$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft File: yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft (raw, json) Hash identifier: SqcYStrnEyvDogojFsk/ORspkvyZIy0JKXhk9+TPA3A= Subject key identifier: 0D:39:7B:1E:74:5D:6D:F4:6E:3B:8E:CD:FE:54:C9:3F:66:DD:53:EA Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D Certificate serial: 89 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft Manifest number: 0CA7 Signing time: Thu 26 Mar 2026 08:35:23 +0000 Manifest this update: Thu 26 Mar 2026 08:35:23 +0000 Manifest next update: Fri 10 Apr 2026 08:35:23 +0000 Files and hashes: 1: 9OtReXpivMF1cpyFDnNFGM7ijcA.roa (hash: OR7CPwZ6MpHkZuOGG+e93YJLPJuneOSY4zyIdDNWnNQ=) 2: CDAwG6xx4G2yuH4jPsgXz2yDfuI.roa (hash: RBaBTPGeeD45uOTMFp+wq/rQCA3uDtcIdv8QYeJkeK8=) 3: SmpCeMzzEWGEIEcZUdh3lt8oa80.roa (hash: /Uox37FoYXH6eNTNB86Q4PbWJAKl1oSK7OCOLMxNbwk=) 4: bS-dW7McKcQWfsSCZKsKYJB7ivw.roa (hash: 6YggiAWt57JhOAVIjv8pworKPUEyvDQE3G1yWLj4gL0=) 5: gW0SUSx1KCDaQhK-dVpgtj9eUnU.roa (hash: AHOSoN/02Ut56nGoIwJCmjGgur2VYxhNH9yRofdyQ2M=) 6: ozQSdbcao1q2XLbqse6ejvXOC6o.roa (hash: KNxPC3AZLEybBjmnYWu2kx8x+IogZDif+Wq7bNzorEk=) 7: t2BnTgSFvmQuOG4nOvoz5VJHPR8.roa (hash: wU/5iSSqYGZKC2AHSc5jcwCDSZN+OgbZrIcAqX5i5fs=) 8: tmRXDBNLCSsrdJNLWdAlGLTpQpI.roa (hash: GhAaPEG/2cFDEhuE3hcsyBAwA7J82m48rmpOcH2NMJA=) 9: wc5lF7KvljLd2cELNKI-qEhSbis.roa (hash: vb4zNPPWYjlyqaH0oWjHMtjItqakcYwrEK2xf/zICyg=) 10: yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl (hash: 6Y5b7/1i93lusig/gjpQ+JLzhw5ZIku/Vg+URMh362k=) 11: yRslL42OrEG4wOocLeHugfdI5BM.roa (hash: jeXJjoXurOcXAlphxRZAZ+q4l7fzMqsWwHH+toAhSAI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 12:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D Validity Not Before: Mar 15 01:39:38 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0D397B1E745D6DF46E3B8ECDFE54C93F66DD53EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:5c:88:61:a5:35:ad:2d:b1:ad:46:dc:9e: ea:07:f0:d8:12:ab:1f:79:83:85:cd:88:dc:8e:a9: 1d:bd:2d:53:48:06:a9:f2:0a:07:2d:6a:a1:32:d7: 93:38:be:1a:eb:c9:46:19:9f:c9:53:4d:ae:be:8b: 14:7f:72:11:79:bc:7a:f7:ff:5c:50:e4:55:f2:77: 29:83:eb:7b:c7:73:91:15:9e:23:69:d7:b9:49:fa: b7:1b:8f:d8:e8:56:61:c1:09:b3:cc:8c:35:72:3c: 6b:fa:c3:40:60:9b:75:b6:62:66:60:f1:07:03:e3: 5b:ea:3b:bf:e5:fc:e3:0b:f9:a1:52:80:c8:8d:a4: e6:24:bb:77:15:fa:9e:1f:42:89:46:65:32:54:6c: 7f:08:1c:e7:fa:fc:0c:15:ae:52:c9:7e:a3:41:42: 40:af:9a:b8:f1:65:66:2f:1a:c3:d8:d0:0d:3e:04: f3:70:a9:55:e0:25:c3:9d:46:46:89:8f:43:21:d8: 1a:4c:74:de:fc:fd:82:fd:13:76:96:da:bf:fb:a1: fa:a9:40:46:f2:1d:be:4e:0d:cc:c1:3f:9d:09:63: 