$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.mft File: XFmEWo_N0m4cHM5k03sjRz73Pg4.mft (raw, json) Hash identifier: yLC+Egd0JLK684fNITc6YC0EEzJLQPts952+dBSyTUM= Subject key identifier: 80:7E:07:2F:22:12:1C:5A:FC:6B:E2:00:45:B2:20:92:18:59:B1:CE Authority key identifier: 5C:59:84:5A:8F:CD:D2:6E:1C:1C:CE:64:D3:7B:23:47:3E:F7:3E:0E Certificate issuer: /CN=5C59845A8FCDD26E1C1CCE64D37B23473EF73E0E Certificate serial: 0D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFmEWo_N0m4cHM5k03sjRz73Pg4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.mft Manifest number: 0333 Signing time: Sat 14 Nov 2026 17:46:15 +0000 Manifest this update: Sat 14 Nov 2026 17:46:15 +0000 Manifest next update: Mon 14 Dec 2026 17:46:15 +0000 Files and hashes: 1: NJX6hpIHVoGaz_6XG733Tq_L_2A.roa (hash: 8wAo5WNEfFXJDvXxYsutl6ePvQdY8e1PLYwmta/gyU4=) 2: OlcNDUb0-xWEwrBCVxWhzbAKq8I.roa (hash: 0NAsiilFrTmjUHB/ET2K19kK29geGM6mR6GkqBHfmSo=) 3: X3tiicPhE-TDcZK7wT4aL9yJCXM.roa (hash: cNcfzebqOzoabeE9wTLKWhNmz7t4fA5mUiaSiupOJBo=) 4: XFmEWo_N0m4cHM5k03sjRz73Pg4.crl (hash: RDCCyfH8mIFaPg/a754INybaHp2Pfn03pTeLBGC5Dko=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFmEWo_N0m4cHM5k03sjRz73Pg4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C59845A8FCDD26E1C1CCE64D37B23473EF73E0E Validity Not Before: Oct 15 01:35:12 2026 GMT Not After : Oct 15 01:30:02 2027 GMT Subject: CN=807E072F22121C5AFC6BE20045B220921859B1CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:51:78:b7:b2:45:e5:43:37:c7:34:08:57: 74:d3:a2:3f:1f:7a:65:0c:c7:7b:00:1f:4c:47:f8: bb:2a:8a:f0:6d:89:20:b7:1d:58:70:be:5c:3e:c4: ba:42:d8:f7:a6:23:3b:5e:85:ba:d6:40:e0:cd:56: 15:1d:c2:d1:ee:cd:b8:0a:4c:83:1f:6f:b2:4f:24: 60:5a:02:74:87:4d:1d:b7:8c:d4:42:66:0c:01:5d: 56:74:a0:b1:7f:dd:e3:55:e7:ba:c9:3c:13:d4:85: dc:c8:72:73:ce:5b:3f:49:10:e7:6b:ac:38:6e:61: cf:a8:58:71:be:ae:8e:d6:ad:b5:e0:45:56:38:b3: 16:60:7e:ba:c7:f6:5a:be:24:2b:6e:28:16:40:20: a0:f1:92:9e:18:67:b9:10:d5:38:20:ab:63:67:46: 48:a4:76:a3:c0:fa:db:6c:9d:c1:7f:f2:11:6e:85: 0c:69:1d:73:50:ee:44:45:1f:1b:9d:54:4c:06:a3: b4:1e:76:8f:55:78:df:5c:b7:a6:1f:7f:ad:e1:2c: 57:93:63:1e:03:ba:95:24:53:7d:7a:94:94:ad:8c: db:f2:28:af:ef:58:07:37:24:1d:72:b2:b4:ca:ec: ed:88:59:43:74:b8:59:76:aa:87:5c:1f:7a:0f:a4: ac:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7E:07:2F:22:12:1C:5A:FC:6B:E2:00:45:B2:20:92:18:59:B1:CE X509v3 Authority Key Identifier: keyid:5C:59:84:5A:8F:CD:D2:6E:1C:1C:CE:64:D3:7B:23:47:3E:F7:3E:0E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFmEWo_N0m4cHM5k03sjRz73Pg4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:05:77:42:5c:9d:53:f3:69:93:dd:c7:a8:b8:5f:96:e6:91: 20:0b:22:90:d1:7a:4c:5a:30:cd:6f:64:2e:38:ef:26:ca:d2: 84:bf:c2:a1:ef:5c:e6:8f:b3:99:d6:3f:c9:8a:5e:20:e3:24: 68:4d:ed:db:81:c8:a3:6b:b1:77:2f:ff:89:46:ed:8f:6a:c7: c2:37:ae:b1:2c:ec:f2:63:7e:cf:d4:8d:a0:1a:1f:1e:01:ba: 6d:3f:37:ee:f4:ca:5f:57:36:b3:da:dd:70:d9:c8:42:7d:b5: 38:4f:12:55:bb:90:8f:6a:34:21:57:3c:08:9d:13:af:35:8c: a9:54:55:30:b5:18:6f:cc:a2:aa:89:e9:5b:b3:cf:36:37:29: bd:c7:b1:05:9c:8f:2d:ab:6c:96:ab:64:0b:7a:0b:13:9f:3e: ce:c2:b7:3f:0a:ad:ff:b5:82:ba:f4:93:ce:e5:67:aa:06:d9: 19:cb:86:78:3f:86:c7:e9:5b:9e:e6:81:c9:c3:98:79:17:3a: 34:fe:f8:bf:5b:0b:72:1f:3e:4f:10:cd:cc:7e:69:f0:95:4d: c0:61:11:08:e8:49:71:1d:63:e7:d9:b4:04:7f:9f:09:22:03: a1:5d:cd:5d:66:88:f7:dc:c8:45:f1:c5:b8:5e:d0:7f:f0:34: 1a:e7:f0:62 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QzU5 ODQ1QThGQ0REMjZFMUMxQ0NFNjREMzdCMjM0NzNFRjczRTBFMB4XDTI2MTAxNTAx MzUxMloXDTI3MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoODA3RTA3MkYyMjEyMUM1 QUZDNkJFMjAwNDVCMjIwOTIxODU5QjFDRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL7CUXi3skXlQzfHNAhXdNOiPx96ZQzHewAfTEf4uyqK8G2JILcd WHC+XD7EukLY96YjO16FutZA4M1WFR3C0e7NuApMgx9vsk8kYFoCdIdNHbeM1EJm DAFdVnSgsX/d41Xnusk8E9SF3Mhyc85bP0kQ52usOG5hz6hYcb6ujtatteBFVjiz FmB+usf2Wr4kK24oFkAgoPGSnhhnuRDVOCCrY2dGSKR2o8D622ydwX/yEW6FDGkd c1DuREUfG51UTAajtB52j1V431y3ph9/reEsV5NjHgO6lSRTfXqUlK2M2/Ior+9Y BzckHXKytMrs7YhZQ3S4WXaqh1wfeg+krMcCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBSAfgcvIhIcWvxr4gBFsiCSGFmxzjAfBgNVHSMEGDAWgBRcWYRaj83SbhwczmTT eyNHPvc+DjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyOTcvWEZtRVdvX04wbTRjSE01azAzc2pSejczUGc0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWEZtRVdvX04wbTRjSE01azAzc2pS ejczUGc0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMjk3L1hGbUVXb19OMG00Y0hNNWswM3NqUno3M1BnNC5tZnQw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQBXdCXJ1T82mT3ceouF+W5pEg CyKQ0XpMWjDNb2QuOO8mytKEv8Kh71zmj7OZ1j/Jil4g4yRoTe3bgcija7F3L/+J Ru2PasfCN66xLOzyY37P1I2gGh8eAbptPzfu9MpfVzaz2t1w2chCfbU4TxJVu5CP ajQhVzwInROvNYypVFUwtRhvzKKqielbs882Nym9x7EFnI8tq2yWq2QLegsTnz7O wrc/Cq3/tYK69JPO5WeqBtkZy4Z4P4bH6Vue5oHJw5h5Fzo0/vi/WwtyHz5PEM3M fmnwlU3AYREI6ElxHWPn2bQEf58JIgOhXc1dZoj33MhF8cW4XtB/8DQa5/Bi -----END CERTIFICATE-----Generated at Sat Nov 14 22:33:01 2026 by rpki-client