$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft File: 37zT-LypGRXEUzosCmnD01suaI0.mft (raw, json) Hash identifier: jByHfltn9tgcGViTvwM8zCw8KwRm4UkInsj7RpeFjw0= Subject key identifier: 7B:E2:E2:1D:1C:EE:66:37:B7:53:20:27:D1:07:36:DC:92:95:8D:D2 Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D Certificate issuer: /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D Certificate serial: 4F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft Manifest number: 0C2A Signing time: Thu 26 Mar 2026 08:25:55 +0000 Manifest this update: Thu 26 Mar 2026 08:25:55 +0000 Manifest next update: Fri 10 Apr 2026 08:25:55 +0000 Files and hashes: 1: 37zT-LypGRXEUzosCmnD01suaI0.crl (hash: VVuoZtibjqYLyZ3Dhtefm3vysfe5KBY6XdqE6gAC1mo=) 2: 6r-x7ZYs-ig2wnGm9Qq-ubGaZQo.roa (hash: BjmZT2lb/riXC+h5i1urqn46QnR1Xtdbxhy1DuKUEIw=) 3: 7A-zPi4JSi2YH8nDIHY5zUAQARE.roa (hash: nDxyaDJT/t9BJzwOcA+l/1FDYTMTvudOGfhPFjBDIhI=) 4: 8Mq80qRnEbRl2VkJdsCOZKemiTg.roa (hash: WKnthHKDLSdjrHaCvr/ZfOs7B/Kvv7XHrMYNWUbMpGY=) 5: DiRSBVwDKngIdQFrhrNwjRc6-Z4.roa (hash: BF3E3GM4kGdxTYt7ws3S3xEMo5DJ6QszekHfRvGcRU0=) 6: IDoNXt4ftRR1nGiZr7Q_3SbVv5M.roa (hash: qK7Hg/vASw41iVrhP0rRTWdrFRxf+CTq5Fg2B/RSjyE=) 7: M6IcLAO4sXD31g87BuS8KT2P2N8.roa (hash: XChDYBif49x1OoRNolkwUgPrXpC9bUCAL0sRbBZk5xs=) 8: YshT9_F4zxKhDZfg8d-D51dNGjg.roa (hash: OZR0xVucQSuSXglV2CE7SP/ck1J/MHo0TEtmP5xfjv0=) 9: mBfjVw34fIt9Wa2z0hq1ZJp_2Zw.roa (hash: qaCcuJeVY/tLWJCxNmST22fs2K0jYaUnpfi0ilmOQMo=) 10: nufsSH2JBiHyBtP2pk8sFt2KfdU.roa (hash: Gl3NsjSbbw80Ln/4CatqdRh5GB5X+Rxu23U/v3gPz3o=) 11: tvlUxUoN8FQX5b9wcKnF4hzwY60.roa (hash: Y1iFLcrNcQm3tM2jTXFJkumxgEgJfYoTO4XdVBiZUnc=) 12: vlsn6v6O-wxpVFihCmiM9irOvNE.roa (hash: kgYurlTYMvlZGQwmrnwythRVUFKmlGeMR1yZub43mdQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D Validity Not Before: Mar 15 01:35:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7BE2E21D1CEE6637B7532027D10736DC92958DD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:d8:f6:56:01:c7:a9:1a:57:d7:a4:c8:f1: d8:d4:ee:ab:ce:4d:48:cb:e6:16:f1:7b:c2:8d:ac: 1d:2c:3c:53:f8:d4:12:ef:78:8f:f8:6f:a9:51:5e: f7:39:58:46:3d:5f:f5:c0:2d:69:f7:04:30:1a:86: d2:09:60:89:16:8c:15:6c:48:47:6a:96:18:70:02: e5:9d:07:17:ee:40:fe:1d:38:fb:b9:7c:a4:60:7c: 90:61:a8:b8:4c:af:b2:b8:9d:05:1d:11:51:a0:de: 9f:fa:d7:5a:1a:30:b5:01:a1:37:0e:cc:bf:21:76: 0f:e4:7e:18:02:4d:04:ec:f1:e6:a4:70:e4:ae:da: 92:56:bc:c8:2c:da:de:1d:cf:91:f3:06:9d:03:dc: a6:7e:6e:da:c2:7c:90:a8:51:ac:a4:64:83:24:ee: 5f:57:bf:c7:87:eb:75:8c:d1:92:39:f1:0a:0a:f4: 6d:e1:82:e4:83:06:fb:a1:6c:43:e7:cf:46:10:f0: 02:96:dc:99:14:3e:f5:23:43:92:5f:46:80:ac:19: 6e:88:1f:61:ea:c6:68:c4:af:1f:e7:98:b4:49:10: 