$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft File: BqhITfT7r-XEjZiKBGtqtqgbLfM.mft (raw, json) Hash identifier: KJ2jVsqinfRDoJ29UBocHLgyqPC4Y0p2rm5KxuQaIJ0= Subject key identifier: E2:3C:28:05:66:C8:40:96:51:25:98:EF:39:E5:E2:B6:5A:B6:78:06 Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3 Certificate issuer: /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3 Certificate serial: 68 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft Manifest number: 0E32 Signing time: Fri 22 May 2026 11:29:02 +0000 Manifest this update: Fri 22 May 2026 11:29:02 +0000 Manifest next update: Sat 06 Jun 2026 11:29:02 +0000 Files and hashes: 1: 3PpYy4AqZudfVYexefSW6oiu3E0.roa (hash: ThoSSti/vagt9rV3DzExYxluB+FSiTnLrDPh9UWkaWU=) 2: BqhITfT7r-XEjZiKBGtqtqgbLfM.crl (hash: fWQt7s5XKzWqT/wDhmaja1y8/ExxmMLDfOnz/TvbpOE=) 3: U6oDooWE_m7vetfFjjidc9QmDWQ.roa (hash: dTZfdXuxMRkEP7B+/ncRJyQPdaSB0kwJFEbEypl5nbY=) 4: lImLAeqSF9k9NhRNyijfINutmpM.roa (hash: XX3m9wPJUhlEEVGM7oAzQmzoUjMgQNIiywFjGhoLUvk=) 5: rW1RoZGzi7ZacgPELCGTYtIqggc.roa (hash: KmKrNt/7I1cHzqfdDlgicsUL6zx8NilTfxcMBnkjhSA=) 6: w79bgDJ7e9aA6XaYE4m97-DsHH8.roa (hash: lAAA0hk7UJfAU5thgJmr9DQz/J+mP88UDk1oEjFCrbM=) 7: xoZi08jw9ZPoaDTFDLTbGEF72nE.roa (hash: ALRc5ImHpG5QF0A6PbRkB2XwcklWTg8J0qa8BzGCBUQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 May 2026 13:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3 Validity Not Before: May 15 01:32:46 2026 GMT Not After : May 15 01:30:02 2027 GMT Subject: CN=E23C280566C84096512598EF39E5E2B65AB67806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:89:f2:5e:fc:7e:5f:f4:57:24:01:c8:13:a5: 8a:19:7e:e5:e1:3d:65:64:0d:33:5d:32:2a:b9:6e: 46:73:49:e6:47:f8:85:fc:eb:40:37:89:b3:8d:2b: 5c:58:71:fb:3c:59:57:96:fc:e5:00:53:01:ac:55: 76:ac:87:a8:f4:0e:69:c9:c3:29:19:e5:a3:34:69: 30:13:37:e0:2b:45:be:af:df:1e:bc:b9:44:b1:62: 29:46:6c:8c:9c:37:34:0c:50:52:d3:e5:eb:c8:08: 98:2b:ee:7b:9f:d6:7f:e0:d5:6a:8d:d6:92:09:fb: eb:a9:70:68:9e:ea:9a:e3:38:ee:5a:38:13:ce:27: 89:99:13:22:bf:c9:6c:10:5c:4d:ce:7b:c1:80:89: 8c:6b:6a:61:9f:1f:bf:86:f8:3c:de:fe:1c:57:f4: 83:c4:a0:6c:67:dd:dd:aa:68:8e:cd:da:c3:d7:b3: 89:46:65:1b:d0:b2:a1:d9:f8:21:50:1f:d6:18:64: 26:45:ef:07:ef:f6:36:b1:4e:91:ef:07:1c:fb:cc: 3d:cf:d7:e0:9d:9e:66:ae:29:9c:67:0f:3e:44:56: 09:7a:92:00:0a:dd:0c:2f:12:d8:73:3e:83:b7:b9: d4:00:fd:d0:bd:e7:49:41:94:00:9e:68:c9:7e:6a: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3C:28:05:66:C8:40:96:51:25:98:EF:39:E5:E2:B6:5A:B6:78:06 