$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft File: kmBXdWbkftoPWGbOD0cUqRmPpfU.mft (raw, json) Hash identifier: fk8GIxdC4ZksVgLs+rBNBHdawJAf+ZGxGyV2390xQjE= Subject key identifier: BB:8B:2A:44:B8:FB:B5:2F:23:BC:05:87:A0:BC:D3:9B:93:F9:CB:2B Authority key identifier: 92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5 Certificate issuer: /CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5 Certificate serial: 39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft Manifest number: 0C2E Signing time: Tue 07 Apr 2026 14:49:06 +0000 Manifest this update: Tue 07 Apr 2026 14:49:06 +0000 Manifest next update: Wed 22 Apr 2026 14:49:06 +0000 Files and hashes: 1: dS42qB91jiIR6Pq1rvuvQxk2AwQ.roa (hash: tvu8sZQ+OuBdu+AslRLvKnRBruSq9zS5v46IdRvgDfI=) 2: dWY5YRNqyvuy3R66D9d06P621Wk.roa (hash: vN1hSMKWK1kHKyA4qc9iJ49X1YUqlOrm+yUrO9Tno2M=) 3: iuuYmU0R6LfXbvYKgzZ503_im2k.roa (hash: WoKPi92YllE/8DZe4ek1PHc/2f+sxx5RD8P/OtmHp5U=) 4: kmBXdWbkftoPWGbOD0cUqRmPpfU.crl (hash: sy738mbfcP/z40DS6rk3OY0dWSnaOnSXV0DHxoRFL1g=) 5: nF_EZjWFW7Kq2FUGXRoFvBBa8HY.roa (hash: Inq30lo88PYzdvVxyuicz/5NZ4yE3CU5QoJz5/X8Ufw=) 6: q0J2XF0j-QrPbLMj1muWk-RCL4M.roa (hash: 4jcW2ioE518nQ0RKJsS9Q+Zh6ZifQxZUykU0Cy5ga1Q=) 7: zQKhl42SIDSYb6ShjAGYTgXN6Pw.roa (hash: mv+24F/QCPSHd6oyafGK9PD54YcgaXOo2JYuHDygqjs=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5 Validity Not Before: Mar 31 08:40:16 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=BB8B2A44B8FBB52F23BC0587A0BCD39B93F9CB2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:93:e2:77:04:68:46:00:48:ee:71:15:3b:6b: 4f:0f:ad:49:84:db:3a:86:3b:23:91:03:36:0e:e9: 98:e8:cc:60:ce:37:47:4c:0a:57:b0:c6:f1:cd:48: 1e:02:23:c8:7b:10:72:aa:0b:f0:d2:c3:70:df:98: 96:2a:cf:ac:5a:e0:71:c2:40:fc:bb:c2:9a:d5:24: f0:cf:0d:84:b5:44:86:58:6e:37:02:06:fd:dc:f9: b4:07:21:70:c1:ef:c6:4c:fc:7a:67:8c:35:c7:01: e3:53:04:9c:25:92:6c:f7:5a:80:b6:ad:b5:25:f1: f3:09:a0:a8:7a:a8:59:f1:ac:8e:9d:d0:78:7d:75: d8:5f:15:02:17:21:46:ef:e4:5f:7f:f3:81:4c:51: 34:76:03:93:9c:9e:38:2b:4a:b5:77:a2:39:63:31: 95:2e:2d:b4:c0:67:f3:20:99:29:2e:57:ec:4a:e0: 05:3b:d1:64:a5:82:98:ff:a1:7c:ce:34:d0:a3:4b: 93:4c:c7:11:a2:c8:77:8e:26:e4:06:52:5f:8f:23: 30:87:1f:1a:6c:01:fd:aa:be:45:6f:af:88:fa:6a: c8:e2:8e:ff:0c:97:16:5f:31:fa:d0:78:e4:5f:6d: ee:81:95:ff:92:b4:09:57:22:41:b8:b3:dd:bd:98: 86:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8B:2A:44:B8:FB:B5:2F:23:BC:05:87:A0:BC:D3:9B:93:F9:CB:2B