIcIGR1mbwfnvVbOt4.roa (hash: svXnDigbaMta8NLAJXIZSMbW+lS1TxTLYrqXiORtwOk=) 8: vFiyT8B_Kfm1EiNusLtM8bXhXZc.roa (hash: 9Y/kKiC5pcFB9hZk3qD9xiQ+4SPjPq36Lwf7jxwdmD4=) 9: vOdje48ddd0EDOM_8unGxqw_iro.roa (hash: 9uTynMYwc236xzfQ4HFsQtjP8qDSDiiCRdjluXpmJw4=) 10: vcNVwUq2Rn83POw3FrP020raNfA.roa (hash: O2P8Pif00XK092sZhm6Xpj8K5yIlU7t2IL+i/xMQpIk=) 11: xRhn_Owo8gZWzm0ge4u7Jd4ZG4I.roa (hash: zCwJv7rCMQYUChz5Iaa+ix8HvuYG611uN4bhcmnfXxk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5 Validity Not Before: Mar 31 07:32:09 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D3713307412B08B1EB29FD40D657396C2EDF9970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2a:7f:2a:48:b0:04:36:cd:fe:70:c4:8f:f9: 81:02:bc:e6:00:d2:d8:2f:d2:fe:43:fd:19:b5:45: ca:70:cf:14:99:df:f7:e0:36:8b:a9:a6:48:ef:b9: 29:d2:cf:40:cf:0b:a3:3b:14:85:d4:1b:24:41:df: 9f:6e:a1:2b:0d:f1:6a:ee:b0:64:33:d9:89:ea:31: 95:a4:7e:b2:71:8c:0e:79:1a:e5:d7:23:c2:4c:f3: f2:50:a2:8f:d3:67:24:96:47:61:21:72:65:e0:e2: 91:2f:76:fa:22:73:2d:ab:a0:3f:30:97:e4:9c:91: 24:04:20:be:9d:08:57:ec:0e:cc:13:35:14:df:2d: d0:3a:cd:c1:4c:0c:e7:4c:f7:0c:70:9a:fb:90:a3: a7:9f:22:47:7b:19:b1:b1:84:17:40:fd:28:2f:ed: d2:67:f2:09:21:00:bf:b4:08:59:9e:e4:14:b7:24: f5:8e:c2:66:61:f6:87:6f:c3:7a:0b:d5:51:83:5b: d3:8c:fc:3b:12:d8:8d:c8:ae:7b:da:d6:a8:4a:6e: 15:f9:cd:9d:6b:fa:7f:28:34:93:49:d0:85:d0:de: d8:bd:d0:49:23:23:69:7e:28:fa:18:f6:58:07:77: 51:75:da:ff:d1:81:96:a2:38:d7:7c:41:3f:42:df: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:71:33:07:41:2B:08:B1:EB:29:FD:40:D6:57:39:6C:2E:DF:99:70 X509v3 Authority Key Identifier: keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:35:3d:40:d5:4b:72:5e:5f:7a:25:cb:ee:dd:6c:ca:c2:39: 97:2e:5f:4d:90:7d:8e:07:10:cc:13:e5:d4:b8:b8:c9:1b:18: 57:2f:27:2e:84:15:e0:1a:50:d8:67:06:30:19:3e:59:a4:35: c3:23:c2:00:09:51:2a:6f:0a:aa:c9:f2:79:09:e6:a2:a1:75: 0d:7e:59:26:5f:8f:87:d5:9e:e5:df:8d:e0:87:27:8a:ba:7a: d0:1c:4a:3a:9e:c5:e2:99:0c:73:1f:d8:42:bf:a5:d0:65:54: 2e:31:e7:af:d6:21:db:17:f2:ed:6c:af:c2:2e:c0:bc:fd:e2: 7c:6d:b7:ea:ef:25:66:e5:5b:dd:95:34:56:cb:81:67:bf:89: 76:6c:92:86:1d:c9:b5:f4:12:e0:36:6a:38:24:66:d2:c1:ad: e8:fb:bc:56:2f:2b:06:0d:5d:42:32:b8:16:4c:61:eb:b2:c6: 93:bd:cf:ad:ba:90:9b:33:be:b3:b2:78:a4:de:d0:61:55:b0: c1:f1:36:90:c6:54:05:bd:85:d9:9a:ce:84:5b:e3:af:6d:a8: 99:56:cb:e8:34:47:48:e1:2b:52:77:80:9f:fc:35:c3:1e:e0: bf:fc:9f:9f:e5:c3:23:fe:86:3d:cf:12:e8:92:c8:59:da:2f: 35:77:b1:10 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUIy MEEwNkEyMTIwNTgyMEIyOEZEMDZDRTBBODRGMDNGQ0RBRUJDNTAeFw0yNjAzMzEw NzMyMDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQzNzEzMzA3NDEyQjA4 QjFFQjI5RkQ0MEQ2NTczOTZDMkVERjk5NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLKn8qSLAENs3+cMSP+YECvOYA0tgv0v5D/Rm1RcpwzxSZ3/fg NouppkjvuSnSz0DPC6M7FIXUGyRB359uoSsN8WrusGQz2YnqMZWkfrJxjA55GuXX I8JM8/JQoo/TZySWR2EhcmXg4pEvdvoicy2roD8wl+SckSQEIL6dCFfsDswTNRTf LdA6zcFMDOdM9wxwmvuQo6efIkd7GbGxhBdA/Sgv7dJn8gkhAL+0CFme5BS3JPWO wmZh9odvw3oL1VGDW9OM/DsS2I3Irnva1qhKbhX5zZ1r+n8oNJNJ0IXQ3ti90Ekj I2l+KPoY9lgHd1F12v/RgZaiONd8QT9C30gTAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU03EzB0ErCLHrKf1A1lc5bC7fmXAwHwYDVR0jBBgwFoAUGyCgaiEgWCCyj9Bs 4KhPA/za68UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzUzMC9HeUNnYWlFZ1dDQ3lqOUJzNEtoUEFfemE2OFUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9HeUNnYWlFZ1dDQ3lqOUJzNEtoUEFf emE2OFUuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTMwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96YTY4VS5tZnQwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6NT1A1UtyXl96Jcvu3WzKwjmXLl9N kH2OBxDME+XUuLjJGxhXLycuhBXgGlDYZwYwGT5ZpDXDI8IACVEqbwqqyfJ5Ceai oXUNflkmX4+H1Z7l343ghyeKunrQHEo6nsXimQxzH9hCv6XQZVQuMeev1iHbF/Lt bK/CLsC8/eJ8bbfq7yVm5VvdlTRWy4Fnv4l2bJKGHcm19BLgNmo4JGbSwa3o+7xW LysGDV1CMrgWTGHrssaTvc+tupCbM76zsnik3tBhVbDB8TaQxlQFvYXZms6EW+Ov baiZVsvoNEdI4StSd4Cf/DXDHuC//J+f5cMj/oY9zxLokshZ2i81d7EQ -----END CERTIFICATE-----Generated at Tue Apr 7 18:12:55 2026 by rpki-client