$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft File: WK5SwfNr-vhS9BDxytDTaD1UEmE.mft (raw, json) Hash identifier: JxDVwHd7Sqzezo2t4hBH7j8HIC/UeVnWZX20+WrdBHw= Subject key identifier: 01:2E:2C:A4:C1:27:DF:7F:44:AB:67:30:62:F6:85:FE:4B:02:C9:6D Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61 Certificate issuer: /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261 Certificate serial: 5A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft Manifest number: 0CB2 Signing time: Mon 06 Apr 2026 09:47:47 +0000 Manifest this update: Mon 06 Apr 2026 09:47:47 +0000 Manifest next update: Tue 21 Apr 2026 09:47:47 +0000 Files and hashes: 1: -TsaytSYVPsVS7zRk3eRSCMa6uE.roa (hash: MFIfWcySBsNx9/4UnDgYwfV/gdz+YR6OPDzF3Sqwyc4=) 2: WK5SwfNr-vhS9BDxytDTaD1UEmE.crl (hash: M5Bm8jIJRjtDZ3WENpaVhg9SDN4pE6OEVPmq0TpIVtE=) 3: X4R-I6pyoGaxAXAO7e4xdm6gUiI.roa (hash: ijEpOynAeUY9km3HzWFv7+sHVQqQw+yIf73cvF4bHlM=) 4: l4qqsrk44JN4FKmjj_ig25y0Gkw.roa (hash: eO/nHRJAWlo5Q2pRb4bjkyiFnwZePChsC/GSjqxzGn0=) 5: sqmARoP4_7VlOtUgQ43GP2EMPIc.roa (hash: hUauns3FVkUu3AUw4M/7ltFOSSDbQI//ZA+wHXmPMAg=) 6: tuRKj2vmOWf1QO4j17KUMVywV9g.roa (hash: yw+f2kAD48t0xop7ecI4Vsf6VeDAZgumBnLGHr95obk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 10:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261 Validity Not Before: Mar 31 08:14:27 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=012E2CA4C127DF7F44AB673062F685FE4B02C96D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7a:76:14:50:d3:f8:89:ca:e7:89:3e:85:67: e0:86:ef:cc:9c:8c:88:ad:88:b2:50:d5:57:d2:bf: 0f:84:96:8a:5b:04:2f:48:b3:9b:ac:34:3b:38:2f: 08:9d:ed:3a:42:f4:ab:20:25:2f:43:cd:6f:63:6f: 82:eb:af:47:d8:bd:81:33:96:9d:20:1a:1d:d7:65: aa:25:f0:0b:a5:5f:a0:be:5d:a5:c9:1b:46:04:e1: 46:00:1c:d2:08:79:0b:b7:42:9c:12:35:87:8d:25: fb:e1:07:a8:a8:05:dc:8e:b2:34:1c:4e:92:eb:c3: dc:6a:35:06:25:08:28:e8:29:ae:d6:af:47:cb:34: 69:b8:15:d1:1b:c1:96:b8:8a:7f:97:e2:cc:b3:3e: 68:dc:96:0b:8a:5e:55:4d:10:eb:7f:09:92:7e:27: 19:82:76:1d:b0:bf:3a:56:0c:fe:76:5e:41:2c:07: 41:72:4e:f5:86:df:f8:36:4c:bb:03:bb:d4:b0:dc: 51:f4:bf:40:fd:67:c9:94:c9:ec:de:1c:78:03:26: 36:a1:c6:a4:28:81:df:3c:f5:af:9f:99:ae:63:64: 03:a4:d3:5e:22:2c:24:1f:52:3d:bc:0c:01:2a:d2: 47:7a:29:1b:88:8a:2a:4b:aa:19:75:58:67:2d:9a: 90:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2E:2C:A4:C1:27:DF:7F:44:AB:67:30:62:F6:85:FE:4B:02:C9:6D X509v3 