$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft File: BqhITfT7r-XEjZiKBGtqtqgbLfM.mft (raw, json) Hash identifier: agIZXOB9tVrZMZ1PiNUODUb5+9YeIDlxildxRNGE2HA= Subject key identifier: E2:3C:28:05:66:C8:40:96:51:25:98:EF:39:E5:E2:B6:5A:B6:78:06 Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3 Certificate issuer: /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3 Certificate serial: 66 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft Manifest number: 0D25 Signing time: Tue 07 Apr 2026 08:58:12 +0000 Manifest this update: Tue 07 Apr 2026 08:58:12 +0000 Manifest next update: Wed 22 Apr 2026 08:58:12 +0000 Files and hashes: 1: 3PpYy4AqZudfVYexefSW6oiu3E0.roa (hash: ThoSSti/vagt9rV3DzExYxluB+FSiTnLrDPh9UWkaWU=) 2: BqhITfT7r-XEjZiKBGtqtqgbLfM.crl (hash: tooABzQuPCQkr7hoUNB/O0BwdKXpEaoRJ+Zmgtxz3t8=) 3: U6oDooWE_m7vetfFjjidc9QmDWQ.roa (hash: dTZfdXuxMRkEP7B+/ncRJyQPdaSB0kwJFEbEypl5nbY=) 4: lImLAeqSF9k9NhRNyijfINutmpM.roa (hash: XX3m9wPJUhlEEVGM7oAzQmzoUjMgQNIiywFjGhoLUvk=) 5: rW1RoZGzi7ZacgPELCGTYtIqggc.roa (hash: KmKrNt/7I1cHzqfdDlgicsUL6zx8NilTfxcMBnkjhSA=) 6: w79bgDJ7e9aA6XaYE4m97-DsHH8.roa (hash: lAAA0hk7UJfAU5thgJmr9DQz/J+mP88UDk1oEjFCrbM=) 7: xoZi08jw9ZPoaDTFDLTbGEF72nE.roa (hash: ALRc5ImHpG5QF0A6PbRkB2XwcklWTg8J0qa8BzGCBUQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3 Validity Not Before: Mar 31 07:40:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E23C280566C84096512598EF39E5E2B65AB67806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:89:f2:5e:fc:7e:5f:f4:57:24:01:c8:13:a5: 8a:19:7e:e5:e1:3d:65:64:0d:33:5d:32:2a:b9:6e: 46:73:49:e6:47:f8:85:fc:eb:40:37:89:b3:8d:2b: 5c:58:71:fb:3c:59:57:96:fc:e5:00:53:01:ac:55: 76:ac:87:a8:f4:0e:69:c9:c3:29:19:e5:a3:34:69: 30:13:37:e0:2b:45:be:af:df:1e:bc:b9:44:b1:62: 29:46:6c:8c:9c:37:34:0c:50:52:d3:e5:eb:c8:08: 98:2b:ee:7b:9f:d6:7f:e0:d5:6a:8d:d6:92:09:fb: eb:a9:70:68:9e:ea:9a:e3:38:ee:5a:38:13:ce:27: 89:99:13:22:bf:c9:6c:10:5c:4d:ce:7b:c1:80:89: 8c:6b:6a:61:9f:1f:bf:86:f8:3c:de:fe:1c:57:f4: 83:c4:a0:6c:67:dd:dd:aa:68:8e:cd:da:c3:d7:b3: 89:46:65:1b:d0:b2:a1:d9:f8:21:50:1f:d6:18:64: 26:45:ef:07:ef:f6:36:b1:4e:91:ef:07:1c:fb:cc: 3d:cf:d7:e0:9d:9e:66:ae:29:9c:67:0f:3e:44:56: 09:7a:92:00:0a:dd:0c:2f:12:d8:73:3e:83:b7:b9: d4:00:fd:d0:bd:e7:49:41:94:00:9e:68:c9:7e:6a: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3C:28:05:66:C8:40:96:51:25:98:EF:39:E5:E2:B6:5A:B6:78:06 X509v3 