$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft File: KJldaw3cIFs1lZMy0csdnYzwIoM.mft (raw, json) Hash identifier: nhFen1vxlfMZ2cmal2OIKKZs/HpIwpz3dTcm+0tHKIo= Subject key identifier: 19:3C:C2:D3:EA:C8:3C:A5:06:17:97:A4:12:C8:BA:15:F7:B3:C2:8C Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Certificate serial: 79 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft Manifest number: 0EC0 Signing time: Sun 21 Jun 2026 10:45:31 +0000 Manifest this update: Sun 21 Jun 2026 10:45:31 +0000 Manifest next update: Tue 21 Jul 2026 10:45:31 +0000 Files and hashes: 1: H0bDZd1ZuUZncevIo2uS2Dnz4NA.roa (hash: 6mlf9wWWw+6maEoIyGe5xv4x5MjfK3Zx0qnCI2bIdUM=) 2: JBdCgQEBjYDf3YbAmT_NkcfJ890.roa (hash: 0ERdQklraGIF8tA3cR0xIgquvRa0TVQleVRotF9ZsHo=) 3: KJldaw3cIFs1lZMy0csdnYzwIoM.crl (hash: PN3vjGX3F5hE+0UJCIHpXzWpJvlLrofws7qB5NwgHmg=) 4: Ova4PznjXTdwJWnYhwCn7O9H2hc.roa (hash: ymFXuBFk+GIeQf0q6ojUgvXQHj3iTbA+jsbjpRL+2pM=) 5: S9Ul_D5iB9rzhkLr6S--5zn0mPs.roa (hash: lyqwYRg0bXZPVYPBSyq+XKb8Cg5QegMWUS2a/3Ye1PU=) 6: kr70GHZ0ixusZ77bpLf8zVxFrO4.roa (hash: AF4Dd5ny70gb4kFw+QLnT+M0KGuIaON+g7Fas3QBDO0=) 7: soKUj5utSjKPindnDWuwnDyh6qY.roa (hash: suYiiscgG9zv6qrT7aGawFsQvXf+zLb3YM+g09hUG1o=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Jun 2026 14:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Validity Not Before: Jun 15 01:31:57 2026 GMT Not After : Jun 15 01:30:02 2027 GMT Subject: CN=193CC2D3EAC83CA5061797A412C8BA15F7B3C28C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f5:bc:29:a4:07:80:be:bb:cc:43:98:23:7b: ab:9d:4c:c8:06:88:9b:b5:bd:e8:f9:ab:ad:8b:9f: fb:1b:02:4a:7b:bc:f2:cf:24:75:69:b6:71:89:63: a5:fc:5b:b5:bc:7d:9e:4b:89:1b:bd:ce:37:31:0d: 2e:60:2c:78:09:ea:02:a1:4f:d1:88:55:88:51:df: b4:0a:ef:95:1b:e7:fe:10:32:7c:1d:99:4a:cc:0b: 10:b4:6c:7d:18:ea:5d:c8:db:19:c0:df:0b:fc:5c: 9e:c4:92:30:62:f2:ce:f4:d7:c6:d4:64:03:5e:c4: ce:33:9c:13:ea:65:3c:e5:0a:df:69:42:42:a0:76: 1c:ef:e9:a7:99:f8:49:3d:7c:fa:46:14:d0:5b:d1: c6:b1:51:d8:3f:f1:bc:4b:88:02:25:1c:8d:36:1d: 60:2a:5c:33:e8:17:e6:ad:f5:f1:39:49:ca:88:e0: 14:51:cb:30:a0:7e:11:ae:9d:53:ae:0c:8c:89:34: 97:66:c4:e7:78:5a:c1:36:df:b1:cf:71:1e:d6:91: ba:3b:c3:a8:bf:f3:d1:58:fb:e0:3a:7d:84:a6:81: 4a:6c:0e:ff:c3:91:13:67:ea:48:9c:e3:1f:d2:a6: 50:ee:8a:e3:05:06:8e:f5:92:8c:b3:1e:58:53:f5: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3C:C2:D3:EA:C8:3C:A5:06:17:97:A4:12:C8:BA:15:F7:B3:C2:8C X509v3 Authority