$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft File: fBF5I6OubRQWD1AxEVrtRMtNgn0.mft (raw, json) Hash identifier: MZl8KCRvdIWgvRgVNGaRojuFiYhKUNPG+LMWvVAFl1A= Subject key identifier: 56:AA:9D:3A:AB:8A:64:21:09:DB:02:9B:5D:23:CF:F6:3F:91:98:56 Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: 2F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft Manifest number: 0C16 Signing time: Thu 26 Mar 2026 09:26:10 +0000 Manifest this update: Thu 26 Mar 2026 09:26:10 +0000 Manifest next update: Fri 10 Apr 2026 09:26:10 +0000 Files and hashes: 1: 52mKA_tyLU0KRTxHVRnqQgpXpDI.roa (hash: 0XDo695WQbT0Eg6JyaFF7BTqGVDq+bGScPHAu5RazFk=) 2: 5aPwAqNQ1Shj4UKKaZRR1Agx81Y.roa (hash: 0v1zLDsU7nKNIm7hquq/eX+2SFJw1Y/kEtNWLPejWHw=) 3: KJeZGz9iGe8JyM060MzZdR_f1TM.roa (hash: k+LnHlnTy7S+X4K+pE2Z/Asdjp32XwMB/r/zCRb6b3o=) 4: fBF5I6OubRQWD1AxEVrtRMtNgn0.crl (hash: x3RCFB4o1V3HmbZPv9J5G1scvHvy1pEYIrrFoEDOKok=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Mar 15 01:36:13 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=56AA9D3AAB8A642109DB029B5D23CFF63F919856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bc:6f:6f:66:b7:84:d0:b0:de:5c:6d:af:37: 7e:22:76:cb:34:2c:25:bc:7a:ff:ea:08:97:c3:7b: f7:3f:23:47:57:69:39:5a:91:10:35:fe:2c:00:de: f7:ff:df:d3:72:36:a8:4e:17:d7:81:fe:6d:e4:7a: a3:a5:79:0c:b7:86:e0:16:1f:a8:47:9d:50:13:4c: 74:fe:26:48:4d:b9:e5:68:fa:f2:31:52:b5:5d:b0: 14:30:53:8a:42:39:48:32:20:7d:b2:9e:c7:bf:b8: 76:68:9d:84:a9:6b:1d:c1:af:b5:5d:9d:47:d7:41: 90:e8:4a:d3:7a:6e:fe:c4:68:43:89:6a:ab:86:21: 95:da:6d:48:ef:05:67:0c:c3:d0:68:11:d2:7b:34: 9f:66:e3:07:81:cc:92:08:16:88:84:45:84:6f:4b: c4:f4:e3:d8:11:2c:a6:d1:8e:95:60:a9:48:8d:02: bb:2b:eb:43:22:4d:b8:98:c3:51:5e:7d:08:c6:d3: 6f:4c:53:10:2d:df:25:0a:52:05:c4:cc:40:49:02: a1:f0:74:e4:d0:4c:6d:db:aa:85:e7:dd:b8:a9:df: 6c:cd:36:b3:35:45:04:33:23:a6:be:d9:7f:c1:d7: ca:e6:45:1d:d3:cb:5f:b5:e2:6c:a7:7a:f8:22:ae: 7a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AA:9D:3A:AB:8A:64:21:09:DB:02:9B:5D:23:CF:F6:3F:91:98:56 X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:3f:96:d6:49:86:2a:fd:7b:36:ee:34:7d:20:2b:91:7c:4e: f7:43:1c:df:9b:4b:66:21:26:46:fb:e0:95:29:e0:ea:ea:71: 47:0c:f1:e5:6f:38:99:2e:86:70:65:01:98:b4:62:78:a7:ce: db:ed:7a:da:3d:ff:a5:8a:ce:b4:df:59:c9:1f:0b:f0:80:b8: 9f:2e:76:39:22:47:59:dd:ef:f9:33:a7:a9:b6:fd:ec:a7:20: ad:e7:5c:b4:83:cb:49:79:e3:9f:4f:0d:41:8a:a6:6f:02:4d: ce:47:df:00:f9:97:a6:23:84:be:02:41:2e:c9:ec:cb:83:7f: 33:dc:15:e4:cd:67:d7:a4:5f:58:1d:a3:2f:e7:0c:04:2a:56: 17:c8:98:9f:87:43:33:07:05:55:39:5f:75:15:7f:18:89:8d: 13:b8:66:e3:bd:f6:89:f9:a7:1a:e1:2e:7b:9d:44:2b:6b:f6: 5c:a5:b0:2a:83:4a:15:97:84:84:19:8e:43:0d:cb:d0:ba:c6: 82:fa:6a:f9:a9:92:82:81:55:44:46:34:75:fc:73:b0:1a:e0: f3:a6:bb:cb:de:1c:02:99:f2:00:95:e4:c3:25:69:4b:11:9a: a4:c4:ce:f3:b3:b7:05:67:69:da:de:61:b1:c2:9b:25:18:d3: ee:0a:c5:65 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzEx NzkyM0EzQUU2RDE0MTYwRjUwMzExMTVBRUQ0NENCNEQ4MjdEMB4XDTI2MDMxNTAx MzYxM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTZBQTlEM0FBQjhBNjQy MTA5REIwMjlCNUQyM0NGRjYzRjkxOTg1NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMa8b29mt4TQsN5cba83fiJ2yzQsJbx6/+oIl8N79z8jR1dpOVqR EDX+LADe9//f03I2qE4X14H+beR6o6V5DLeG4BYfqEedUBNMdP4mSE255Wj68jFS tV2wFDBTikI5SDIgfbKex7+4dmidhKlrHcGvtV2dR9dBkOhK03pu/sRoQ4lqq4Yh ldptSO8FZwzD0GgR0ns0n2bjB4HMkggWiIRFhG9LxPTj2BEsptGOlWCpSI0Cuyvr QyJNuJjDUV59CMbTb0xTEC3fJQpSBcTMQEkCofB05NBMbduqhefduKnfbM02szVF BDMjpr7Zf8HXyuZFHdPLX7XibKd6+CKueoECAwEAAaOCAj0wggI5MB0GA1UdDgQW BBRWqp06q4pkIQnbAptdI8/2P5GYVjAfBgNVHSMEGDAWgBR8EXkjo65tFBYPUDER Wu1Ey02CfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTkxL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10TmduMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10 TmduMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xOTEvZkJGNUk2T3ViUlFXRDFBeEVWcnRSTXROZ24wLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKw/ltZJhir9ezbuNH0gK5F8TvdDHN+bS2YhJkb74JUp4OrqcUcM8eVvOJku hnBlAZi0Yninztvteto9/6WKzrTfWckfC/CAuJ8udjkiR1nd7/kzp6m2/eynIK3n XLSDy0l5459PDUGKpm8CTc5H3wD5l6YjhL4CQS7J7MuDfzPcFeTNZ9ekX1gdoy/n DAQqVhfImJ+HQzMHBVU5X3UVfxiJjRO4ZuO99on5pxrhLnudRCtr9lylsCqDShWX hIQZjkMNy9C6xoL6avmpkoKBVURGNHX8c7Aa4POmu8veHAKZ8gCV5MMlaUsRmqTE zvOztwVnadreYbHCmyUY0+4KxWU= -----END CERTIFICATE-----Generated at Thu Mar 26 13:27:32 2026 by rpki-client