Authority Key Identifier: keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:b1:9d:b7:68:6a:26:a5:d3:d8:52:f7:d3:0c:bd:ff:6a:36: 15:dd:4b:33:af:51:0f:5b:7a:8e:b1:4c:72:4f:87:03:c9:72: 36:cb:66:85:f8:e7:63:a3:50:54:2e:04:23:9d:71:6e:84:2c: 03:57:24:e2:51:06:4c:b7:35:52:ab:b1:e9:12:5b:98:47:4a: 31:e3:f9:77:c0:e5:ac:cd:26:b1:c0:13:49:df:6c:c4:80:91: 2e:a6:8d:03:50:2f:09:09:6e:b8:de:aa:d6:83:73:83:c6:bf: 76:ea:92:c2:a9:c4:25:e1:9e:26:77:a5:d6:11:47:04:da:84: 22:87:3b:23:b2:c5:c5:ea:c6:09:b2:91:5d:a3:47:bc:73:be: 17:e1:a3:0a:8d:9a:85:9f:dc:60:73:b2:18:fa:d5:b4:4e:2a: 44:7f:c8:4a:d2:4f:3f:93:76:47:bd:24:0b:19:ce:b6:fd:e1: 56:ef:54:89:03:55:b3:67:4d:78:e2:42:09:46:72:28:29:0b: 40:82:44:5c:a2:51:b5:e4:fb:ee:1d:e4:ea:5f:dc:80:84:ad: 25:d2:54:34:3c:46:72:59:5f:07:54:a3:3b:4d:23:36:40:21: db:19:40:02:bf:ba:45:28:a2:89:2d:e9:d9:e7:fb:4e:3d:7f: de:95:4f:0f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkE4 NDg0REY0RkJBRkU1QzQ4RDk4OEEwNDZCNkFCNkE4MUIyREYzMB4XDTI2MDMzMTA3 NDA0M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTIzQzI4MDU2NkM4NDA5 NjUxMjU5OEVGMzlFNUUyQjY1QUI2NzgwNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJaJ8l78fl/0VyQByBOlihl+5eE9ZWQNM10yKrluRnNJ5kf4hfzr QDeJs40rXFhx+zxZV5b85QBTAaxVdqyHqPQOacnDKRnlozRpMBM34CtFvq/fHry5 RLFiKUZsjJw3NAxQUtPl68gImCvue5/Wf+DVao3Wkgn766lwaJ7qmuM47lo4E84n iZkTIr/JbBBcTc57wYCJjGtqYZ8fv4b4PN7+HFf0g8SgbGfd3apojs3aw9eziUZl G9Cyodn4IVAf1hhkJkXvB+/2NrFOke8HHPvMPc/X4J2eZq4pnGcPPkRWCXqSAArd DC8S2HM+g7e51AD90L3nSUGUAJ5oyX5qQD8CAwEAAaOCAfIwggHuMB0GA1UdDgQW BBTiPCgFZshAllElmO855eK2WrZ4BjAfBgNVHSMEGDAWgBQGqEhN9Puv5cSNmIoE a2q2qBst8zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTI0L0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFnYkxmTS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFn YkxmTS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85MjQvQnFoSVRmVDdyLVhFalppS0JHdHF0cWdiTGZNLm1mdDAVBggr BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwDQYJKoZIhvcNAQELBQADggEBACSxnbdoaial09hS99MMvf9qNhXdSzOv UQ9beo6xTHJPhwPJcjbLZoX452OjUFQuBCOdcW6ELANXJOJRBky3NVKrsekSW5hH SjHj+XfA5azNJrHAE0nfbMSAkS6mjQNQLwkJbrjeqtaDc4PGv3bqksKpxCXhniZ3 pdYRRwTahCKHOyOyxcXqxgmykV2jR7xzvhfhowqNmoWf3GBzshj61bROKkR/yErS Tz+Tdke9JAsZzrb94VbvVIkDVbNnTXjiQglGcigpC0CCRFyiUbXk++4d5Opf3ICE rSXSVDQ8RnJZXwdUoztNIzZAIdsZQAK/ukUoookt6dnn+049f96VTw8= -----END CERTIFICATE-----Generated at Tue Apr 7 12:07:17 2026 by rpki-client