$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft File: 4FbQUB1DDOD88NsGdbr8kLBdm_U.mft (raw, json) Hash identifier: P7XyYegOP8OeT8NsLkhnadXk1mB0iYsMdKkFi3UO0Mk= Subject key identifier: 12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07 Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5 Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5 Certificate serial: 98 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft Manifest number: 1D12 Signing time: Mon 21 Sep 2026 10:35:18 +0000 Manifest this update: Mon 21 Sep 2026 10:35:18 +0000 Manifest next update: Wed 21 Oct 2026 10:35:18 +0000 Files and hashes: 1: 4FbQUB1DDOD88NsGdbr8kLBdm_U.crl (hash: Bay1g1ZEbXQH7PhAF5DuUcO2E9MqD+Bh7fogFkNT1Ss=) 2: Gvlzwd_Hfvi82DEETc8uwGEog58.roa (hash: UyZe/Nc8E1IqGyekSsAzcqDuR1QemYq1qobaYZOB43Y=) 3: Ijq7PDY82f_y4TP_q8Y_ZqtNVjQ.roa (hash: qkwBxPhBQpUi0aQrUMTK647WjicWlVGg9T+3CEYYrGI=) 4: NzSFNy5lYTL4ZmAj_RBqwz8GsZM.roa (hash: QWvSGl715icJLrF4+r2RKCSeS0K7+urwqMXIGN06Uxw=) 5: U2ZBKjpm4WHND-Jvj0s8Oe6-8tI.roa (hash: cSb9+N+Eo6yk2/WqUfBt4oJq18PC6OFUJ+GyxFm6KBA=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5 Validity Not Before: Sep 15 01:35:36 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=1237FA2C47A961C2F966F3B20BB09D2477AEF307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4e:1c:dd:e1:32:ba:b9:74:3f:c7:64:44:c7: 56:ee:be:36:7a:80:45:63:f4:2b:18:6d:35:9b:1b: 62:c6:04:b5:ce:f8:53:1b:26:fc:cd:ac:1f:6c:05: 53:4d:b4:c4:57:10:0c:0c:f6:b4:c1:69:6d:69:3e: 2b:3d:f2:d8:ae:1b:c5:85:1b:3d:29:da:19:da:f7: 08:60:29:81:db:3c:a4:92:82:9c:f1:2e:19:ce:0c: 71:ab:07:60:dd:f5:84:93:95:1d:c3:72:ab:c0:0b: bd:49:06:9b:06:cd:f2:2e:3f:12:da:33:54:97:ac: 57:d9:a1:d5:59:27:2c:88:b4:f9:04:17:3d:4e:8b: ee:29:6a:43:59:a1:1b:34:84:1c:0b:ab:f8:2d:be: a0:42:6b:4c:50:f7:95:7c:dc:05:12:64:12:17:c4: 97:a9:b2:1f:ee:f6:e8:89:81:8c:a1:44:2e:d2:a5: 83:b1:af:ba:3e:c2:3b:61:10:be:87:9c:e0:66:a3: 0a:c1:61:d3:84:79:19:f7:7c:82:bc:ed:5a:9e:63: 9e:81:d9:8e:b5:10:e0:b2:c9:e5:14:a8:a8:ed:ca: 1d:71:41:be:7d:97:a2:c2:3a:7a:36:e5:ff:87:71: 2f:46:1b:39:39:72:81:3d:01:18:af:40:4e:cd:dc: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07 X509v3 Authority Key Identifier: keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:89:41:9a:01:2d:d9:05:a8:03:5b:99:48:9e:4a:37:87:10: