$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft File: r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft (raw, json) Hash identifier: qyZa0kLpL5Vpww1H6XGKfBcebKWlWpFYRuuTyEAsIP4= Subject key identifier: 7F:20:70:04:7E:E2:FF:1A:47:47:14:66:D2:B0:2B:E8:07:EA:8A:CD Authority key identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 Certificate issuer: /CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5 Certificate serial: 1C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft Manifest number: 097E Signing time: Tue 07 Jul 2026 10:50:52 +0000 Manifest this update: Tue 07 Jul 2026 10:50:52 +0000 Manifest next update: Thu 06 Aug 2026 10:50:52 +0000 Files and hashes: 1: -qZHmto1lqAQWIgvvLmIXpbK9wE.roa (hash: NmzDYpDKXQrchEp1FGdBTn2XRFNWf28H+zs858nc9RA=) 2: Et0xlHaBLGlJlw7J-YDjbyUiGBw.roa (hash: vLPdfbXg4JdfXjI79YrtlwANOfKQdFHlH5D2ouUUJGQ=) 3: KvQeS_L8j89a4TTbyqBxD9BTlnk.roa (hash: GdefVKsYksDUdBYFYkd+3eE8tm5FGX6XpQTedOSS8/0=) 4: gPFdjH-G3ix-PBu5qciAL2Rko-M.roa (hash: 3u9SpAlnP1ajcfz0gLHUdFeqx3gJladT1S809ETLIZE=) 5: r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl (hash: bnSWtI9CMarlDmAh0Qkrl4hII2wHxZftw7dAHJ1Uxh0=) 6: sX-vzJ651eFNncutB3lkt5117JY.roa (hash: 2csWAI5TzCpC5sJANoVTRXzyMqKAROzfPy+Cp/kTF48=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 09:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5 Validity Not Before: Jun 15 01:35:26 2026 GMT Not After : Jun 15 01:30:02 2027 GMT Subject: CN=7F2070047EE2FF1A47471466D2B02BE807EA8ACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:78:16:8c:d0:24:d9:f4:2f:25:6a:76:ba: bd:b3:26:0b:49:14:ab:1e:af:87:19:81:30:be:39: 41:73:88:97:61:dc:e6:29:36:6e:3e:b7:bb:04:09: 69:52:66:74:19:ec:2e:1f:c9:17:d3:77:4e:1d:a6: 04:3c:2a:d2:c9:aa:11:72:4f:0f:5c:b4:bd:07:5b: ee:02:e6:69:d1:2a:7e:bf:be:92:eb:0b:40:e0:c2: 24:dc:c7:33:87:2b:94:2f:71:1b:4d:b9:12:51:68: ba:4f:4a:30:95:32:08:8b:ab:e3:ac:f7:55:69:bc: c7:2c:46:1d:3c:cc:cc:8b:b3:c7:31:80:64:f9:e7: 05:4b:29:1c:63:f1:40:78:cc:d9:98:b3:8b:1a:54: 82:84:1e:9a:6c:22:c8:66:27:21:0b:48:65:16:7c: 8c:42:ad:f5:d5:21:69:5d:ca:7c:2f:48:ed:1e:e5: 48:15:17:5c:78:ed:ea:54:80:27:e6:22:26:28:aa: d5:33:e3:8b:49:f3:7a:6f:7c:18:ae:81:04:76:62: ed:45:75:ac:49:3c:bb:63:2e:3c:12:7d:14:43:f1: 4b:6e:f2:c0:0c:6f:e6:f3:07:e0:57:a8:df:f0:95: ab:33:23:6d:d1:41:5b:7b:c9:37:67:26:64:4d:62: 17:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:20:70:04:7E:E2:FF:1A:47:47:14:66:D2:B0:2B:E8:07:EA:8A:CD