$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft File: qd58EzgSN8W4mNWiTyyabLPBlxs.mft (raw, json) Hash identifier: rKhxvyRJrRrcDYwN51dnlswp1MBeKNp6Vh4nsxKzv08= Subject key identifier: 14:4D:58:49:37:E2:BF:96:0E:50:57:03:8A:4E:5B:81:F4:B7:39:6B Authority key identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B Certificate issuer: /CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B Certificate serial: 59 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft Manifest number: 0CEE Signing time: Tue 07 Apr 2026 13:16:17 +0000 Manifest this update: Tue 07 Apr 2026 13:16:17 +0000 Manifest next update: Wed 22 Apr 2026 13:16:17 +0000 Files and hashes: 1: aWkbO_7kHwGE98_QTdw7I2cj7B8.roa (hash: i+OuyLkrcwbESnlKdmzGdNOK+cEWaDCW20JF6YfvJyg=) 2: jyne7eZ5zPfBqvL8IfqqmepV8x8.roa (hash: M/PIh+QW1rcxvU7LBOOT04foxkscW5xWT0YZUaDmWaU=) 3: lx8GpDKJ7z087L4JYUfN9UsZB8A.roa (hash: ShB85daOwp0kKD549eXoSzNSM7eOJEjr9Dh+3YidmYU=) 4: pYlg2BdIBs9wQIx3SFz-673TE7s.roa (hash: O5FKyI+I4FZSmtc7GXqaW6/abb7wl2xAfr3w6orB3yQ=) 5: qd58EzgSN8W4mNWiTyyabLPBlxs.crl (hash: mdHEgQ9WfZ98rCQNmiHVERhVAWR9E8c/1iRhC7IeYDk=) 6: wxgCGickS9eZo_6O3UkbRLjrig4.roa (hash: cuQt5XYaW+ZLRI89NDpXM8aMaymH4hQBOFMLhR3SfI8=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B Validity Not Before: Mar 31 07:49:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=144D584937E2BF960E5057038A4E5B81F4B7396B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:9a:9f:d5:57:d2:d7:45:05:16:3a:fd:b6: b2:97:0d:d2:53:9a:a5:84:22:3b:28:e8:88:89:c1: de:2d:98:4f:96:22:85:20:d5:19:c5:77:98:cb:6b: 1c:0e:da:4b:99:65:7f:2f:c8:85:f3:33:c1:66:ee: ed:ff:89:05:c8:43:e6:de:44:e5:97:45:5e:cb:e4: fb:06:14:83:f2:7c:dc:e8:a3:76:d5:39:a6:1f:9e: b7:e9:4d:07:d7:de:8b:ab:82:65:c9:1a:56:3f:37: 61:80:42:06:89:46:6c:91:5d:d6:2d:31:83:2f:83: 76:20:0e:5b:a4:35:49:a5:49:63:41:8a:79:d9:4b: d0:00:27:d2:7b:f0:98:fd:67:36:d9:be:1e:aa:51: ad:2e:f7:f5:58:87:0b:6a:a8:cc:8d:45:1d:6c:63: b0:f4:47:f5:c3:dc:14:70:8f:54:b6:f0:af:c3:ee: c6:3c:68:06:cb:05:a8:22:8b:dd:05:7f:9b:50:0e: ec:70:26:04:07:53:e2:d4:9b:91:a5:e4:ac:60:eb: 81:51:07:99:c0:0a:1e:cd:de:18:31:32:25:b8:96: be:10:87:68:f1:ee:d6:90:88:a8:22:1d:9d:da:16: 70:6d:da:33:0f:4d:5d:53:93:28:12:34:3b:07:20: 6b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4D:58:49:37:E2:BF:96:0E:50:57:03:8A:4E:5B:81:F4:B7:39:6B X509v3 Authority Key Identifier: keyid:A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:46:4f:af:1e:9d:90:92:c3:fb:c9:4b:ca:4a:a6:25:1a:0c: cb:16:d3:55:e6:4d:9e:28:ca:de:6e:e8:01:ed:80:6a:3e:30: e2:49:1c:50:d9:b2:6c:17:f6:d4:12:30:f1:da:a9:16:4b:c3: e5:62:56:d3:35:1f:40:53:3f:71:dc:ff:33:cd:c6:be:b6:b6: 60:31:7a:00:3e:ec:a9:05:ea:2d:08:75:10:ae:b9:cf:c1:fc: 6f:15:9e:8c:8c:fa:94:64:58:94:b8:1f:8f:ed:15:31:59:42: 0f:3e:94:f1:88:f3:c6:94:5f:fd:00:81:19:cc:57:08:67:53: a8:84:54:d8:aa:45:4d:9f:1f:b3:90:23:69:9d:50:13:8a:1a: 10:ba:28:55:d5:3c:4d:3c:9d:37:97:46:8b:58:a8:55:5c:e9: af:76:b0:c2:b5:46:96:37:98:b5:a3:44:2f:f5:40:eb:78:0b: c9:01:0c:97:23:70:30:5c:13:ac:f6:4d:e6:36:e1:28:8a:35: 02:7c:f1:8f:9b:99:d2:f1:0f:6c:31:55:c7:21:44:be:0f:3c: 2b:e6:e8:6c:a3:13:65:65:2a:77:7a:9f:a8:f0:88:c2:c7:52: ff:2b:32:28:34:4d:f7:5e:c0:1d:98:b4:78:3e:eb:49:33:e3: bd:dd:62:9d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOURF N0MxMzM4MTIzN0M1Qjg5OEQ1QTI0RjJDOUE2Q0IzQzE5NzFCMB4XDTI2MDMzMTA3 NDk1NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMTQ0RDU4NDkzN0UyQkY5 NjBFNTA1NzAzOEE0RTVCODFGNEI3Mzk2QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALH6mp/VV9LXRQUWOv22spcN0lOapYQiOyjoiInB3i2YT5YihSDV GcV3mMtrHA7aS5llfy/IhfMzwWbu7f+JBchD5t5E5ZdFXsvk+wYUg/J83OijdtU5 ph+et+lNB9fei6uCZckaVj83YYBCBolGbJFd1i0xgy+DdiAOW6Q1SaVJY0GKedlL 0AAn0nvwmP1nNtm+HqpRrS739ViHC2qozI1FHWxjsPRH9cPcFHCPVLbwr8Puxjxo BssFqCKL3QV/m1AO7HAmBAdT4tSbkaXkrGDrgVEHmcAKHs3eGDEyJbiWvhCHaPHu 1pCIqCIdndoWcG3aMw9NXVOTKBI0Owcga4cCAwEAAaOCAfIwggHuMB0GA1UdDgQW BBQUTVhJN+K/lg5QVwOKTluB9Lc5azAfBgNVHSMEGDAWgBSp3nwTOBI3xbiY1aJP LJpss8GXGzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODU3L3FkNThFemdTTjhXNG1OV2lUeXlhYkxQQmx4cy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3FkNThFemdTTjhXNG1OV2lUeXlhYkxQ Qmx4cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84NTcvcWQ1OEV6Z1NOOFc0bU5XaVR5eWFiTFBCbHhzLm1mdDAVBggr BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwDQYJKoZIhvcNAQELBQADggEBALVGT68enZCSw/vJS8pKpiUaDMsW01Xm TZ4oyt5u6AHtgGo+MOJJHFDZsmwX9tQSMPHaqRZLw+ViVtM1H0BTP3Hc/zPNxr62 tmAxegA+7KkF6i0IdRCuuc/B/G8VnoyM+pRkWJS4H4/tFTFZQg8+lPGI88aUX/0A gRnMVwhnU6iEVNiqRU2fH7OQI2mdUBOKGhC6KFXVPE08nTeXRotYqFVc6a92sMK1 RpY3mLWjRC/1QOt4C8kBDJcjcDBcE6z2TeY24SiKNQJ88Y+bmdLxD2wxVcchRL4P PCvm6GyjE2VlKnd6n6jwiMLHUv8rMig0TfdewB2YtHg+60kz473dYp0= -----END CERTIFICATE-----Generated at Tue Apr 7 18:12:57 2026 by rpki-client