$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft File: Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft (raw, json) Hash identifier: KVCixpmxWPSsvhwqJF5zvRy1RuOU8FeUq2dUUDn8FT4= Subject key identifier: 2C:0E:A5:B8:AB:E9:CF:D2:6F:6F:EA:5E:1A:E0:5E:18:D6:DB:A0:DF Authority key identifier: 63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04 Certificate issuer: /CN=631DAAE223AC75DA6A1635051B87AAD42C331D04 Certificate serial: 01 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft Manifest number: 25 Signing time: Mon 06 Jul 2026 22:50:30 +0000 Manifest this update: Mon 06 Jul 2026 22:50:30 +0000 Manifest next update: Wed 05 Aug 2026 22:50:30 +0000 Files and hashes: 1: 5uIdyRLYURqddQNi29AEUF5SVn0.roa (hash: Q6XPtvSjKiOoCbmeXcwJUJZD2I/CE1cY4Xwxj47ZwBQ=) 2: 7HttUotbaLZGr4lCTOZZwyqq_c8.roa (hash: psDF9utMejJTNoECbkDpinqsb0kI6PVdgBU6zvkLvi8=) 3: D31Y23wpkGD7OzABTWev6dAYwgs.roa (hash: +M4p7bmf/YLM41kno0X0kuLr9kLJZ/ieVYsL/NlUPPg=) 4: LptQFbRW2qiLUo7EAy8BIl7fiks.roa (hash: R5TuzKbmha4gmJjd+vZ3C81Bc/6zf52ihReP9d8KdOY=) 5: SjK9DguM-GKksd87Fu2EaF94SLc.roa (hash: vOt5Bsp4f5xe9WQsds8d7pCmmsyD+M0/OQl8DAUxqDc=) 6: Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl (hash: /5gojaQwuCZCgE8/iywmUxsSPXZxvh0OeeQWkXTsRLE=) 7: nndTEL2nUXmBs4wno9f7IOeOzZw.roa (hash: 28cJ3Rx/9n1QXng+O3K1Qa61n0nnEPP6lrZmirOoSQc=) 8: ve8hLnyPibLrJZ0Nj3qWOq1CsEI.roa (hash: gp6w3fEgXiiJVCyyuQvpuGziIVbO61TMDR/eZKDzrFo=) 9: vv7LMN0V7Y589q2NzMOil1-KJs4.roa (hash: qRTzLuqNNeZ6K2xuHgA2yzZHekaLVUvGypzxIlsUgTg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 02:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1 (0x1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=631DAAE223AC75DA6A1635051B87AAD42C331D04 Validity Not Before: Jul 1 01:19:10 2026 GMT Not After : Jul 1 01:12:28 2027 GMT Subject: CN=2C0EA5B8ABE9CFD26F6FEA5E1AE05E18D6DBA0DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:aa:e2:53:eb:ac:a6:20:b1:6e:2e:d3:c8: ae:d5:a6:0b:76:1b:51:aa:38:46:8a:57:77:01:15: 9c:ef:56:a0:2e:9f:06:0d:e1:f9:86:c7:e5:68:1e: a0:59:24:2c:80:3c:cc:1a:15:16:6f:ea:85:65:45: 03:06:b9:2b:5f:0d:b8:44:f7:e0:27:bc:89:9f:13: 1a:41:07:82:25:3c:49:1a:31:9d:2e:01:1f:74:02: 49:db:f5:06:e7:bf:82:1f:96:e0:89:30:78:93:01: 64:fd:a7:d2:62:63:7d:6a:55:d4:ef:e2:5c:0e:d9: 45:ec:a6:a6:19:72:7e:79:cf:64:a1:40:81:74:73: f7:52:a9:83:3e:62:f3:74:1b:69:dc:25:03:50:7f: 53:b9:45:c7:24:c4:21:e4:52:d4:80:57:e9:49:3e: 30:5d:6f:62:fd:0e:f0:be:50:44:2d:1b:d3:02:06: ca:06:60:fb:11:6f:ae:cf:82:2c:0c:51:d4:57:78: 6d:78:be:0e:64:48:46:08:9d:c2:a8:d3:35:ff:e3: 72:ca:6a:f6:65:ff:69:28:82:3a:24:b0:b7:3f:00: