$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft File: nbu4hcPSk50dl7JOrYvQZxca0rI.mft (raw, json) Hash identifier: vuQH7m2Oe3sr+aSV3it9oFDXFn6sSug0RflWk9phRU4= Subject key identifier: 02:CB:8E:F5:05:D8:5E:0E:F9:40:88:5D:95:CF:48:81:84:1F:9F:C1 Authority key identifier: 9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2 Certificate issuer: /CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2 Certificate serial: 0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft Manifest number: 01F7 Signing time: Tue 07 Apr 2026 14:22:06 +0000 Manifest this update: Tue 07 Apr 2026 14:22:06 +0000 Manifest next update: Wed 22 Apr 2026 14:22:06 +0000 Files and hashes: 1: 52jYiT46Msq_m5cR8Ve3SehuOTQ.roa (hash: MMkNAe7NQK36MTfTk4ETiff+VkRl++ePeNg00PTwgNk=) 2: nbu4hcPSk50dl7JOrYvQZxca0rI.crl (hash: WE3yahC40Q4osoc+T6ufcWEuVMzuZDhRBanP1C34Svw=) 3: xiKin-JHEy6ydknOgmZerLEf0I4.roa (hash: v7hxP03+AjnvHQdhGNPQDY2xke6fzzz52ykfo1chUKk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 14:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2 Validity Not Before: Mar 31 08:48:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=02CB8EF505D85E0EF940885D95CF4881841F9FC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b4:86:64:f9:9a:40:28:48:49:95:a8:2a:74: 19:94:a6:d4:7a:da:23:fa:c5:01:54:58:26:e6:5a: ee:bf:2d:57:fe:b9:04:06:fb:8c:ff:ac:30:3a:14: 2e:2d:90:bb:60:b3:d7:ed:f5:f9:02:a9:6e:91:96: d9:70:33:bd:45:ab:87:45:6f:36:50:40:f5:6f:1a: da:6c:6b:14:27:81:13:f1:aa:2f:18:6e:11:d2:50: 79:8e:c5:74:6c:a1:5e:52:c4:f6:3a:52:0f:32:51: 9f:3b:d8:cc:b5:e4:68:3d:ce:d5:1e:3a:91:62:c2: 4c:28:75:02:97:92:67:82:f7:b8:52:ea:98:08:c7: 97:30:97:f4:de:eb:f3:23:b5:75:1c:2b:d9:fb:79: 65:0f:75:d7:98:d7:bc:08:57:71:68:59:22:62:4e: b9:8f:fc:66:3e:13:65:51:fa:2d:b0:fc:62:9c:53: 39:5f:08:01:cb:b0:c5:a5:2a:af:9c:a3:6f:a6:29: 78:e7:e6:02:0b:6a:a4:85:25:d4:4f:76:46:2b:ba: fd:b2:84:a4:30:92:4d:18:56:27:b9:aa:1c:e9:9f: a3:3d:fd:ad:df:f4:47:e0:cc:a4:cc:1f:46:eb:a1: f8:08:fc:cb:af:a2:98:3d:3d:45:53:e3:b7:41:b9: 97:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CB:8E:F5:05:D8:5E:0E:F9:40:88:5D:95:CF:48:81:84:1F:9F:C1 X509v3 Authority Key Identifier: keyid:9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:51:2d:53:97:47:a4:c5:72:38:25:8c:be:5f:e6:de:76:2f: 6b:2d:57:c6:32:0e:06:f8:8c:45:cc:70:43:a4:b3:19:3b:69: 08:e9:3f:fa:e8:73:9c:3f:da:26:93:6b:36:66:74:8f:01:f6: 20:28:19:02:dd:ab:64:35:25:71:db:74:10:e5:61:8a:fb:3d: 30:56:8f:50:ab:28:1e:b6:a8:4c:40:a1:62:27:6d:84:b1:25: 6b:ca:ef:ee:c7:f0:72:7d:dc:ac:c5:e6:01:57:ad:fc:14:4f: b3:fb:fe:f3:e4:5f:40:c2:dc:71:d6:40:70:5e:39:c3:3b:99: 5c:94:aa:f7:ed:74:f6:22:ec:1a:8b:1a:97:8c:ca:93:ed:61: 76:ad:c0:c3:b9:89:51:4e:66:de:83:09:6c:e6:ef:50:e2:82: 4e:62:62:3c:2a:58:8f:ec:b0:1d:b6:20:71:8f:01:2d:34:1a: 2f:dd:05:1c:28:c4:b9:2b:9e:e9:21:f2:95:6a:9b:1f:c3:f6: 53:17:87:e4:aa:b4:67:d5:72:54:ed:6d:97:38:70:61:9d:59: b5:85:58:2d:fe:c7:3e:51:50:d3:c8:01:ae:71:53:25:ec:42: d5:ef:02:a5:32:69:27:a6:2d:23:e5:34:e9:70:b5:17:01:2f: 10:83:41:da -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REJC Qjg4NUMzRDI5MzlEMUQ5N0IyNEVBRDhCRDA2NzE3MUFEMkIyMB4XDTI2MDMzMTA4 NDgyMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDJDQjhFRjUwNUQ4NUUw RUY5NDA4ODVEOTVDRjQ4ODE4NDFGOUZDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANO0hmT5mkAoSEmVqCp0GZSm1HraI/rFAVRYJuZa7r8tV/65BAb7 jP+sMDoULi2Qu2Cz1+31+QKpbpGW2XAzvUWrh0VvNlBA9W8a2mxrFCeBE/GqLxhu EdJQeY7FdGyhXlLE9jpSDzJRnzvYzLXkaD3O1R46kWLCTCh1ApeSZ4L3uFLqmAjH lzCX9N7r8yO1dRwr2ft5ZQ9115jXvAhXcWhZImJOuY/8Zj4TZVH6LbD8YpxTOV8I AcuwxaUqr5yjb6YpeOfmAgtqpIUl1E92Riu6/bKEpDCSTRhWJ7mqHOmfoz39rd/0 R+DMpMwfRuuh+Aj8y6+imD09RVPjt0G5lzECAwEAAaOCAfIwggHuMB0GA1UdDgQW BBQCy471BdheDvlAiF2Vz0iBhB+fwTAfBgNVHSMEGDAWgBSdu7iFw9KTnR2Xsk6t i9BnFxrSsjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQ2L25idTRoY1BTazUwZGw3Sk9yWXZRWnhjYTBySS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL25idTRoY1BTazUwZGw3Sk9yWXZRWnhj YTBySS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85NDYvbmJ1NGhjUFNrNTBkbDdKT3JZdlFaeGNhMHJJLm1mdDAVBggr BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwDQYJKoZIhvcNAQELBQADggEBAIJRLVOXR6TFcjgljL5f5t52L2stV8Yy Dgb4jEXMcEOksxk7aQjpP/roc5w/2iaTazZmdI8B9iAoGQLdq2Q1JXHbdBDlYYr7 PTBWj1CrKB62qExAoWInbYSxJWvK7+7H8HJ93KzF5gFXrfwUT7P7/vPkX0DC3HHW QHBeOcM7mVyUqvftdPYi7BqLGpeMypPtYXatwMO5iVFOZt6DCWzm71Digk5iYjwq WI/ssB22IHGPAS00Gi/dBRwoxLkrnukh8pVqmx/D9lMXh+SqtGfVclTtbZc4cGGd WbWFWC3+xz5RUNPIAa5xUyXsQtXvAqUyaSemLSPlNOlwtRcBLxCDQdo= -----END CERTIFICATE-----Generated at Tue Apr 7 18:12:54 2026 by rpki-client