$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.mft File: 12yrvwbTP7wALuB7AAFAvDthKxY.mft (raw, json) Hash identifier: xgSxMgR3lB2amBZV2D9PE5m4nD8PbbXtt7kpFQwj2kc= Subject key identifier: 5D:A4:4D:47:1F:F2:CC:71:98:33:62:D0:66:8F:4C:FD:E6:B4:B6:34 Authority key identifier: D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16 Certificate issuer: /CN=D76CABBF06D33FBC002EE07B000140BC3B612B16 Certificate serial: 24 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.mft Manifest number: 0BEC Signing time: Mon 21 Sep 2026 11:31:02 +0000 Manifest this update: Mon 21 Sep 2026 11:31:02 +0000 Manifest next update: Wed 21 Oct 2026 11:31:02 +0000 Files and hashes: 1: 12yrvwbTP7wALuB7AAFAvDthKxY.crl (hash: 2+B7j3TeqKzApCVLAqakpEyvi7Aed0oNgGY6bJ/nfxc=) 2: 4idIfaLodia007BiRFtn4yj5yLQ.roa (hash: lxBYZniJYa+6fGsCCHBNjRd2Xcn4klanZaxmsF2UtiE=) 3: GIsvov6H0pUYoIJNzK6-A-py-sg.roa (hash: lm+1yLUFCoLz87zqS5AEnDk0FtjRPCwm+kVhlmNvN9U=) 4: RbpZYJM8DC7AtCzNNOUk-UxHWz4.roa (hash: OX2jF9MN1wOWhbV7qw2XgXuDAiAbXkaZ2qjcZwvJ6G0=) 5: UDL7jZaO0kpbUU0fn6Zrl2iEZTM.roa (hash: EJOrkEgXK6Ftu2VI320udXgnIi3c1oPkhSIxCQm2zQc=) 6: cE7haRFxuFNQI97Z3LeVMrgp-wc.roa (hash: E3H6YDF7Qixuw9D+AmessPUvVf6ymqx3jDTn+ddwiz0=) 7: o6l6QIytME4OhOJnIz9YatYgE4I.roa (hash: 6CYp7fn8gHC7YPnJU8X0gN4ebwjW6rC2M7iewBoYV6M=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 13:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CABBF06D33FBC002EE07B000140BC3B612B16 Validity Not Before: Sep 15 01:42:18 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=5DA44D471FF2CC71983362D0668F4CFDE6B4B634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c8:6c:ac:8f:ee:33:1c:4f:b8:69:cc:1a:4b: f4:21:02:53:5c:70:72:15:65:8f:34:aa:4a:e9:69: 5f:c8:73:b0:4d:19:c9:7f:ca:95:ad:3c:1f:11:28: 28:26:45:47:9e:e2:46:69:53:8a:1f:18:30:74:ba: 44:ef:e8:8d:2e:eb:7b:62:cd:90:da:2c:45:63:8e: 81:58:c6:2c:d5:ec:ca:b5:f6:e9:ce:ac:81:d6:d3: 83:df:28:b1:2e:74:43:a6:42:f0:47:93:0c:26:26: 67:fa:1f:46:06:90:11:44:02:41:a1:d2:41:c2:71: 92:25:da:03:04:55:bf:44:b9:0d:51:d6:c7:8b:2e: 75:31:c6:54:36:86:20:c7:e1:6f:3c:cb:8b:cd:80: 49:85:95:f1:60:06:e0:b9:05:16:2c:22:46:cf:c5: 2b:46:5b:f3:87:a7:9e:7e:3d:91:03:70:7c:14:cb: b8:8a:e9:93:f8:45:1c:ec:f4:70:b7:4d:ca:ae:8a: cd:f2:de:38:94:fc:6e:6f:2a:33:c8:f6:26:11:b9: 95:ed:fc:a4:9e:8c:c6:a1:1e:7c:5c:e0:ce:68:d9: 4b:5a:f7:f5:ea:55:75:c5:1b:2b:71:69:a0:a6:8d: aa:16:9f:b9:0a:4a:52:5c:20:2d:98:fb:c0:d9:6e: 43:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A4:4D:47:1F:F2:CC:71:98:33:62:D0:66:8F:4C:FD:E6:B4:B6:34 X509v3 Authority Key Identifier: keyid:D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2a:bf:1b:7f:44:0e:03:7b:4a:4d:0c:bd:00:1a:28:2b:97: af:56:3f:bd:15:49:7f:f5:b7:ed:20:09:0f:b2:99:df:c6:a5: f6:83:7f:49:45:ab:30:0e:05:cc:20:0b:85:4b:b0:61:35:0c: 0b:97:0d:6e:32:89:c5:0e:a6:e8:2a:a3:c1:cb:05:ac:f9:ed: 2a:08:fb:9b:ce:44:ff:35:88:b0:f6:bc:50:f9:de:64:3d:68: 81:4c:da:65:7c:6b:67:59:d7:76:79:1c:06:21:52:8e:d6:4e: 9b:85:64:46:64:55:72:71:eb:dd:db:53:35:94:60:34:de:41: af:c0:e5:9a:0b:49:65:1b:d1:fb:2e:11:47:e3:6a:a2:f7:a3: bd:eb:4f:b6:56:fc:02:1f:94:cc:e4:b3:0d:a6:fd:6b:e7:3b: f1:a5:75:c0:00:9f:29:ec:37:16:d9:a9:58:77:ed:66:75:36: a5:5d:b6:86:2f:c6:80:e8:29:23:19:af:ab:b7:50:7c:c3:24: 58:d0:c7:0c:56:fc:60:d2:56:77:bc:cd:5e:ba:74:bb:9b:43: 72:34:48:34:b9:bc:46:55:70:92:41:e3:53:19:e9:f9:d1:78: 17:84:a9:bd:6c:fa:dd:4d:a5:f7:b9:12:89:58:05:b2:5a:6c: a2:d1:eb:f9 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzZD QUJCRjA2RDMzRkJDMDAyRUUwN0IwMDAxNDBCQzNCNjEyQjE2MB4XDTI2MDkxNTAx NDIxOFoXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoNURBNDRENDcxRkYyQ0M3 MTk4MzM2MkQwNjY4RjRDRkRFNkI0QjYzNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMrIbKyP7jMcT7hpzBpL9CECU1xwchVljzSqSulpX8hzsE0ZyX/K la08HxEoKCZFR57iRmlTih8YMHS6RO/ojS7re2LNkNosRWOOgVjGLNXsyrX26c6s gdbTg98osS50Q6ZC8EeTDCYmZ/ofRgaQEUQCQaHSQcJxkiXaAwRVv0S5DVHWx4su dTHGVDaGIMfhbzzLi82ASYWV8WAG4LkFFiwiRs/FK0Zb84ennn49kQNwfBTLuIrp k/hFHOz0cLdNyq6KzfLeOJT8bm8qM8j2JhG5le38pJ6MxqEefFzgzmjZS1r39epV dcUbK3FpoKaNqhafuQpKUlwgLZj7wNluQ08CAwEAAaOCAfYwggHyMB0GA1UdDgQW BBRdpE1HH/LMcZgzYtBmj0z95rS2NDAfBgNVHSMEGDAWgBTXbKu/BtM/vAAu4HsA AUC8O2ErFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMjgvMTJ5cnZ3YlRQN3dBTHVCN0FBRkF2RHRoS3hZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTJ5cnZ3YlRQN3dBTHVCN0FBRkF2 RHRoS3hZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMDI4LzEyeXJ2d2JUUDd3QUx1QjdBQUZBdkR0aEt4WS5tZnQw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdKr8bf0QOA3tKTQy9ABooK5ev Vj+9FUl/9bftIAkPspnfxqX2g39JRaswDgXMIAuFS7BhNQwLlw1uMonFDqboKqPB ywWs+e0qCPubzkT/NYiw9rxQ+d5kPWiBTNplfGtnWdd2eRwGIVKO1k6bhWRGZFVy cevd21M1lGA03kGvwOWaC0llG9H7LhFH42qi96O960+2VvwCH5TM5LMNpv1r5zvx pXXAAJ8p7DcW2alYd+1mdTalXbaGL8aA6CkjGa+rt1B8wyRY0McMVvxg0lZ3vM1e unS7m0NyNEg0ubxGVXCSQeNTGen50XgXhKm9bPrdTaX3uRKJWAWyWmyi0ev5 -----END CERTIFICATE-----Generated at Mon Sep 21 17:28:14 2026 by rpki-client