$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft File: yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft (raw, json) Hash identifier: d1wZpocF2KzVbaFJ1XZU7fCP7vHgjgYYhKEboRKT5WA= Subject key identifier: 0D:39:7B:1E:74:5D:6D:F4:6E:3B:8E:CD:FE:54:C9:3F:66:DD:53:EA Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D Certificate serial: 94 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft Manifest number: 0CF0 Signing time: Tue 07 Apr 2026 13:20:14 +0000 Manifest this update: Tue 07 Apr 2026 13:20:14 +0000 Manifest next update: Wed 22 Apr 2026 13:20:14 +0000 Files and hashes: 1: 0QnaFGdoYrF5B9dJFPHLKrZDi9s.roa (hash: Vma1A5On5qvSj7Ob6CoNtPFMLOpj1IJhZ0viRRXiTm0=) 2: 4sLQpl45fCo55-YgYZYowDoh8-g.roa (hash: TvziF3II5bI5h+I3+QU6ZAYmAPBhyIuSry7DAKNCF/s=) 3: 9dsTNo7ZL7BoVZfJdhGu6NahKqM.roa (hash: eIlm398L8VVyj/2jtGu6vORQfIbdCNSYKIAo1cwd5ZI=) 4: Fdk3L5qEwoJX0k3c3d6Yy_hQI0Q.roa (hash: WNdy0u9eGvGNr+bUoE2MZatnrQcrceCTTcj/6B7Hdjc=) 5: VvJtja91TRrKp2xXN5wDpFq4-N0.roa (hash: c+JXAv/Nmm0qrshRxWgkCfHtPADJT2nKSB5lL4PCLCk=) 6: YmS2jQwcRqGQYg4arFDbxakaBjs.roa (hash: ZVtv6ObtpfQ66ZqSJV5W3SQLAFXhAVUepFXk8Zz5Kxs=) 7: hL6wC6ma2BHGrCUUFUS--2r212o.roa (hash: W7yFNrafFYFD9KGAcKggndbVYfjV5xsqA1AQGRvREEk=) 8: nU9N4iH7KYvFleylKjl-V1ksmrU.roa (hash: R2j/evBFPKUdVRsNauhWD5rzFXZWfZ05mqQxKfcVg5g=) 9: tdFrTKwcD2DIx-7uJnB16DmiGFg.roa (hash: KTLhshWpiA8fyefV7kwNDfNxJY58NJVbJ07l5vqEUz4=) 10: vObnbYwHolkED6ilIR1aeaOMX4c.roa (hash: FqjwAKNfnRpor5MDTRpPoGnMY2YtsoLE517ysePyUq8=) 11: yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl (hash: S/I0N0slTzJNmyMaSaP+LSYNc0NSYzPBStZ2IJXO8Xw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 14:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D Validity Not Before: Mar 31 07:50:18 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0D397B1E745D6DF46E3B8ECDFE54C93F66DD53EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:5c:88:61:a5:35:ad:2d:b1:ad:46:dc:9e: ea:07:f0:d8:12:ab:1f:79:83:85:cd:88:dc:8e:a9: 1d:bd:2d:53:48:06:a9:f2:0a:07:2d:6a:a1:32:d7: 93:38:be:1a:eb:c9:46:19:9f:c9:53:4d:ae:be:8b: 14:7f:72:11:79:bc:7a:f7:ff:5c:50:e4:55:f2:77: 29:83:eb:7b:c7:73:91:15:9e:23:69:d7:b9:49:fa: b7:1b:8f:d8:e8:56:61:c1:09:b3:cc:8c:35:72:3c: 6b:fa:c3:40:60:9b:75:b6:62:66:60:f1:07:03:e3: 5b:ea:3b:bf:e5:fc:e3:0b:f9:a1:52:80:c8:8d:a4: e6:24:bb:77:15:fa:9e:1f:42:89:46:65:32:54:6c: 7f:08:1c:e7:fa:fc:0c:15:ae:52:c9:7e:a3:41:42: 40:af:9a:b8:f1:65:66:2f:1a:c3:d8:d0:0d:3e:04: f3:70:a9:55:e0:25:c3:9d:46:46:89:8f:43:21:d8: 1a:4c:74:de:fc:fd:82:fd:13:76:96:da:bf:fb:a1: fa:a9:40:46:f2:1d:be:4e:0d:cc:c1:3f:9d:09:63: 