27:cd:6d:11:f8:de:e6:d8:48:1a:90:42:57:04:74: 35:fe:e1:a2:b7:a2:f4:fc:d1:0f:5d:65:f6:ce:16: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:39:7B:1E:74:5D:6D:F4:6E:3B:8E:CD:FE:54:C9:3F:66:DD:53:EA X509v3 Authority Key Identifier: keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:17:99:de:e1:01:c1:d1:4b:2e:f3:23:59:91:50:7d:f1:48: a6:c6:ee:e5:6e:dd:45:cb:71:35:da:d8:bd:9a:06:82:07:5d: 9e:2b:77:37:95:96:c8:a6:00:aa:f3:7a:3d:d4:e0:77:cc:c6: 34:e3:4f:31:b7:01:9e:59:5a:6a:9c:9e:94:df:fb:9b:77:bf: 96:42:f9:f5:31:6e:f9:0b:a2:43:eb:89:60:c1:20:68:0f:ac: 6d:21:cc:b0:d7:d3:d3:27:dd:5a:97:05:5c:d8:12:d8:1d:3e: 2d:54:03:87:2c:ca:44:d1:a9:fd:8a:36:37:58:d1:e1:dc:3f: 06:fc:15:05:b1:e4:4e:29:5c:69:8a:58:04:19:86:79:6a:05: 11:e5:8c:d4:36:ea:f0:f6:d1:51:57:27:dc:d9:d1:31:71:7d: 82:96:10:b3:78:d8:66:29:6a:c6:07:cd:8a:d4:92:d1:0b:29: 8e:95:b1:f1:f9:eb:f9:75:22:03:37:62:34:05:c6:6a:51:e9: 91:07:a1:cd:d7:f1:6e:85:9f:36:e3:1e:a7:ac:4d:4f:fa:48: 4f:77:9c:3d:5b:39:77:2a:15:c8:3f:d4:d3:a2:96:b1:b2:c0: 9f:45:5d:fd:b4:57:d4:21:06:61:5b:2b:6d:87:42:ab:59:ed: 7a:34:43:08 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzgx NEQ4NUJENDgzNjBBNjVEOUQ0MTQ0RUM2RDIwNzUyQzFFREM3RDAeFw0yNjAzMTUw MTM5MzhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBEMzk3QjFFNzQ1RDZE RjQ2RTNCOEVDREZFNTRDOTNGNjZERDUzRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr0VyIYaU1rS2xrUbcnuoH8NgSqx95g4XNiNyOqR29LVNIBqny CgctaqEy15M4vhrryUYZn8lTTa6+ixR/chF5vHr3/1xQ5FXydymD63vHc5EVniNp 17lJ+rcbj9joVmHBCbPMjDVyPGv6w0Bgm3W2YmZg8QcD41vqO7/l/OML+aFSgMiN pOYku3cV+p4fQolGZTJUbH8IHOf6/AwVrlLJfqNBQkCvmrjxZWYvGsPY0A0+BPNw qVXgJcOdRkaJj0Mh2BpMdN78/YL9E3aW2r/7ofqpQEbyHb5ODczBP50JYyfNbRH4 3ubYSBqQQlcEdDX+4aK3ovT80Q9dZfbOFo/tAgMBAAGjggI9MIICOTAdBgNVHQ4E FgQUDTl7HnRdbfRuO47N/lTJP2bdU+owHwYDVR0jBBgwFoAUyBTYW9SDYKZdnUFE 7G0gdSwe3H0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU3My95QlRZVzlTRFlLWmRuVUZFN0cwZ2RTd2UzSDAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95QlRZVzlTRFlLWmRuVUZFN0cwZ2RT d2UzSDAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTczL3lCVFlXOVNEWUtaZG5VRkU3RzBnZFN3ZTNIMC5tZnQw RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQALF5ne4QHB0Usu8yNZkVB98Uimxu7lbt1Fy3E12ti9mgaCB12eK3c3lZbI pgCq83o91OB3zMY0408xtwGeWVpqnJ6U3/ubd7+WQvn1MW75C6JD64lgwSBoD6xt Icyw19PTJ91alwVc2BLYHT4tVAOHLMpE0an9ijY3WNHh3D8G/BUFseROKVxpilgE GYZ5agUR5YzUNurw9tFRVyfc2dExcX2ClhCzeNhmKWrGB82K1JLRCymOlbHx+ev5 dSIDN2I0BcZqUemRB6HN1/FuhZ824x6nrE1P+khPd5w9Wzl3KhXIP9TTopaxssCf RV39tFfUIQZhWytth0KrWe16NEMI -----END CERTIFICATE-----Generated at Thu Mar 26 14:51:27 2026 by rpki-client