$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft File: FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft (raw, json) Hash identifier: VKV9IFMnZDdQ+N6QgiyZoqOCBQv+AhY5b1zpSWqaVKw= Subject key identifier: 77:2A:04:1C:C6:30:7E:09:26:95:0B:F0:B2:CD:9B:8D:C9:DE:FC:27 Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0 Certificate issuer: /CN=16851F56697ED9D56929BD0242D43B0278FC16E0 Certificate serial: 85 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft Manifest number: 1FC4 Signing time: Fri 21 Aug 2026 18:59:37 +0000 Manifest this update: Fri 21 Aug 2026 18:59:37 +0000 Manifest next update: Sun 20 Sep 2026 18:59:37 +0000 Files and hashes: 1: -tpMObVJK7UZdWzYdZD7xWfve8Y.roa (hash: w6Vn6DWUVPSYF67nIoKMAL6yP2hpkjvCjGD5+0MeCIk=) 2: 23OfVBArAd1aWnrCI1VR1H4koWQ.roa (hash: +aGJMhbBUDGS1BLly+y71+1Y3QvBbW2spOhOHE8kRXs=) 3: FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl (hash: H487KPPwr37dugLidYAbXYYFxRTj+xWCnfySvz0Lruc=) 4: H99dxcIuNomtxYs-xSQJj0Har28.roa (hash: BUtKlgZ8XqqQWwv0cN8lHx52hfdB3CUwNmqZUqgWc9g=) 5: Q4vmoO-RbNyOGCIUdeOzDkLdoTs.roa (hash: UD6Rc9uCfD98sp72vRN3mb/+Z18tzhkETsPZJeUjSNo=) 6: kTMEnmUtPJYTvglEod8vtGOPIsw.roa (hash: AS2ngvOX5r127xh79QlRtVG+pxbOJbMoTZQQM6qQN/w=) 7: wvxGjT3gunE4vvpRsIMnzOSbjcI.roa (hash: xabIg6MdSfbJuX+5yi7c9uSmnJWy9b8zmfWb6jEiI84=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0 Validity Not Before: Aug 15 01:40:05 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=772A041CC6307E0926950BF0B2CD9B8DC9DEFC27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9a:e9:8d:e7:c9:a0:e8:6e:8f:11:5d:14:e0: 95:ae:a6:0f:b6:db:24:26:5d:ce:b1:bb:4d:47:89: 2f:33:9b:ea:3c:c6:fe:95:13:02:e4:53:b0:47:fc: 6a:2a:95:29:40:80:fc:0a:33:21:f1:f8:e6:ff:bd: 21:94:dc:03:01:05:d2:d7:46:64:4e:6e:8d:fb:fb: 6d:4b:ba:d9:43:ee:0e:2f:c0:9c:a3:22:e2:d1:f8: 69:2f:07:6d:06:54:67:ba:65:69:6f:fd:42:00:87: 26:2e:7b:de:03:af:5a:69:c3:fb:9e:e9:54:e0:6f: ad:68:f5:06:ca:a1:11:69:80:dc:2f:0b:d5:33:16: 6c:f6:a9:9f:1f:e3:c8:04:5b:8a:b9:b9:15:4d:75: 45:50:3b:ce:f2:34:b2:c1:2f:b9:02:2a:40:0a:78: a0:11:80:98:e1:da:8a:80:e3:1d:d1:39:b6:ae:cd: 6e:a9:8c:2b:9a:8a:2e:d6:7a:16:34:3d:63:a3:1b: 26:42:d1:d4:ce:e7:ef:65:c3:65:d5:b3:4d:76:6e: e8:84:7e:eb:6c:1a:62:3a:c6:34:eb:5c:24:76:35: cc:f5:1d:05:6a:e0:88:3b:5d:99:11:3b:ee:30:39: 78:f0:b6:54:0b:74:83:5a:81:d9:ba:b9:08:e5:7f: 5a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2A:04:1C:C6:30:7E:09:26:95:0B:F0:B2:CD:9B:8D:C9:DE:FC:27 