$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft File: UA7zWLy-FKNYyk7uQbTpDckj6dI.mft (raw, json) Hash identifier: owYwVdAYCVUkKXUg+Aj2RFIVZfTFfn7QB6f5Y4nPPKU= Subject key identifier: C9:40:88:48:51:7D:65:ED:A1:A0:BD:FC:1F:BA:9C:EB:89:65:90:32 Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Certificate serial: C3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft Manifest number: 0957 Signing time: Wed 05 Nov 2025 18:31:02 +0000 Manifest this update: Wed 05 Nov 2025 18:31:02 +0000 Manifest next update: Thu 20 Nov 2025 18:31:02 +0000 Files and hashes: 1: -bni3lOugm-1XhQa694FriJYuPw.roa (hash: mirtm5NFxPLmjF4nuSYb2LChzX4JCjCLOtEwbxk+1B8=) 2: -iAnCNUVKZoeQ2ipuZdVZI-rz9E.roa (hash: l2ljYMyCJLJ4ZWpqezckJdXs0V2ESbDHGWOCNTXy4HE=) 3: 7BluW--NcwtxNHPJVu0KEEelBsY.roa (hash: mn+eASuKbSGdhbTvkKSAu6swdNkns106RDClfdZVaLU=) 4: KgULlStaqnCgEMVy7jZth3doESI.roa (hash: D0v6FpUfBho/ziSXkYQmMklcZvE+W/MvY5ougk4D4N0=) 5: NNIO14BYU2mIPvehfbW2TzclFdU.roa (hash: iWirlC5cPXH72FqNYLYNr6vyOcSI3/3AR8YAlZIlRgY=) 6: Pnk2CAnZBNY-yedHfcHvL0uQXq4.roa (hash: GsCz7zVzg0C2yl6e0CBiHiYZb+EvPt3ViS88IBWXeAI=) 7: PogvfeRZbOtuTu7AaG-PU2hDI90.roa (hash: 2mE2PB4C7Yot6BPtdQsK++pD2W59ZIK3llYabzbZ8ns=) 8: RWm_7MynRqed4Yn19wf8SevPXaU.roa (hash: KEYH16bbFbGWKWaqI21oQxfT2oUiTnXrcrHOEjOCC6s=) 9: SsJDq1Fqc5ShCYGZI2ZJy1m3FmY.roa (hash: lQoK+1EYBGQZJNig/Kr3/+nUX3tzmdJQ3b3YzchTuTw=) 10: UA7zWLy-FKNYyk7uQbTpDckj6dI.crl (hash: NfwdUIh7kZcRMbydy9ohuPJgIA6RL7BdEIYnWmmHk50=) 11: UPYRaHO8EQYvrd2yVtR3gFHZByg.roa (hash: jwknpjyKLs13/PnoXy4DiCNYj6+rlxv/QNt73zLRGcY=) 12: WO0bZ1giqi0agx5pHEu4f8oNLd4.roa (hash: lhw46C4Q8pCUf8+UePxldufh+9NEm6JrACv5Nwh9V/o=) 13: Zx1lb96ElqeB_1Z0tqiOxeBHH6Q.roa (hash: Jg63v8jhqKkfd3PAVVyXjiXLSXLy9FIIK1WnY9CR768=) 14: bECMtPsnLp46yINA6LLnR6WvqN8.roa (hash: pMiUPRb2qPsRN3r4ZZo1PH3mV2XvFu0ws+wivu2xmUk=) 15: bWYqoYT7Bos6OtRplPJHQQFpMtY.roa (hash: IHK5D3Q4C3SlYchpPP3i22wk8HCro1RGg+CVJVupT50=) 16: gEU3NrAfsqt3awyXSHeqXPewGLA.roa (hash: n2c2TYeDC6Bw+eXGn5QPLZMbcqVPPB6uKXUE/E/+0bA=) 17: g_ZbgEaI-rL9utV3cIvC__mIU2g.roa (hash: 3/GcCiEXYURajPrhEFIU1b7LM/kp4y9zCCUfSmthc8M=) 