X509v3 Authority Key Identifier: keyid:AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:f9:0f:e2:43:d0:e6:8c:09:46:57:4c:ba:da:c6:66:a2:8b: 54:31:70:8b:86:f3:a6:ec:0a:8c:28:a6:08:29:c3:58:1a:8d: 6b:f4:a2:dd:07:7b:5d:e0:39:85:ff:1b:66:e5:70:06:1b:d1: 71:5e:c8:fe:09:4a:96:74:f1:5e:ca:2d:5a:7f:ca:58:83:4f: dd:a4:16:e7:10:cb:92:c0:03:ac:e4:76:0f:04:40:1c:90:90: 9b:a2:64:fe:89:4e:5f:37:b7:7d:5c:bc:c1:e6:fd:24:a1:0c: 4a:e0:ff:8d:e1:fa:ef:68:25:80:fc:5e:c9:40:77:a1:58:e5: 78:63:80:60:b4:83:8a:7f:4a:b8:22:f5:3a:6c:90:d0:e1:e0: 98:20:74:a8:03:e4:c9:91:81:08:ea:ed:bb:5b:aa:13:3c:ca: aa:b8:b8:8d:a8:c3:af:63:26:9a:df:40:59:7f:d5:99:26:22: fb:76:c2:01:a9:3c:8a:7c:c7:b3:80:08:46:cd:8f:d2:16:bb: 04:a0:3a:61:6b:c7:96:40:e4:d6:aa:f8:be:c1:f3:1b:4e:55: 1c:6d:ac:91:52:2e:ad:11:90:f5:5b:b6:dc:58:5c:bb:e1:44: 7c:89:d9:56:b3:4c:b0:0f:7a:46:4e:ac:bc:7e:6f:42:ee:58: 63:e1:bc:af -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRkQ4 MjQ3N0EwOTFCMTdDREE2MUM1NTYzQkMyOTIwQ0RDRDdBQUE1MB4XDTI2MDYxNTAx MzUyNloXDTI3MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoN0YyMDcwMDQ3RUUyRkYx QTQ3NDcxNDY2RDJCMDJCRTgwN0VBOEFDRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMpBeBaM0CTZ9C8lana6vbMmC0kUqx6vhxmBML45QXOIl2Hc5ik2 bj63uwQJaVJmdBnsLh/JF9N3Th2mBDwq0smqEXJPD1y0vQdb7gLmadEqfr++kusL QODCJNzHM4crlC9xG025ElFouk9KMJUyCIur46z3VWm8xyxGHTzMzIuzxzGAZPnn BUspHGPxQHjM2ZizixpUgoQemmwiyGYnIQtIZRZ8jEKt9dUhaV3KfC9I7R7lSBUX XHjt6lSAJ+YiJiiq1TPji0nzem98GK6BBHZi7UV1rEk8u2MuPBJ9FEPxS27ywAxv 5vMH4Feo3/CVqzMjbdFBW3vJN2cmZE1iF2cCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBR/IHAEfuL/GkdHFGbSsCvoB+qKzTAfBgNVHSMEGDAWgBSv2CR3oJGxfNphxVY7 wpIM3NeqpTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMDYvcjlna2Q2Q1JzWHphWWNWV084S1NETnpYcXFVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcjlna2Q2Q1JzWHphWWNWV084S1NE TnpYcXFVLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMTA2L3I5Z2tkNkNSc1h6YVljVldPOEtTRE56WHFxVS5tZnQw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCw+Q/iQ9DmjAlGV0y62sZmootU MXCLhvOm7AqMKKYIKcNYGo1r9KLdB3td4DmF/xtm5XAGG9FxXsj+CUqWdPFeyi1a f8pYg0/dpBbnEMuSwAOs5HYPBEAckJCbomT+iU5fN7d9XLzB5v0koQxK4P+N4frv aCWA/F7JQHehWOV4Y4BgtIOKf0q4IvU6bJDQ4eCYIHSoA+TJkYEI6u27W6oTPMqq uLiNqMOvYyaa30BZf9WZJiL7dsIBqTyKfMezgAhGzY/SFrsEoDpha8eWQOTWqvi+ wfMbTlUcbayRUi6tEZD1W7bcWFy74UR8idlWs0ywD3pGTqy8fm9C7lhj4byv -----END CERTIFICATE-----Generated at Tue Jul 7 12:44:24 2026 by rpki-client