X509v3 Authority Key Identifier: keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ff:cf:59:22:7a:1f:5f:fb:d7:84:d9:88:b3:c9:67:1f:ee: d1:c3:93:c3:af:d1:08:43:3c:d0:48:01:1e:20:92:be:1c:e3: 41:46:17:9a:84:54:08:5d:53:39:d1:66:99:2d:a8:43:27:15: 16:a4:07:03:a3:75:3c:37:dc:b0:9f:26:13:08:3c:e2:e0:d0: cd:a0:b1:50:19:b4:0e:67:2a:c8:10:9f:6d:ee:54:4a:3b:a7: af:24:d3:5f:15:5f:a3:f5:e1:08:db:32:8e:07:91:44:1f:87: 1f:7e:cb:4f:61:67:41:7f:42:6f:b7:e5:a5:5a:19:17:a5:8b: 37:c1:e7:0f:b3:03:d0:ee:dc:05:4f:a2:80:cc:6e:93:52:c4: ae:52:b1:71:4a:b4:61:2f:7b:b2:6e:11:0c:a1:e8:c7:10:d4: 01:f8:5a:82:db:a3:4c:3a:31:81:09:13:26:e8:67:cf:0d:dd: 82:62:33:24:1a:6b:41:21:00:3b:a5:44:38:fa:b0:b1:b1:5f: 77:bb:d0:42:0d:82:33:7e:50:3a:a6:53:b4:43:15:b6:c7:5b: 76:4d:b7:2c:79:34:1b:b9:c8:2f:a6:02:0f:c0:66:b6:fd:f9: a8:ef:df:1e:b6:bd:c5:c5:31:2a:91:9c:22:7c:a9:81:5a:78: d0:7a:da:d2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIBaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkE4 NDg0REY0RkJBRkU1QzQ4RDk4OEEwNDZCNkFCNkE4MUIyREYzMB4XDTI2MDUxNTAx MzI0NloXDTI3MDUxNTAxMzAwMlowMzExMC8GA1UEAxMoRTIzQzI4MDU2NkM4NDA5 NjUxMjU5OEVGMzlFNUUyQjY1QUI2NzgwNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJaJ8l78fl/0VyQByBOlihl+5eE9ZWQNM10yKrluRnNJ5kf4hfzr QDeJs40rXFhx+zxZV5b85QBTAaxVdqyHqPQOacnDKRnlozRpMBM34CtFvq/fHry5 RLFiKUZsjJw3NAxQUtPl68gImCvue5/Wf+DVao3Wkgn766lwaJ7qmuM47lo4E84n iZkTIr/JbBBcTc57wYCJjGtqYZ8fv4b4PN7+HFf0g8SgbGfd3apojs3aw9eziUZl G9Cyodn4IVAf1hhkJkXvB+/2NrFOke8HHPvMPc/X4J2eZq4pnGcPPkRWCXqSAArd DC8S2HM+g7e51AD90L3nSUGUAJ5oyX5qQD8CAwEAAaOCAfIwggHuMB0GA1UdDgQW BBTiPCgFZshAllElmO855eK2WrZ4BjAfBgNVHSMEGDAWgBQGqEhN9Puv5cSNmIoE a2q2qBst8zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTI0L0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFnYkxmTS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFn YkxmTS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85MjQvQnFoSVRmVDdyLVhFalppS0JHdHF0cWdiTGZNLm1mdDAVBggr BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwDQYJKoZIhvcNAQELBQADggEBAKr/z1kieh9f+9eE2YizyWcf7tHDk8Ov 0QhDPNBIAR4gkr4c40FGF5qEVAhdUznRZpktqEMnFRakBwOjdTw33LCfJhMIPOLg 0M2gsVAZtA5nKsgQn23uVEo7p68k018VX6P14QjbMo4HkUQfhx9+y09hZ0F/Qm+3 5aVaGRelizfB5w+zA9Du3AVPooDMbpNSxK5SsXFKtGEve7JuEQyh6McQ1AH4WoLb o0w6MYEJEyboZ88N3YJiMyQaa0EhADulRDj6sLGxX3e70EINgjN+UDqmU7RDFbbH W3ZNtyx5NBu5yC+mAg/AZrb9+ajv3x62vcXFMSqRnCJ8qYFaeNB62tI= -----END CERTIFICATE-----Generated at Fri May 22 15:10:12 2026 by rpki-client