$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.mft File: z-osKq1jvMpNSslqhSFA1CYVl7g.mft (raw, json) Hash identifier: fnw+HcO1Cwmj7sx8PI4qJcF/FLzg6r9Y6ey/J8Y6Ct8= Subject key identifier: 18:F8:96:4B:77:9B:E5:F6:87:23:E0:ED:9B:04:46:E8:93:E4:68:FB Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8 Certificate issuer: /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8 Certificate serial: 7C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.mft Manifest number: 1E58 Signing time: Thu 26 Mar 2026 11:20:38 +0000 Manifest this update: Thu 26 Mar 2026 11:20:38 +0000 Manifest next update: Fri 10 Apr 2026 11:20:38 +0000 Files and hashes: 1: d4Wq7aqAljECHqVKtePkpYpYoz0.roa (hash: LlT1kUCtTzDsy52pDvgh0iHHETesNXA0IMb6BUaWOCo=) 2: gkKJqMHzHm1M2qpiTEO1HImgYgs.roa (hash: 4v55gv231FJSAL+cLHY0evXu4hkGQzB1M3J1iwzhsN4=) 3: txxGdFDVI0wbWVeIpkwwW1v_6wo.roa (hash: Z5MLISTK8Uxa3oP9SdWc2qSo51agdgswWz3/MEPfK3o=) 4: z-osKq1jvMpNSslqhSFA1CYVl7g.crl (hash: P6G1G0aZc7SpEkH9JrmAqP90X2qwY01dddbqkKcuY7c=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8 Validity Not Before: Mar 15 01:38:24 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=18F8964B779BE5F68723E0ED9B0446E893E468FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:ce:96:b9:e1:31:68:53:f2:5a:d3:4b:ac: e3:51:2d:6f:7d:02:24:f1:4a:f7:d1:4c:e4:0c:a8: 4f:7a:20:9c:08:74:1e:ee:e3:d9:c3:bc:07:05:9e: 6d:18:c3:73:34:f0:d7:d9:6f:d6:ba:34:22:60:68: 09:1a:36:5e:0d:3d:11:a4:03:a6:ab:0e:8b:c5:fe: f3:d5:8b:f1:28:3d:1b:06:75:ce:1d:35:e2:8a:e2: f3:2c:46:bd:3d:49:98:03:9a:e7:eb:02:fe:c5:38: fd:ea:d9:30:14:94:01:6f:64:5c:fa:1d:f1:50:ab: 32:a7:af:88:2c:43:6d:42:c2:9f:9a:69:b9:46:44: d4:12:38:61:a8:cf:ad:cb:55:19:09:39:c8:8e:ea: 37:1d:2c:73:9d:9a:5d:48:73:b4:b2:f2:67:fd:2a: 64:bd:ad:bb:6c:1b:68:74:71:7a:8f:ee:9b:bf:05: 4d:38:6c:47:b4:53:8d:30:68:8e:24:7b:af:37:9e: f7:4d:2f:28:0c:ec:8b:ab:3d:bb:c5:fc:e0:87:ed: f2:ae:ce:64:3d:f2:bb:22:2e:7e:fb:3c:97:dc:ea: 36:7e:e1:13:f2:f9:cf:39:18:1a:b6:bb:e3:af:22: c1:26:53:74:42:31:12:b9:a8:ee:c3:fc:91:a4:fa: 3d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F8:96:4B:77:9B:E5:F6:87:23:E0:ED:9B:04:46:E8:93:E4:68:FB X509v3 Authority Key Identifier: keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a2:8e:94:62:17:12:c3:33:13:f1:98:2d:cf:80:03:0b:57: d0:24:47:cb:b7:8d:46:fb:64:8a:bd:eb:e7:25:4b:01:80:92: 4b:76:01:d8:3d:63:3f:b7:07:f3:e4:e0:e7:65:bb:10:04:bd: 4c:f8:81:4e:40:b2:6d:77:9a:f6:a2:3c:5f:19:ab:02:1d:8c: 3d:41:5f:55:96:06:7e:1c:1b:09:ca:8b:e7:54:b3:70:a4:46: b7:d3:07:1c:98:2f:9c:3c:2b:9a:af:93:2a:19:9f:70:39:26: 05:8f:dd:83:4c:7f:0d:75:af:ab:9f:5f:fe:68:a0:1f:a2:18: f3:72:9f:8c:bb:df:42:46:b6:9a:c0:57:69:61:c6:9c:0e:8f: e1:7f:2a:78:d4:5f:93:59:88:73:9b:36:b4:a0:3a:70:ed:04: 64:3f:0c:3c:eb:a2:51:46:26:b7:2d:71:7d:eb:d4:80:34:39: c1:75:8e:ea:f0:b7:21:25:d4:84:8b:50:2b:06:b7:51:e8:c1: ea:1f:68:6f:eb:8c:e9:b0:1d:9c:2b:46:5b:ce:92:85:16:b6: f0:58:54:65:be:19:6e:95:2e:32:02:ad:1c:10:be:ca:c7:2a: ff:94:be:d4:91:cc:21:a9:02:8a:f5:ce:d3:5a:e1:b6:c7:ae: 7a:c5:40:22 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBfDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRkVB MkMyQUFENjNCQ0NBNEQ0QUM5NkE4NTIxNDBENDI2MTU5N0I4MB4XDTI2MDMxNTAx MzgyNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMThGODk2NEI3NzlCRTVG Njg3MjNFMEVEOUIwNDQ2RTg5M0U0NjhGQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALNpzpa54TFoU/Ja00us41Etb30CJPFK99FM5AyoT3ognAh0Hu7j 2cO8BwWebRjDczTw19lv1ro0ImBoCRo2Xg09EaQDpqsOi8X+89WL8Sg9GwZ1zh01 4ori8yxGvT1JmAOa5+sC/sU4/erZMBSUAW9kXPod8VCrMqeviCxDbULCn5ppuUZE 1BI4YajPrctVGQk5yI7qNx0sc52aXUhztLLyZ/0qZL2tu2wbaHRxeo/um78FTThs R7RTjTBojiR7rzee900vKAzsi6s9u8X84Ift8q7OZD3yuyIufvs8l9zqNn7hE/L5 zzkYGra7468iwSZTdEIxErmo7sP8kaT6PUcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQY+JZLd5vl9ocj4O2bBEbok+Ro+zAfBgNVHSMEGDAWgBTP6iwqrWO8yk1KyWqF IUDUJhWXuDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA2OTkvei1vc0txMWp2TXBOU3NscWhTRkExQ1lWbDdnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvei1vc0txMWp2TXBOU3NscWhTRkEx Q1lWbDdnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwNjk5L3otb3NLcTFqdk1wTlNzbHFoU0ZBMUNZVmw3Zy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaoo6UYhcSwzMT8Zgtz4ADC1fQJEfLt41G+2SKvevnJUsBgJJLdgHY PWM/twfz5ODnZbsQBL1M+IFOQLJtd5r2ojxfGasCHYw9QV9VlgZ+HBsJyovnVLNw pEa30wccmC+cPCuar5MqGZ9wOSYFj92DTH8Nda+rn1/+aKAfohjzcp+Mu99CRraa wFdpYcacDo/hfyp41F+TWYhzmza0oDpw7QRkPww866JRRia3LXF969SANDnBdY7q 8LchJdSEi1ArBrdR6MHqH2hv64zpsB2cK0ZbzpKFFrbwWFRlvhlulS4yAq0cEL7K xyr/lL7UkcwhqQKK9c7TWuG2x656xUAi -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:54 2026 by rpki-client