d5:5d:fd:bc:a8:2b:a0:2d:d1:58:24:d4:58:64:ad: ca:54:3a:db:1f:95:c7:12:1c:19:14:19:96:ed:e2: 87:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0E:A5:B8:AB:E9:CF:D2:6F:6F:EA:5E:1A:E0:5E:18:D6:DB:A0:DF X509v3 Authority Key Identifier: keyid:63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:6c:f2:4b:57:dd:25:62:59:c9:fe:77:18:16:2c:19:b6:c0: 3f:70:96:c2:58:01:ce:ba:d6:78:3f:0d:32:a3:66:6b:24:d4: fe:ee:49:90:fe:24:d0:e8:29:29:e6:88:a1:74:b3:c5:55:45: 11:35:5f:71:2b:e7:0a:1c:81:bf:b5:48:20:32:63:a8:e8:fc: 74:cc:a7:22:93:7b:93:2b:92:03:36:b6:ca:bd:1b:fc:e6:cb: 0a:09:82:ec:9e:76:e5:3a:47:f7:63:17:45:0c:cb:ba:aa:0d: 0f:92:54:02:42:de:db:28:b4:64:12:ee:e2:bb:86:4a:04:82: 01:6d:6f:35:21:7c:ee:b4:96:6a:ae:80:0f:fa:b8:dc:c3:52: 9b:3e:ff:75:db:20:66:72:0e:71:85:34:b3:3c:20:7e:12:60: 0d:30:be:3d:6a:ad:2b:c8:90:5b:4e:94:f3:d6:db:35:00:e3: 88:38:f1:9c:f7:60:4e:a4:b0:e0:00:53:9b:dd:4e:5c:ad:c8: 59:a6:16:70:f9:b7:27:8e:29:8e:9d:e4:c5:ab:44:60:1d:51: 61:50:3e:3d:c3:9b:9a:2b:6d:7b:08:e0:ff:db:89:d1:fb:59: f7:41:57:2b:3e:07:cb:a1:45:c8:28:b7:01:58:9f:50:46:9c: e8:ef:fa:86 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MzFE QUFFMjIzQUM3NURBNkExNjM1MDUxQjg3QUFENDJDMzMxRDA0MB4XDTI2MDcwMTAx MTkxMFoXDTI3MDcwMTAxMTIyOFowMzExMC8GA1UEAxMoMkMwRUE1QjhBQkU5Q0ZE MjZGNkZFQTVFMUFFMDVFMThENkRCQTBERjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMP3quJT66ymILFuLtPIrtWmC3YbUao4RopXdwEVnO9WoC6fBg3h +YbH5WgeoFkkLIA8zBoVFm/qhWVFAwa5K18NuET34Ce8iZ8TGkEHgiU8SRoxnS4B H3QCSdv1Bue/gh+W4IkweJMBZP2n0mJjfWpV1O/iXA7ZReymphlyfnnPZKFAgXRz 91Kpgz5i83QbadwlA1B/U7lFxyTEIeRS1IBX6Uk+MF1vYv0O8L5QRC0b0wIGygZg +xFvrs+CLAxR1Fd4bXi+DmRIRgidwqjTNf/jcspq9mX/aSiCOiSwtz8A1V39vKgr oC3RWCTUWGStylQ62x+VxxIcGRQZlu3ihzUCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBQsDqW4q+nP0m9v6l4a4F4Y1tug3zAfBgNVHSMEGDAWgBRjHariI6x12moWNQUb h6rULDMdBDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0NjEvWXgycTRpT3NkZHBxRmpVRkc0ZXExQ3d6SFFRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWXgycTRpT3NkZHBxRmpVRkc0ZXEx Q3d6SFFRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwNDYxL1l4MnE0aU9zZGRwcUZqVUZHNGVxMUN3ekhRUS5tZnQw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDQbPJLV90lYlnJ/ncYFiwZtsA/ cJbCWAHOutZ4Pw0yo2ZrJNT+7kmQ/iTQ6Ckp5oihdLPFVUURNV9xK+cKHIG/tUgg MmOo6Px0zKcik3uTK5IDNrbKvRv85ssKCYLsnnblOkf3YxdFDMu6qg0PklQCQt7b KLRkEu7iu4ZKBIIBbW81IXzutJZqroAP+rjcw1KbPv912yBmcg5xhTSzPCB+EmAN ML49aq0ryJBbTpTz1ts1AOOIOPGc92BOpLDgAFOb3U5crchZphZw+bcnjimOneTF q0RgHVFhUD49w5uaK217COD/24nR+1n3QVcrPgfLoUXIKLcBWJ9QRpzo7/qG -----END CERTIFICATE-----Generated at Tue Jul 7 03:26:38 2026 by rpki-client