Key Identifier: keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:3e:db:bd:54:9d:83:ed:f9:4f:a7:92:bc:ac:c5:b0:01:5a: 77:31:0e:99:a2:76:29:93:4a:b0:dd:f4:1d:8c:5c:e8:1a:01: f2:a8:6d:94:cc:df:51:25:46:57:3c:6e:5d:ee:59:2a:19:20: 33:09:f7:ed:18:60:bc:57:d3:9d:6f:3b:b4:72:56:15:32:05: 6b:69:18:44:fa:3c:2f:df:ad:d4:4c:74:c1:70:57:d9:40:4f: 2a:f9:a3:90:15:63:3f:ba:34:c1:0b:f0:74:b7:2c:d7:14:4d: ca:e0:60:07:48:56:c1:15:c4:41:fa:91:ed:31:b9:ba:0b:a1: 1b:99:e3:d4:d4:23:bd:da:1c:9c:4e:12:08:db:34:8a:c0:b8: f1:be:99:68:9d:9b:fd:8e:6d:4b:c3:d5:dd:96:b7:a1:6f:08: 87:3e:3f:2f:02:88:8e:e0:01:c2:df:a3:3a:c6:e5:7d:bd:53: fd:5c:cf:2b:1a:37:cf:7c:bc:44:b3:33:67:19:0b:dd:e5:49: 64:3b:66:9e:67:d1:2d:a5:f8:51:e3:38:f6:2c:b0:f8:db:1b: 87:bf:06:fe:d4:3a:74:0b:66:ad:32:2a:5c:be:45:07:32:62: 0d:36:78:84:e0:bf:d3:b5:57:d4:7b:c6:da:5d:19:f1:b0:67: 29:dd:d0:2b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODk5 NUQ2QjBEREMyMDVCMzU5NTkzMzJEMUNCMUQ5RDhDRjAyMjgzMB4XDTI2MDYxNTAx MzE1N1oXDTI3MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoMTkzQ0MyRDNFQUM4M0NB NTA2MTc5N0E0MTJDOEJBMTVGN0IzQzI4QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOD1vCmkB4C+u8xDmCN7q51MyAaIm7W96PmrrYuf+xsCSnu88s8k dWm2cYljpfxbtbx9nkuJG73ONzENLmAseAnqAqFP0YhViFHftArvlRvn/hAyfB2Z SswLELRsfRjqXcjbGcDfC/xcnsSSMGLyzvTXxtRkA17EzjOcE+plPOUK32lCQqB2 HO/pp5n4ST18+kYU0FvRxrFR2D/xvEuIAiUcjTYdYCpcM+gX5q318TlJyojgFFHL MKB+Ea6dU64MjIk0l2bE53hawTbfsc9xHtaRujvDqL/z0Vj74Dp9hKaBSmwO/8OR E2fqSJzjH9KmUO6K4wUGjvWSjLMeWFP1WzcCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBQZPMLT6sg8pQYXl6QSyLoV97PCjDAfBgNVHSMEGDAWgBQomV1rDdwgWzWVkzLR yx2djPAigzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA2MDIvS0psZGF3M2NJRnMxbFpNeTBjc2RuWXp3SW9NLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0psZGF3M2NJRnMxbFpNeTBjc2Ru WXp3SW9NLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzEwNjAyL0tKbGRhdzNjSUZzMWxaTXkwY3Nkbll6d0lvTS5tZnQw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJPtu9VJ2D7flPp5K8rMWwAVp3 MQ6ZonYpk0qw3fQdjFzoGgHyqG2UzN9RJUZXPG5d7lkqGSAzCfftGGC8V9Odbzu0 clYVMgVraRhE+jwv363UTHTBcFfZQE8q+aOQFWM/ujTBC/B0tyzXFE3K4GAHSFbB FcRB+pHtMbm6C6EbmePU1CO92hycThII2zSKwLjxvplonZv9jm1Lw9XdlrehbwiH Pj8vAoiO4AHC36M6xuV9vVP9XM8rGjfPfLxEszNnGQvd5UlkO2aeZ9EtpfhR4zj2 LLD42xuHvwb+1Dp0C2atMipcvkUHMmINNniE4L/TtVfUe8baXRnxsGcp3dAr -----END CERTIFICATE-----Generated at Sun Jun 21 17:04:09 2026 by rpki-client