$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft File: ih5yUXa_2avaXMt7IaELj4231Xg.mft (raw, json) Hash identifier: 2MTSQOJ6qdCKR2gEUNHyPZKyqIm2ygc/ArJUZu0OUno= Subject key identifier: ED:A9:6D:4E:AC:22:60:03:DC:14:BA:44:BE:2D:A4:25:D2:EF:A4:85 Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78 Certificate issuer: /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578 Certificate serial: 60 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft Manifest number: 0C9F Signing time: Tue 07 Apr 2026 14:34:26 +0000 Manifest this update: Tue 07 Apr 2026 14:34:26 +0000 Manifest next update: Wed 22 Apr 2026 14:34:26 +0000 Files and hashes: 1: 4cMVGji_CSDiEOzTcLmS_JCE_gk.roa (hash: 9izGyHYj87UaEt95xXEoxpz7ULHLu3vBEEUsDKyw/aA=) 2: HgICBi7AoCs2n4dhD4mAVak8-h8.roa (hash: Q4Hv3W/Gyfarmg31kavFmC9JYf08iMeuWqixJXQ03Sk=) 3: TEwvIcPECPVUNSZOYciPcr5_hXk.roa (hash: BWKr+kDXODk6tk+2nrHsqvpNEhPALRhCUcbGVvIq6N0=) 4: b4JpVXE7TjXkT8MdXZq9_n99hHI.roa (hash: w/LiMW/0SzNtPaC3fafTaJojv2wRwYCYMknBRufvK4s=) 5: ih5yUXa_2avaXMt7IaELj4231Xg.crl (hash: gQjguSfvXegAhM0bdDFfAbHfZn63pwKaggUfGK0gOes=) 6: qr_ClXf41JbTuCXMyIdYdl4QHh4.roa (hash: o0DKhip0SBONFtXcHRCM/KyClFUzsfk09n3AVSuCoeA=) 7: zW8MCH6Z8A8ICcOT3VdBrWqyfm8.roa (hash: DW7y0LxIpiijxaiEQqiHjUkI/6Rw2eNxPDVIuvXypJQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578 Validity Not Before: Mar 31 08:16:12 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=EDA96D4EAC226003DC14BA44BE2DA425D2EFA485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:f3:cb:18:c7:18:20:1e:4a:ce:69:29:96: dc:6b:14:3c:9d:79:65:a3:4e:68:4e:ef:c3:80:ae: 75:01:47:dd:0b:66:29:a0:d2:ec:ef:e4:9d:1a:38: d0:7f:89:d6:2e:25:aa:5f:eb:45:ff:d8:6e:ac:83: b2:30:ef:c8:0b:2d:00:02:d7:c4:89:c4:46:49:dd: b9:bf:84:01:28:1d:8c:75:d3:74:87:69:1f:0b:a2: 64:11:7a:7d:c2:86:52:75:42:3f:ef:28:38:b6:a9: 62:b8:77:95:a3:75:54:2a:ec:16:1b:d3:06:8a:46: 4b:eb:2c:a0:f3:00:6a:71:cc:cd:1f:cf:fb:4c:41: 51:64:ab:bb:77:b5:eb:d8:fc:4c:73:15:e1:95:d9: a2:af:f9:d6:25:90:ca:8c:2c:3e:f1:32:9f:41:d8: 40:8d:31:ac:ea:f4:3c:ae:05:0f:6f:b9:97:66:39: 24:38:c9:db:27:a8:3e:89:4a:36:c7:27:1c:7a:a9: db:b3:65:f4:b7:c5:0f:5c:9c:cd:36:38:85:99:e0: 21:bb:92:0e:ae:25:77:f4:52:86:6a:78:0a:49:10: 47:bf:81:5c:1c:7b:7f:df:3f:a6:9a:e6:6f:c5:8c: f6:8b:9b:21:0c:6b:36:f6:f5:5d:f0:dd:ed:4e:19: fc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A9:6D:4E:AC:22:60:03:DC:14:BA:44:BE:2D:A4:25:D2:EF:A4:85 