X509v3 Authority Key Identifier: keyid:92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b5:91:3f:36:33:3b:5d:d6:80:f1:af:e0:0d:66:c3:6e:e4: 5f:71:ec:84:7c:dd:7e:42:8e:4c:a4:34:ea:c7:38:55:bd:e4: cb:3f:e8:1f:d5:d3:f9:62:74:99:b5:1e:47:24:04:b8:10:c4: 6b:43:5a:24:c3:05:02:15:d0:c4:a8:3f:03:49:8e:8e:14:6b: 36:b6:e7:82:4b:06:1f:2b:64:5d:c8:24:cc:d1:5c:45:51:3b: 58:dd:b2:f1:1a:fa:11:6b:6b:19:67:4f:2a:70:56:61:c7:b9: b2:0d:31:cd:e4:b1:14:a9:ef:76:df:29:ff:16:d9:00:da:67: 9e:66:21:0d:53:53:86:5b:e1:95:11:40:42:5f:b3:45:b6:b3: 36:ce:78:0d:8c:85:db:0b:f3:15:47:67:8b:3a:54:30:46:74: 18:70:48:60:f6:8b:0f:51:dc:90:dd:90:0d:a0:f0:4a:9a:9d: 32:33:d9:5c:e0:7f:36:1d:40:9e:fc:5f:45:ff:e2:7f:29:96: 5d:4b:bc:28:e0:60:d6:15:0e:ad:d4:ab:ae:f1:1e:7b:a7:7f: f8:ad:0b:ec:7b:45:99:b7:86:10:51:d9:22:c9:3d:8a:c4:34: 63:bb:71:31:a2:ae:a3:bc:14:dd:a0:48:7a:3c:e3:ac:14:c3: 43:35:42:0e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MjYw NTc3NTY2RTQ3RURBMEY1ODY2Q0UwRjQ3MTRBOTE5OEZBNUY1MB4XDTI2MDMzMTA4 NDAxNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQkI4QjJBNDRCOEZCQjUy RjIzQkMwNTg3QTBCQ0QzOUI5M0Y5Q0IyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPeT4ncEaEYASO5xFTtrTw+tSYTbOoY7I5EDNg7pmOjMYM43R0wK V7DG8c1IHgIjyHsQcqoL8NLDcN+YlirPrFrgccJA/LvCmtUk8M8NhLVEhlhuNwIG /dz5tAchcMHvxkz8emeMNccB41MEnCWSbPdagLattSXx8wmgqHqoWfGsjp3QeH11 2F8VAhchRu/kX3/zgUxRNHYDk5yeOCtKtXeiOWMxlS4ttMBn8yCZKS5X7ErgBTvR ZKWCmP+hfM400KNLk0zHEaLId44m5AZSX48jMIcfGmwB/aq+RW+viPpqyOKO/wyX Fl8x+tB45F9t7oGV/5K0CVciQbiz3b2YhkECAwEAAaOCAfIwggHuMB0GA1UdDgQW BBS7iypEuPu1LyO8BYegvNObk/nLKzAfBgNVHSMEGDAWgBSSYFd1ZuR+2g9YZs4P RxSpGY+l9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTk2L2ttQlhkV2JrZnRvUFdHYk9EMGNVcVJtUHBmVS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ttQlhkV2JrZnRvUFdHYk9EMGNVcVJt UHBmVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85OTYva21CWGRXYmtmdG9QV0diT0QwY1VxUm1QcGZVLm1mdDAVBggr BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwDQYJKoZIhvcNAQELBQADggEBAEq1kT82Mztd1oDxr+ANZsNu5F9x7IR8 3X5CjkykNOrHOFW95Ms/6B/V0/lidJm1HkckBLgQxGtDWiTDBQIV0MSoPwNJjo4U aza254JLBh8rZF3IJMzRXEVRO1jdsvEa+hFraxlnTypwVmHHubINMc3ksRSp73bf Kf8W2QDaZ55mIQ1TU4Zb4ZURQEJfs0W2szbOeA2MhdsL8xVHZ4s6VDBGdBhwSGD2 iw9R3JDdkA2g8EqanTIz2VzgfzYdQJ78X0X/4n8pll1LvCjgYNYVDq3Uq67xHnun f/itC+x7RZm3hhBR2SLJPYrENGO7cTGirqO8FN2gSHo846wUw0M1Qg4= -----END CERTIFICATE-----Generated at Tue Apr 7 18:11:29 2026 by rpki-client