Authority Key Identifier: keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ee:ff:b2:61:19:88:51:18:3b:89:63:4c:12:84:94:15:08: ed:4b:a2:8e:03:57:fe:5a:ff:0a:ff:1e:4e:5f:c5:39:47:dd: 60:06:28:74:c0:a0:8e:61:0d:d0:55:65:6d:79:2d:d7:98:c2: 3e:e2:df:2f:5a:f3:60:27:a0:2f:1a:eb:7b:22:77:53:3c:26: 5c:de:01:8b:58:12:35:1a:29:f3:ae:08:18:19:78:e0:21:d1: 9e:c2:0d:db:94:13:7c:bc:7e:55:f4:41:ea:ac:c4:8e:4f:3b: 12:10:cb:06:20:56:c0:67:f3:eb:3c:f5:aa:87:14:d7:4d:f7: b3:12:3f:51:2c:bb:99:ef:b9:3a:99:71:9e:c0:bb:45:46:34: f5:a7:42:f8:06:6f:d0:7f:2f:dd:6a:23:d9:18:3e:86:8c:f5: 94:4c:0f:c3:6d:56:db:7d:a3:31:66:5e:35:11:2b:a4:57:76: f7:3a:77:9a:30:ff:f2:88:9f:e0:c0:57:88:52:e8:cc:ba:a5: 12:18:25:f8:af:63:83:b5:04:a7:c0:dc:8b:eb:7b:72:a5:38: 05:ef:5e:29:6d:1f:ec:d9:9d:d6:a6:c2:6b:5d:02:3c:9a:6a: 94:f6:a2:6d:af:63:da:0e:4c:e6:8a:63:e2:28:4a:06:6a:d7: f2:11:fb:97 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OEFF NTJDMUYzNkJGQUY4NTJGNDEwRjFDQUQwRDM2ODNENTQxMjYxMB4XDTI2MDMzMTA4 MTQyN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDEyRTJDQTRDMTI3REY3 RjQ0QUI2NzMwNjJGNjg1RkU0QjAyQzk2RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOB6dhRQ0/iJyueJPoVn4IbvzJyMiK2IslDVV9K/D4SWilsEL0iz m6w0OzgvCJ3tOkL0qyAlL0PNb2NvguuvR9i9gTOWnSAaHddlqiXwC6VfoL5dpckb RgThRgAc0gh5C7dCnBI1h40l++EHqKgF3I6yNBxOkuvD3Go1BiUIKOgprtavR8s0 abgV0RvBlriKf5fizLM+aNyWC4peVU0Q638Jkn4nGYJ2HbC/OlYM/nZeQSwHQXJO 9Ybf+DZMuwO71LDcUfS/QP1nyZTJ7N4ceAMmNqHGpCiB3zz1r5+ZrmNkA6TTXiIs JB9SPbwMASrSR3opG4iKKkuqGXVYZy2akJcCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBQBLiykwSfff0SrZzBi9oX+SwLJbTAfBgNVHSMEGDAWgBRYrlLB82v6+FL0EPHK 0NNoPVQSYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNzIvV0s1U3dmTnItdmhTOUJEeHl0RFRhRDFVRW1FLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV0s1U3dmTnItdmhTOUJEeHl0RFRh RDFVRW1FLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMDcyL1dLNVN3Zk5yLXZoUzlCRHh5dERUYUQxVUVtRS5tZnQw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCS7v+yYRmIURg7iWNMEoSUFQjt S6KOA1f+Wv8K/x5OX8U5R91gBih0wKCOYQ3QVWVteS3XmMI+4t8vWvNgJ6AvGut7 IndTPCZc3gGLWBI1GinzrggYGXjgIdGewg3blBN8vH5V9EHqrMSOTzsSEMsGIFbA Z/PrPPWqhxTXTfezEj9RLLuZ77k6mXGewLtFRjT1p0L4Bm/Qfy/daiPZGD6GjPWU TA/DbVbbfaMxZl41ESukV3b3OneaMP/yiJ/gwFeIUujMuqUSGCX4r2ODtQSnwNyL 63typTgF714pbR/s2Z3WpsJrXQI8mmqU9qJtr2PaDkzmimPiKEoGatfyEfuX -----END CERTIFICATE-----Generated at Mon Apr 6 14:12:17 2026 by rpki-client