27:cd:6d:11:f8:de:e6:d8:48:1a:90:42:57:04:74: 35:fe:e1:a2:b7:a2:f4:fc:d1:0f:5d:65:f6:ce:16: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:39:7B:1E:74:5D:6D:F4:6E:3B:8E:CD:FE:54:C9:3F:66:DD:53:EA X509v3 Authority Key Identifier: keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9c:c5:d6:ca:a7:85:91:0e:c7:5f:c5:df:ac:d1:a8:5d:78: a2:e2:33:e2:c0:91:38:33:41:0f:b7:ab:3e:a3:07:9b:fe:46: dd:43:64:fe:a8:bc:a3:33:cc:38:f4:00:69:bd:54:44:9a:6f: b6:1e:f6:4d:7a:c2:3b:cf:d2:ef:09:bb:0d:05:bc:07:de:bd: 45:e8:f0:61:ac:5a:7c:c6:29:27:bd:3f:0d:88:84:48:de:0d: 60:44:83:8c:4d:28:61:f4:79:d8:5b:4e:02:88:f9:ac:85:d8: 6c:75:d7:8c:ec:24:3c:9e:71:91:f6:e8:47:44:5d:5b:d7:ea: 2a:49:56:ef:8f:05:2e:31:74:c8:1d:67:bc:ab:f4:0a:d2:31: 10:37:e4:da:31:52:d1:0e:64:77:0d:93:8a:d6:22:01:36:05: 1a:6b:a0:d8:60:e6:e0:6e:db:05:60:cf:8e:40:28:0f:1c:7e: 79:ec:6e:89:9e:01:d9:d0:8f:3f:4c:53:d2:63:c8:de:20:6f: 32:28:0a:e7:06:50:46:b7:7b:b1:4a:b1:65:95:d7:e5:fc:ed: cc:12:a4:c3:7f:0b:b5:98:f9:ec:36:09:a9:62:95:e0:0a:f0: 34:a4:d5:21:f6:87:6a:e2:9d:7b:5c:be:7a:a7:ba:76:08:3d: 64:56:09:1a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzgx NEQ4NUJENDgzNjBBNjVEOUQ0MTQ0RUM2RDIwNzUyQzFFREM3RDAeFw0yNjAzMzEw NzUwMThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBEMzk3QjFFNzQ1RDZE RjQ2RTNCOEVDREZFNTRDOTNGNjZERDUzRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr0VyIYaU1rS2xrUbcnuoH8NgSqx95g4XNiNyOqR29LVNIBqny CgctaqEy15M4vhrryUYZn8lTTa6+ixR/chF5vHr3/1xQ5FXydymD63vHc5EVniNp 17lJ+rcbj9joVmHBCbPMjDVyPGv6w0Bgm3W2YmZg8QcD41vqO7/l/OML+aFSgMiN pOYku3cV+p4fQolGZTJUbH8IHOf6/AwVrlLJfqNBQkCvmrjxZWYvGsPY0A0+BPNw qVXgJcOdRkaJj0Mh2BpMdN78/YL9E3aW2r/7ofqpQEbyHb5ODczBP50JYyfNbRH4 3ubYSBqQQlcEdDX+4aK3ovT80Q9dZfbOFo/tAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUDTl7HnRdbfRuO47N/lTJP2bdU+owHwYDVR0jBBgwFoAUyBTYW9SDYKZdnUFE 7G0gdSwe3H0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU3My95QlRZVzlTRFlLWmRuVUZFN0cwZ2RTd2UzSDAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95QlRZVzlTRFlLWmRuVUZFN0cwZ2RT d2UzSDAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTczL3lCVFlXOVNEWUtaZG5VRkU3RzBnZFN3ZTNIMC5tZnQwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6nMXWyqeFkQ7HX8XfrNGoXXii4jPi wJE4M0EPt6s+oweb/kbdQ2T+qLyjM8w49ABpvVREmm+2HvZNesI7z9LvCbsNBbwH 3r1F6PBhrFp8xiknvT8NiIRI3g1gRIOMTShh9HnYW04CiPmshdhsddeM7CQ8nnGR 9uhHRF1b1+oqSVbvjwUuMXTIHWe8q/QK0jEQN+TaMVLRDmR3DZOK1iIBNgUaa6DY YObgbtsFYM+OQCgPHH557G6JngHZ0I8/TFPSY8jeIG8yKArnBlBGt3uxSrFlldfl /O3MEqTDfwu1mPnsNgmpYpXgCvA0pNUh9odq4p17XL56p7p2CD1kVgka -----END CERTIFICATE-----Generated at Tue Apr 7 18:11:03 2026 by rpki-client