93:7d:19:fe:4a:f3:f4:16:51:a1:31:f9:55:3f:e4: c7:ad:04:09:8b:02:c5:c4:39:54:21:af:10:15:90: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E2:E2:1D:1C:EE:66:37:B7:53:20:27:D1:07:36:DC:92:95:8D:D2 X509v3 Authority Key Identifier: keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:fc:06:b3:73:26:37:f1:52:46:0c:a3:39:18:39:30:f8:03: e1:96:37:8d:84:05:e6:f8:e8:37:0a:e7:34:75:44:58:a4:ba: 1d:05:a5:74:77:2f:f6:a2:21:d5:4b:01:23:4a:a3:01:af:0a: c9:49:0c:1c:3f:08:80:4e:a3:e5:6f:c7:eb:04:22:6b:e7:4f: 42:e2:78:bf:bd:ea:16:48:9e:65:12:b5:f7:a6:16:21:7c:a3: 09:a1:5d:82:2b:a1:0d:66:67:6e:79:89:49:e0:1c:2e:7e:c1: f8:ac:59:be:e5:7c:17:5b:ab:61:41:06:8f:a7:0f:ce:41:0d: 7e:b1:b7:cf:9c:26:b4:fc:02:6c:bf:17:c9:9b:5a:a4:33:98: 5d:d9:ea:da:28:83:4f:e7:4d:23:7f:43:ec:56:9c:c8:47:01: 1f:0f:3b:61:72:99:d6:df:e4:ff:a2:12:a8:ae:37:f3:1d:60: 10:f9:75:da:5f:e6:08:71:cd:da:05:14:79:49:40:fd:65:b8: 26:d4:63:32:0e:68:b7:d7:cd:05:a2:0e:2d:fd:0a:74:a7:08: 5a:0a:cc:8e:16:c8:42:1a:49:2f:3e:c8:de:ce:be:19:06:5c: d3:a9:4c:09:80:fb:62:34:cb:27:c3:46:f5:8c:62:ba:b8:c5: 21:aa:d0:7e -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJD RDNGOEJDQTkxOTE1QzQ1MzNBMkMwQTY5QzNEMzVCMkU2ODhEMB4XDTI2MDMxNTAx MzU1NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0JFMkUyMUQxQ0VFNjYz N0I3NTMyMDI3RDEwNzM2REM5Mjk1OEREMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANiI2PZWAcepGlfXpMjx2NTuq85NSMvmFvF7wo2sHSw8U/jUEu94 j/hvqVFe9zlYRj1f9cAtafcEMBqG0glgiRaMFWxIR2qWGHAC5Z0HF+5A/h04+7l8 pGB8kGGouEyvsridBR0RUaDen/rXWhowtQGhNw7MvyF2D+R+GAJNBOzx5qRw5K7a kla8yCza3h3PkfMGnQPcpn5u2sJ8kKhRrKRkgyTuX1e/x4frdYzRkjnxCgr0beGC 5IMG+6FsQ+fPRhDwApbcmRQ+9SNDkl9GgKwZbogfYerGaMSvH+eYtEkQk30Z/krz 9BZRoTH5VT/kx60ECYsCxcQ5VCGvEBWQFTcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBR74uIdHO5mN7dTICfRBzbckpWN0jAfBgNVHSMEGDAWgBTfvNP4vKkZFcRTOiwK acPTWy5ojTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNzUvMzd6VC1MeXBHUlhFVXpvc0NtbkQwMXN1YUkwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzd6VC1MeXBHUlhFVXpvc0NtbkQw MXN1YUkwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTc1LzM3elQtTHlwR1JYRVV6b3NDbW5EMDFzdWFJMC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz/AazcyY38VJGDKM5GDkw+APhljeNhAXm+Og3Cuc0dURYpLodBaV0 dy/2oiHVSwEjSqMBrwrJSQwcPwiATqPlb8frBCJr509C4ni/veoWSJ5lErX3phYh fKMJoV2CK6ENZmdueYlJ4BwufsH4rFm+5XwXW6thQQaPpw/OQQ1+sbfPnCa0/AJs vxfJm1qkM5hd2eraKINP500jf0PsVpzIRwEfDzthcpnW3+T/ohKorjfzHWAQ+XXa X+YIcc3aBRR5SUD9Zbgm1GMyDmi3180Fog4t/Qp0pwhaCsyOFshCGkkvPsjezr4Z BlzTqUwJgPtiNMsnw0b1jGK6uMUhqtB+ -----END CERTIFICATE-----Generated at Thu Mar 26 14:08:14 2026 by rpki-client