$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft File: nbu4hcPSk50dl7JOrYvQZxca0rI.mft (raw, json) Hash identifier: gYLe+BQTsN8BkVmvWehqXh5N4duR2M4qlt5bZEIWcuc= Subject key identifier: 02:CB:8E:F5:05:D8:5E:0E:F9:40:88:5D:95:CF:48:81:84:1F:9F:C1 Authority key identifier: 9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2 Certificate issuer: /CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2 Certificate serial: 08 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft Manifest number: 01AC Signing time: Thu 26 Mar 2026 01:19:13 +0000 Manifest this update: Thu 26 Mar 2026 01:19:13 +0000 Manifest next update: Fri 10 Apr 2026 01:19:13 +0000 Files and hashes: 1: LAxqfrOEVILcWZMbV4RoNSjOWGU.roa (hash: QzHG5AuSzqc4VDeHfa2mm9MIHnlC1W5uzaLbX0nnGtY=) 2: nbu4hcPSk50dl7JOrYvQZxca0rI.crl (hash: NjOKh0zofTO9YM53GD/1N+9OLf/hiFxTpO77wmM0vyM=) 3: ym9lEzlvUqETVEu2HRHsUYWsS4Y.roa (hash: vORPAPneVCCw5RW/G3qI7iJ3tnca1g4uiBb9fMTwsUE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 04:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2 Validity Not Before: Mar 15 01:37:21 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=02CB8EF505D85E0EF940885D95CF4881841F9FC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b4:86:64:f9:9a:40:28:48:49:95:a8:2a:74: 19:94:a6:d4:7a:da:23:fa:c5:01:54:58:26:e6:5a: ee:bf:2d:57:fe:b9:04:06:fb:8c:ff:ac:30:3a:14: 2e:2d:90:bb:60:b3:d7:ed:f5:f9:02:a9:6e:91:96: d9:70:33:bd:45:ab:87:45:6f:36:50:40:f5:6f:1a: da:6c:6b:14:27:81:13:f1:aa:2f:18:6e:11:d2:50: 79:8e:c5:74:6c:a1:5e:52:c4:f6:3a:52:0f:32:51: 9f:3b:d8:cc:b5:e4:68:3d:ce:d5:1e:3a:91:62:c2: 4c:28:75:02:97:92:67:82:f7:b8:52:ea:98:08:c7: 97:30:97:f4:de:eb:f3:23:b5:75:1c:2b:d9:fb:79: 65:0f:75:d7:98:d7:bc:08:57:71:68:59:22:62:4e: b9:8f:fc:66:3e:13:65:51:fa:2d:b0:fc:62:9c:53: 39:5f:08:01:cb:b0:c5:a5:2a:af:9c:a3:6f:a6:29: 78:e7:e6:02:0b:6a:a4:85:25:d4:4f:76:46:2b:ba: fd:b2:84:a4:30:92:4d:18:56:27:b9:aa:1c:e9:9f: a3:3d:fd:ad:df:f4:47:e0:cc:a4:cc:1f:46:eb:a1: f8:08:fc:cb:af:a2:98:3d:3d:45:53:e3:b7:41:b9: 97:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CB:8E:F5:05:D8:5E:0E:F9:40:88:5D:95:CF:48:81:84:1F:9F:C1 X509v3 Authority Key Identifier: keyid:9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e7:25:f6:b0:6c:cb:58:d9:e7:e3:23:d9:d1:b6:db:d4:f0: 97:31:e8:3b:94:fa:99:98:91:11:76:67:88:d5:77:d2:de:e8: d7:71:f9:eb:c6:96:ac:ab:b2:cc:22:19:81:bb:d1:19:e2:a3: 5d:87:be:72:9c:74:f2:1e:7c:d8:c7:c4:8f:aa:db:fc:a1:72: 62:49:e2:da:a8:08:6f:5b:33:e9:21:cf:1d:aa:0b:2d:36:ef: cc:4c:a8:56:d2:d0:79:0e:c6:3c:c2:51:88:41:37:a1:7c:2c: 0e:a0:1f:93:46:62:a7:55:ec:d1:73:18:26:ef:64:21:4c:c0: 2d:06:c0:88:4d:8d:86:26:4b:58:6c:f8:45:73:ca:f4:b9:b1: e8:3f:3b:61:5f:d4:c3:9b:96:11:76:ca:36:3f:cc:09:06:8f: c8:e4:bb:0a:a0:38:93:49:32:9f:0a:fe:25:73:5f:dc:6e:14: e2:d2:6d:e0:dc:1d:df:5b:d5:11:15:fe:5f:d1:ee:aa:1d:2e: 64:95:ed:50:91:47:0a:ce:0e:ba:3b:c6:a3:a9:bb:0a:67:86: b6:ce:c8:c9:d1:b5:f0:29:22:e5:76:f7:85:09:b0:77:54:58: d3:e8:81:f5:6a:91:d7:6f:17:6e:5f:63:68:15:96:7e:10:d2: b7:dd:0d:84 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REJC Qjg4NUMzRDI5MzlEMUQ5N0IyNEVBRDhCRDA2NzE3MUFEMkIyMB4XDTI2MDMxNTAx MzcyMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDJDQjhFRjUwNUQ4NUUw RUY5NDA4ODVEOTVDRjQ4ODE4NDFGOUZDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANO0hmT5mkAoSEmVqCp0GZSm1HraI/rFAVRYJuZa7r8tV/65BAb7 jP+sMDoULi2Qu2Cz1+31+QKpbpGW2XAzvUWrh0VvNlBA9W8a2mxrFCeBE/GqLxhu EdJQeY7FdGyhXlLE9jpSDzJRnzvYzLXkaD3O1R46kWLCTCh1ApeSZ4L3uFLqmAjH lzCX9N7r8yO1dRwr2ft5ZQ9115jXvAhXcWhZImJOuY/8Zj4TZVH6LbD8YpxTOV8I AcuwxaUqr5yjb6YpeOfmAgtqpIUl1E92Riu6/bKEpDCSTRhWJ7mqHOmfoz39rd/0 R+DMpMwfRuuh+Aj8y6+imD09RVPjt0G5lzECAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQCy471BdheDvlAiF2Vz0iBhB+fwTAfBgNVHSMEGDAWgBSdu7iFw9KTnR2Xsk6t i9BnFxrSsjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQ2L25idTRoY1BTazUwZGw3Sk9yWXZRWnhjYTBySS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL25idTRoY1BTazUwZGw3Sk9yWXZRWnhj YTBySS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NDYvbmJ1NGhjUFNrNTBkbDdKT3JZdlFaeGNhMHJJLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAErnJfawbMtY2efjI9nRttvU8Jcx6DuU+pmYkRF2Z4jVd9Le6Ndx+evGlqyr sswiGYG70Rnio12HvnKcdPIefNjHxI+q2/yhcmJJ4tqoCG9bM+khzx2qCy0278xM qFbS0HkOxjzCUYhBN6F8LA6gH5NGYqdV7NFzGCbvZCFMwC0GwIhNjYYmS1hs+EVz yvS5seg/O2Ff1MOblhF2yjY/zAkGj8jkuwqgOJNJMp8K/iVzX9xuFOLSbeDcHd9b 1REV/l/R7qodLmSV7VCRRwrODro7xqOpuwpnhrbOyMnRtfApIuV294UJsHdUWNPo gfVqkddvF25fY2gVln4Q0rfdDYQ= -----END CERTIFICATE-----Generated at Thu Mar 26 08:30:05 2026 by rpki-client