f8:d8:4b:ca:99:89:19:af:d7:65:42:4e:30:3e:ce:6a:ee:78: 7e:50:fe:a1:c9:35:5c:85:f7:a8:c0:66:66:4c:a4:a4:69:97: 6d:a7:57:6f:d8:09:a0:84:35:32:bf:3f:04:7f:8d:19:b1:34: e4:04:9f:6c:a6:c4:0c:6e:5a:0f:e2:06:da:f4:e7:e7:d2:b0: 64:26:72:fc:a6:7c:51:78:44:d4:d1:f0:3f:d5:46:95:f6:bd: 74:e5:9d:ce:8f:cd:e4:4a:50:e5:a2:2d:af:e3:3b:7d:91:ab: 00:df:60:85:c5:fd:3c:b6:e3:cf:d9:b7:31:dd:6c:31:3e:44: 29:b7:01:eb:34:d3:fc:11:4e:56:50:7f:db:7e:44:b7:8c:7d: 7a:13:6f:ca:2d:af:cb:ec:eb:c6:7b:57:3a:1f:54:99:85:37: 4f:59:29:f4:d5:4c:37:c2:de:1b:49:8c:00:4c:bd:9c:d6:5c: 95:0e:1f:10:a7:57:e9:0a:03:52:66:b3:1e:91:42:26:25:2b: ee:ff:da:8b:71:b5:55:28:e8:ca:f3:74:17:cc:b2:52:aa:4a: 58:87:ef:66:80:a8:e2:36:ce:b7:d1:19:30:30:f1:ab:13:ba: 46:27:5e:05 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTA1 NkQwNTAxRDQzMENFMEZDRjBEQjA2NzVCQUZDOTBCMDVEOUJGNTAeFw0yNjA5MTUw MTM1MzZaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDEyMzdGQTJDNDdBOTYx QzJGOTY2RjNCMjBCQjA5RDI0NzdBRUYzMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmThzd4TK6uXQ/x2REx1buvjZ6gEVj9CsYbTWbG2LGBLXO+FMb JvzNrB9sBVNNtMRXEAwM9rTBaW1pPis98tiuG8WFGz0p2hna9whgKYHbPKSSgpzx LhnODHGrB2Dd9YSTlR3DcqvAC71JBpsGzfIuPxLaM1SXrFfZodVZJyyItPkEFz1O i+4pakNZoRs0hBwLq/gtvqBCa0xQ95V83AUSZBIXxJepsh/u9uiJgYyhRC7SpYOx r7o+wjthEL6HnOBmowrBYdOEeRn3fIK87VqeY56B2Y61EOCyyeUUqKjtyh1xQb59 l6LCOno25f+HcS9GGzk5coE9ARivQE7N3FCRAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUEjf6LEepYcL5ZvOyC7CdJHeu8wcwHwYDVR0jBBgwFoAU4FbQUB1DDOD88NsG dbr8kLBdm/UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzExMjA3LzRGYlFVQjFERE9EODhOc0dkYnI4a0xCZG1fVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzRGYlFVQjFERE9EODhOc0dkYnI4 a0xCZG1fVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMTIwNy80RmJRVUIxRERPRDg4TnNHZGJyOGtMQmRtX1UubWZ0 MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4lBmgEt2QWoA1uZSJ5KN4cQ +NhLypmJGa/XZUJOMD7Oau54flD+ock1XIX3qMBmZkykpGmXbadXb9gJoIQ1Mr8/ BH+NGbE05ASfbKbEDG5aD+IG2vTn59KwZCZy/KZ8UXhE1NHwP9VGlfa9dOWdzo/N 5EpQ5aItr+M7fZGrAN9ghcX9PLbjz9m3Md1sMT5EKbcB6zTT/BFOVlB/235Et4x9 ehNvyi2vy+zrxntXOh9UmYU3T1kp9NVMN8LeG0mMAEy9nNZclQ4fEKdX6QoDUmaz HpFCJiUr7v/ai3G1VSjoyvN0F8yyUqpKWIfvZoCo4jbOt9EZMDDxqxO6RideBQ== -----END CERTIFICATE-----Generated at Mon Sep 21 15:51:34 2026 by rpki-client