$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.mft File: bh8PSva3iIgm_-9004brZ4kDq90.mft (raw, json) Hash identifier: aTIbVSZ43BwPp9r3EgamqALbc2ghi2Piv6NkC3sbh4I= Subject key identifier: 91:B4:EE:22:FE:24:3F:59:9C:D4:A5:D1:3B:FB:32:19:22:5B:1C:DD Authority key identifier: 6E:1F:0F:4A:F6:B7:88:88:26:FF:EF:74:D3:86:EB:67:89:03:AB:DD Certificate issuer: /CN=6E1F0F4AF6B7888826FFEF74D386EB678903ABDD Certificate serial: 0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bh8PSva3iIgm_-9004brZ4kDq90.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.mft Manifest number: 011A Signing time: Tue 07 Apr 2026 14:51:47 +0000 Manifest this update: Tue 07 Apr 2026 14:51:47 +0000 Manifest next update: Wed 22 Apr 2026 14:51:47 +0000 Files and hashes: 1: 1OXeXwn8VqDmTjufCuNSpw5QVfY.roa (hash: L9Y7suZHlXfOEORFN6Z6qiDlcO6OCCFkkA5UpvpnKJ0=) 2: 1ubv5seAifcupuEDFJLS_JCLHmY.roa (hash: bsxyDEYXXKuaXCj49B1x+haLTSrYJwKMFrod4qCfxp8=) 3: 297JVeg_EhdEgLGhXiEGZZ_qZI0.roa (hash: +M58bR0A7UiGwCIwF+zXUkmvSc0yGWa995tpAwlHj3I=) 4: bh8PSva3iIgm_-9004brZ4kDq90.crl (hash: 6b5dGuE5ggIp+ICFIcuhL18LMSq6C1L+fdSZdIU2gqQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bh8PSva3iIgm_-9004brZ4kDq90.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 14:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E1F0F4AF6B7888826FFEF74D386EB678903ABDD Validity Not Before: Mar 31 08:48:45 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=91B4EE22FE243F599CD4A5D13BFB3219225B1CDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:6c:0e:45:01:d7:95:02:ff:ae:5f:0a:03: a0:37:37:dc:a6:56:1f:2b:50:9a:4d:88:88:df:1f: 28:c0:bf:ff:70:d4:c7:3c:0e:00:9e:bc:41:a5:14: ef:42:0a:25:d8:6c:e5:d1:16:f5:3e:23:2d:f2:18: fd:95:6a:9e:28:95:fd:2b:4f:cc:3c:95:71:8c:32: 1e:ce:5e:de:71:59:24:64:d0:ab:cb:09:c6:42:2a: e4:3e:4d:5e:67:8e:8d:6a:21:e3:ab:62:5f:3d:d7: 71:d3:61:45:41:40:67:f4:25:1e:92:1b:24:4d:44: c3:6a:ec:de:89:a7:67:ea:d1:85:ff:91:43:df:83: 79:a7:f0:be:10:e0:b3:59:60:45:41:f0:97:28:7b: 33:01:53:84:7a:99:67:1e:86:05:81:81:2e:98:ab: 0e:05:0c:ba:fa:ba:6b:3c:0f:be:08:04:b6:0d:59: 33:21:91:0d:a7:97:13:1a:bb:66:fb:b8:f6:83:7e: 93:88:ca:67:0b:cc:65:a9:8f:68:6e:d3:06:96:bf: c3:53:f2:ea:52:a0:a5:c8:82:b6:a3:66:1f:1b:70: e1:31:c5:55:e0:2c:a7:e5:ff:15:10:79:15:c5:99: a6:62:28:9d:5b:f9:1e:7f:4e:47:3b:d2:60:2c:b9: c3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B4:EE:22:FE:24:3F:59:9C:D4:A5:D1:3B:FB:32:19:22:5B:1C:DD X509v3 Authority Key Identifier: keyid:6E:1F:0F:4A:F6:B7:88:88:26:FF:EF:74:D3:86:EB:67:89:03:AB:DD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bh8PSva3iIgm_-9004brZ4kDq90.