18: hccmdFNYNLSfMbeZKxTCTRJfO0Y.roa (hash: 1SZsWn3MQ9RlCm7RLxwLNXGYc3X0e8kQTW68K7dDGdQ=) 19: iFX3f46gOA6pvKRPUlIpusMU7RU.roa (hash: HcElz0c3B7Dg9C6cG9MGk7dU51aSdJd61lscfSp51Ng=) 20: iGGMOjYDJHZifdGW4DS9qv1c0sg.roa (hash: KFX9EbSD7GEINh1+vJo4EqMInNPq7YfqmArWkun9VrQ=) 21: pbO8HvdIAouYIYG5i46GoitxQGw.roa (hash: xOgmXq9vYOZo+LwcDK9jMbVfrizX58xesou0oepurxI=) 22: sQk4jm_9hwC8VLKzUYrAyNfy4wQ.roa (hash: VCzvw4q3hnpoEHVQw+7A+oxqn3qyrEcKyEPFbXeaHvw=) 23: t2YDJisw4-1SZQzBBgTtTDmXXWM.roa (hash: pJTlrZ0HbGK7KwuPh1VDXvMFgIfAnhwIpS0trcRisGk=) 24: tDtEdnGCh0-OA6CMt4-h47W-dGM.roa (hash: pNz4/XD93NugqRvPfP1OkRiemAxaxwI0JIjV40Yoqhk=) 25: u_YT9jVuXTm9QTqSpsU1cPqNxOk.roa (hash: JqsHN4lwK54qoIIrKcWcyO3ckpIBgc4eKe0RvHATjho=) 26: wBTCitrW8-d0H8Osu4TCKhCEwtY.roa (hash: qKWr134Zz31j/ufsX1kxS0piAALQtLH656JCawtYetU=) 27: zx63f-I7XMMSO_Dsik-zgEqtE_E.roa (hash: sGZyFl3sd5TUDLU8XXIKntQa+0Z9pIg2rpJv/DloITs=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Validity Not Before: Oct 15 01:36:07 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=C9408848517D65EDA1A0BDFC1FBA9CEB89659032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:58:3f:0e:5e:6d:df:ed:b6:07:37:1f:a0:9e: 50:7e:85:d4:21:ce:b3:58:11:6f:c9:df:a2:38:07: 17:32:62:b7:d6:d9:95:bd:d8:c9:00:89:b1:a0:b9: c9:09:c5:00:20:94:18:d4:63:d2:f3:e9:93:50:17: b5:27:62:fc:91:29:95:59:a5:2e:81:bf:68:33:95: 7c:52:a9:4e:3a:5c:1d:83:87:23:41:5f:c3:5d:61: d1:16:f4:9a:17:04:4f:59:e7:e0:87:fc:f9:75:c8: fd:bb:c2:27:1d:be:69:3e:87:49:c6:55:57:92:fd: 96:12:d1:86:88:80:f4:0e:2e:36:9b:d1:27:de:17: 5a:0a:13:8a:2c:88:2e:bd:65:a7:81:fd:d7:12:a8: 8a:fd:81:5d:d5:b0:48:41:ee:a9:94:cb:ea:ff:c3: 9b:35:61:ad:7e:5e:41:66:8c:c2:78:fc:7e:5b:ee: d2:34:0a:db:c3:af:45:fe:46:cb:c3:0e:42:88:cb: fa:39:9a:bc:4e:0b:81:1b:4e:6a:67:98:d0:8e:49: fa:04:4e:a6:5e:2a:8a:36:a7:c0:11:28:88:7f:de: b5:99:23:c0:a6:96:27:95:9e:81:63:83:aa:5d:85: 25:28:ca:ba:c3:99:94:a3:7f:34:78:44:15:e1:38: a7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:40:88:48:51:7D:65:ED:A1:A0:BD:FC:1F:BA:9C:EB:89:65:90:32 X509v3 Authority Key