X509v3 Authority Key Identifier: keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:5b:77:a0:33:f1:cd:b9:d3:18:8e:03:29:36:5f:b3:2b:30: 46:69:0e:32:93:6f:c9:3c:3c:f1:6e:92:b6:68:72:9b:d8:d5: 38:49:e3:7b:8c:34:ba:f5:0e:1c:a1:93:c3:ab:4d:e3:ec:94: cd:ca:80:c2:75:81:cd:9e:53:dd:cc:9e:05:8f:7f:04:e5:48: f5:92:11:e1:d3:ca:c4:d0:19:e2:d0:9e:2f:f3:3d:27:c5:f8: 8a:04:fa:ec:f9:06:54:63:09:b1:63:8a:41:04:6b:a5:78:38: 6f:8f:3c:c1:45:8a:c2:bc:2d:89:3c:f1:cc:28:19:25:27:8d: 1a:47:c9:04:05:cf:24:66:e6:7d:90:42:f5:a7:93:75:0c:34: cb:4f:bc:bb:ac:f9:58:5d:3a:a3:fc:1e:b9:fc:d1:90:bc:32: de:17:12:c5:6b:b6:86:73:06:67:d7:91:26:d0:2a:9a:55:12: 44:53:40:29:b7:ca:96:de:e3:ce:32:48:f2:e7:d7:44:7c:be: d2:02:09:63:7f:4b:89:b2:45:56:14:2b:74:2d:21:23:8f:ce: 19:ed:b2:7d:a6:4e:df:50:09:cc:0f:4f:3d:db:de:84:ac:67: 19:64:8b:7f:44:96:8a:b4:7b:56:8c:18:a3:a4:c9:dd:d7:be: d9:82:5f:13 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QTFF NzI1MTc2QkZEOUFCREE1Q0NCN0IyMUExMEI4RjhEQjdENTc4MB4XDTI2MDMzMTA4 MTYxMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRURBOTZENEVBQzIyNjAw M0RDMTRCQTQ0QkUyREE0MjVEMkVGQTQ4NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKPM88sYxxggHkrOaSmW3GsUPJ15ZaNOaE7vw4CudQFH3QtmKaDS 7O/knRo40H+J1i4lql/rRf/YbqyDsjDvyAstAALXxInERkndub+EASgdjHXTdIdp HwuiZBF6fcKGUnVCP+8oOLapYrh3laN1VCrsFhvTBopGS+ssoPMAanHMzR/P+0xB UWSru3e169j8THMV4ZXZoq/51iWQyowsPvEyn0HYQI0xrOr0PK4FD2+5l2Y5JDjJ 2yeoPolKNscnHHqp27Nl9LfFD1yczTY4hZngIbuSDq4ld/RShmp4CkkQR7+BXBx7 f98/pprmb8WM9oubIQxrNvb1XfDd7U4Z/GECAwEAAaOCAfIwggHuMB0GA1UdDgQW BBTtqW1OrCJgA9wUukS+LaQl0u+khTAfBgNVHSMEGDAWgBSKHnJRdr/Zq9pcy3sh oQuPjbfVeDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQyL2loNXlVWGFfMmF2YVhNdDdJYUVMajQyMzFYZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2loNXlVWGFfMmF2YVhNdDdJYUVMajQy MzFYZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85NDIvaWg1eVVYYV8yYXZhWE10N0lhRUxqNDIzMVhnLm1mdDAVBggr BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwDQYJKoZIhvcNAQELBQADggEBAKBbd6Az8c250xiOAyk2X7MrMEZpDjKT b8k8PPFukrZocpvY1ThJ43uMNLr1Dhyhk8OrTePslM3KgMJ1gc2eU93MngWPfwTl SPWSEeHTysTQGeLQni/zPSfF+IoE+uz5BlRjCbFjikEEa6V4OG+PPMFFisK8LYk8 8cwoGSUnjRpHyQQFzyRm5n2QQvWnk3UMNMtPvLus+VhdOqP8Hrn80ZC8Mt4XEsVr toZzBmfXkSbQKppVEkRTQCm3ypbe484ySPLn10R8vtICCWN/S4myRVYUK3QtISOP zhntsn2mTt9QCcwPTz3b3oSsZxlki39Eloq0e1aMGKOkyd3XvtmCXxM= -----END CERTIFICATE-----Generated at Tue Apr 7 18:11:29 2026 by rpki-client