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:58:05:5d:c3:08:4f:ba:a1:af:0b:92:2f:1c:6b:bf:56:82: 0e:f6:22:40:be:5a:8c:b6:dd:dc:65:74:2a:c1:1b:f3:1f:4e: 9f:5c:17:cb:b2:bf:d1:26:03:fc:5d:04:7e:34:99:c3:f5:75: 29:36:84:38:f3:0d:87:42:9e:51:e0:5d:22:bd:37:fc:25:ba: 3e:58:79:ff:c9:c1:4a:e1:a2:c0:31:43:94:d9:99:dc:ef:88: ba:b5:08:c1:1c:ca:00:b0:ee:8f:96:49:41:8a:94:3b:cf:82: 95:90:c5:41:7f:ca:94:df:76:65:c4:b9:76:e3:bd:28:82:77: 38:b9:5a:81:a1:52:2e:5a:d3:f4:09:a8:ea:eb:00:fa:9d:83: ed:f9:a4:2c:fa:82:e8:82:08:74:b7:03:cd:40:fb:f1:fd:d1: 3b:92:2b:d9:f2:67:a2:73:a6:05:71:0e:bc:fa:88:35:2c:5e: c1:37:47:99:3d:8e:e5:08:e6:7f:b6:f7:41:a3:60:33:8c:d5: a1:28:31:bd:25:c3:90:22:59:4a:0f:13:8f:b1:4a:c6:98:22: d9:ae:e7:94:87:11:e7:ad:69:55:0b:f3:f5:00:e3:82:74:0e: e7:ca:37:89:9a:a6:33:2e:97:42:00:8b:46:43:10:f5:fa:f5: 9a:2a:b0:30 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RTFG MEY0QUY2Qjc4ODg4MjZGRkVGNzREMzg2RUI2Nzg5MDNBQkREMB4XDTI2MDMzMTA4 NDg0NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOTFCNEVFMjJGRTI0M0Y1 OTlDRDRBNUQxM0JGQjMyMTkyMjVCMUNERDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMQvbA5FAdeVAv+uXwoDoDc33KZWHytQmk2IiN8fKMC//3DUxzwO AJ68QaUU70IKJdhs5dEW9T4jLfIY/ZVqniiV/StPzDyVcYwyHs5e3nFZJGTQq8sJ xkIq5D5NXmeOjWoh46tiXz3XcdNhRUFAZ/QlHpIbJE1Ew2rs3omnZ+rRhf+RQ9+D eafwvhDgs1lgRUHwlyh7MwFThHqZZx6GBYGBLpirDgUMuvq6azwPvggEtg1ZMyGR DaeXExq7Zvu49oN+k4jKZwvMZamPaG7TBpa/w1Py6lKgpciCtqNmHxtw4THFVeAs p+X/FRB5FcWZpmIonVv5Hn9ORzvSYCy5w2MCAwEAAaOCAfIwggHuMB0GA1UdDgQW BBSRtO4i/iQ/WZzUpdE7+zIZIlsc3TAfBgNVHSMEGDAWgBRuHw9K9reIiCb/73TT hutniQOr3TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQxL2JoOFBTdmEzaUlnbV8tOTAwNGJyWjRrRHE5MC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JoOFBTdmEzaUlnbV8tOTAwNGJyWjRr RHE5MC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85NDEvYmg4UFN2YTNpSWdtXy05MDA0YnJaNGtEcTkwLm1mdDAVBggr BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwDQYJKoZIhvcNAQELBQADggEBAF1YBV3DCE+6oa8Lki8ca79Wgg72IkC+ Woy23dxldCrBG/MfTp9cF8uyv9EmA/xdBH40mcP1dSk2hDjzDYdCnlHgXSK9N/wl uj5Yef/JwUrhosAxQ5TZmdzviLq1CMEcygCw7o+WSUGKlDvPgpWQxUF/ypTfdmXE uXbjvSiCdzi5WoGhUi5a0/QJqOrrAPqdg+35pCz6guiCCHS3A81A+/H90TuSK9ny Z6JzpgVxDrz6iDUsXsE3R5k9juUI5n+290GjYDOM1aEoMb0lw5AiWUoPE4+xSsaY Itmu55SHEeetaVUL8/UA44J0DufKN4mapjMul0IAi0ZDEPX69ZoqsDA= -----END CERTIFICATE-----Generated at Tue Apr 7 18:13:04 2026 by rpki-client