Identifier: keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:95:5a:f0:05:26:96:f5:d6:6b:6e:81:a2:c9:40:b6:56:15: e2:f4:d7:9d:1d:01:a2:6c:50:81:74:a3:fd:1d:44:bf:9e:a0: 09:6e:ca:3c:f6:79:56:35:51:35:14:f2:d1:e5:89:03:c0:a8: 11:f6:31:a0:d7:b4:e8:74:69:37:5c:2b:4f:27:8c:16:a0:51: b9:dc:ab:c5:2e:ed:4f:95:34:3d:14:06:2e:d7:17:1f:c7:54: fe:97:0a:58:c8:96:3c:b2:11:c6:5f:e5:7a:ad:98:66:fe:32: 10:31:c3:5a:7c:f0:9e:50:09:7e:a4:e1:53:1e:05:e8:24:2c: 88:66:74:63:b0:35:e4:0d:a6:9c:a2:72:37:cb:7c:c2:f4:16: 4c:b5:71:6c:18:ef:5a:2a:29:75:4a:e1:de:3a:76:80:a1:e5: 45:3b:a7:2a:00:a7:3f:d4:75:1a:45:cb:6b:b7:9f:4a:f2:7b: f7:86:78:e4:82:c1:6c:8d:de:e3:3e:72:1e:80:73:52:75:2d: 7e:73:fd:8b:2f:e1:12:c4:8d:7d:96:87:dd:fe:09:33:cc:01: 2a:7e:dc:a5:18:09:27:8a:0a:97:d4:5f:16:72:0c:62:27:0c: 8d:c8:e7:f7:e3:02:5d:96:4e:e9:e7:3b:60:98:48:30:50:a8: 9a:f7:f6:65 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNTEwMTUw MTM2MDdaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM5NDA4ODQ4NTE3RDY1 RURBMUEwQkRGQzFGQkE5Q0VCODk2NTkwMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZWD8OXm3f7bYHNx+gnlB+hdQhzrNYEW/J36I4BxcyYrfW2ZW9 2MkAibGguckJxQAglBjUY9Lz6ZNQF7UnYvyRKZVZpS6Bv2gzlXxSqU46XB2DhyNB X8NdYdEW9JoXBE9Z5+CH/Pl1yP27wicdvmk+h0nGVVeS/ZYS0YaIgPQOLjab0Sfe F1oKE4osiC69ZaeB/dcSqIr9gV3VsEhB7qmUy+r/w5s1Ya1+XkFmjMJ4/H5b7tI0 CtvDr0X+RsvDDkKIy/o5mrxOC4EbTmpnmNCOSfoETqZeKoo2p8ARKIh/3rWZI8Cm lieVnoFjg6pdhSUoyrrDmZSjfzR4RBXhOKctAgMBAAGjggI9MIICOTAdBgNVHQ4E FgQUyUCISFF9Ze2hoL38H7qc64llkDIwHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM0L1VBN3pXTHktRktOWXlrN3VRYlRwRGNrajZkSS5tZnQw RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCFlVrwBSaW9dZrboGiyUC2VhXi9NedHQGibFCBdKP9HUS/nqAJbso89nlW NVE1FPLR5YkDwKgR9jGg17TodGk3XCtPJ4wWoFG53KvFLu1PlTQ9FAYu1xcfx1T+ lwpYyJY8shHGX+V6rZhm/jIQMcNafPCeUAl+pOFTHgXoJCyIZnRjsDXkDaaconI3 y3zC9BZMtXFsGO9aKil1SuHeOnaAoeVFO6cqAKc/1HUaRctrt59K8nv3hnjkgsFs jd7jPnIegHNSdS1+c/2LL+ESxI19lofd/gkzzAEqftylGAknigqX1F8WcgxiJwyN yOf34wJdlk7p5ztgmEgwUKia9/Zl -----END CERTIFICATE-----Generated at Wed Nov 5 21:59:58 2025 by rpki-client