X509v3 Authority Key Identifier: keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9c:76:6b:08:a6:45:61:10:9b:93:0a:a8:df:63:b1:ef:5d: 0d:90:5a:a4:8a:21:ca:5e:b4:7e:4c:71:2a:52:3b:66:2a:45: 4e:dc:9c:56:0e:df:a9:0d:12:b8:d4:69:94:5f:9c:50:dd:e5: 03:f2:2d:f8:c5:a1:1a:e1:8c:14:bb:b8:1d:07:cf:26:79:48: 39:d8:90:fc:9f:39:ec:81:64:aa:e4:4f:e0:0e:d0:b9:29:96: 80:0e:59:5c:98:f1:73:42:99:ef:27:f9:9b:a8:38:23:f8:38: 0d:43:84:70:ac:6e:47:ab:39:2b:e6:09:3e:47:95:79:33:52: 0d:bb:62:c9:24:da:e4:96:57:68:77:2d:60:f7:4d:a2:97:42: df:e1:5e:c8:e8:a6:db:5d:39:05:ab:e8:3a:b0:96:04:33:87: f5:a9:28:e7:9e:b3:03:d0:e1:83:5f:7e:23:ec:e5:ac:e9:09: b4:06:5d:11:24:ac:8e:b2:ad:1a:93:b8:cb:3a:0f:86:01:7c: e4:fb:96:2f:82:b7:e6:10:10:66:d8:e2:c3:ca:52:04:fe:b0: 7b:92:c5:83:14:a2:05:38:34:c3:d1:3f:3e:66:33:ae:a8:e3: 4f:93:91:25:96:98:3b:0e:a1:db:5a:19:01:7f:98:d8:85:d5: 79:21:e7:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY4 NTFGNTY2OTdFRDlENTY5MjlCRDAyNDJENDNCMDI3OEZDMTZFMDAeFw0yNjA4MTUw MTQwMDVaFw0yNzA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc3MkEwNDFDQzYzMDdF MDkyNjk1MEJGMEIyQ0Q5QjhEQzlERUZDMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXmumN58mg6G6PEV0U4JWupg+22yQmXc6xu01HiS8zm+o8xv6V EwLkU7BH/GoqlSlAgPwKMyHx+Ob/vSGU3AMBBdLXRmRObo37+21LutlD7g4vwJyj IuLR+GkvB20GVGe6ZWlv/UIAhyYue94Dr1ppw/ue6VTgb61o9QbKoRFpgNwvC9Uz Fmz2qZ8f48gEW4q5uRVNdUVQO87yNLLBL7kCKkAKeKARgJjh2oqA4x3RObauzW6p jCuaii7WehY0PWOjGyZC0dTO5+9lw2XVs012buiEfutsGmI6xjTrXCR2Ncz1HQVq 4Ig7XZkRO+4wOXjwtlQLdINagdm6uQjlf1qTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdyoEHMYwfgkmlQvwss2bjcne/CcwHwYDVR0jBBgwFoAUFoUfVml+2dVpKb0C QtQ7Anj8FuAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzkvRm9VZlZtbC0yZFZwS2IwQ1F0UTdBbmo4RnVBLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRm9VZlZtbC0yZFZwS2IwQ1F0UTdBbmo4 RnVBLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzkvRm9VZlZtbC0yZFZwS2IwQ1F0UTdBbmo4RnVBLm1mdDAVBggrBgEF BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwDQYJKoZIhvcNAQELBQADggEBADycdmsIpkVhEJuTCqjfY7HvXQ2QWqSKIcpe tH5McSpSO2YqRU7cnFYO36kNErjUaZRfnFDd5QPyLfjFoRrhjBS7uB0HzyZ5SDnY kPyfOeyBZKrkT+AO0LkploAOWVyY8XNCme8n+ZuoOCP4OA1DhHCsbkerOSvmCT5H lXkzUg27Yskk2uSWV2h3LWD3TaKXQt/hXsjopttdOQWr6DqwlgQzh/WpKOeeswPQ 4YNffiPs5azpCbQGXREkrI6yrRqTuMs6D4YBfOT7li+Ct+YQEGbY4sPKUgT+sHuS xYMUogU4NMPRPz5mM66o40+TkSWWmDsOodtaGQF/mNiF1Xkh534= -----END CERTIFICATE-----Generated at Sat Aug 22 00:51:16 2026 by rpki-client