$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft File: iYAdvb4WiGOrDoAvDskKNSXCNHw.mft (raw, json) Hash identifier: XbJUKt5qRAvJKrPZKcQguP9Qtms3zVJOWc0SenQ0bkQ= Subject key identifier: E3:07:F6:33:0E:BE:3A:54:FB:65:9D:93:53:A6:48:BE:04:34:08:97 Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C Certificate issuer: /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C Certificate serial: 72 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft Manifest number: 1DD3 Signing time: Mon 02 Mar 2026 16:07:27 +0000 Manifest this update: Mon 02 Mar 2026 16:07:27 +0000 Manifest next update: Tue 17 Mar 2026 16:07:27 +0000 Files and hashes: 1: -g2EO2ghjKgG4SmQS_DcxKzexoY.roa (hash: Dfgg441H7c2wDjnbxDKVXhUSp17aK+b3+K16tyK5svc=) 2: Dl-LohYFZLIZtJ-Hp6Y9GeWfpxU.roa (hash: hGrjVrcbKpEoui3BnvLHHsOGhjJ3aAjgMVHYq6Ekwck=) 3: iYAdvb4WiGOrDoAvDskKNSXCNHw.crl (hash: GKcNwYmaI+fJqDwnG89baR3OSdOkClNHFRZ1VAOV4cU=) 4: jylCkZX7ZHH1z-4qdNBWN3k0l0M.roa (hash: yLemOtzZCRNciUZVftPQg/Hf53yupBd7bPqntzQErY4=) 5: oE9Bq3OieR3mrZeHhSJkmg0-TwY.roa (hash: mUpTibgiUHFiW2PCLaB6KaoV2P0Dwga4XPz5PInm2Pw=) 6: rV_2Vd0CPPxQjpaK-y4yAASEZi0.roa (hash: T8VLHFMRBnzt6rnoSLGNVrUYexRfBQgO5Ku2ykBh6GU=) 7: szbIiCZav7zIJ2orCti6Cj_PDHU.roa (hash: bkyira0dazPD+mV/0SPf5K00ya2LHrl4gzckbT+Cgbk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C Validity Not Before: Feb 15 01:30:49 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=E307F6330EBE3A54FB659D9353A648BE04340897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:91:3f:60:fd:40:ba:64:c3:30:76:c2:c2: 69:98:47:34:a8:3d:97:77:f9:bc:91:9e:9f:4f:45: da:49:27:48:d3:8e:43:78:dd:b5:50:a7:91:7a:d6: 72:8a:6a:ac:6c:84:0c:a3:80:74:99:fa:e3:13:6a: c7:17:99:9b:db:cc:aa:9a:1e:16:1a:2d:b3:28:88: b8:7f:ee:dd:c6:9f:90:a9:c2:0f:6c:cb:79:6f:fe: 0d:4b:11:8a:17:d0:af:82:bd:29:15:15:2e:5f:aa: 5e:d5:c9:87:cd:37:22:76:e1:cd:da:97:62:5c:7a: d6:39:93:30:f6:31:74:6f:98:69:fd:2c:af:92:c8: 6b:95:14:e5:1c:b5:20:06:89:58:d7:a9:3d:da:ec: 54:0f:c8:54:d8:35:5e:63:95:1e:de:93:60:41:4f: d4:8b:a4:a1:47:32:81:88:74:35:ba:f8:0e:5b:9e: b7:c6:e4:1a:28:57:cd:07:ea:fe:74:17:51:b9:ab: 53:82:87:a5:a0:49:ec:32:56:70:b9:2b:db:dd:0d: ca:27:61:8e:3c:03:87:fa:20:d9:32:27:6d:71:8e: 57:ab:a4:d4:99:3f:49:d7:13:b2:67:c0:fe:18:39: 97:c6:87:6f:0f:41:cc:dc:66:cf:ab:8b:de:98:d9: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:07:F6:33:0E:BE:3A:54:FB:65:9D:93:53:A6:48:BE:04:34:08:97 X509v3 Authority Key Identifier: keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:3e:84:16:11:6b:84:d3:31:09:40:db:41:16:a5:40:8a:76: 1c:90:bc:e6:84:ed:55:18:5f:1f:e4:70:e9:d5:be:02:78:64: aa:c5:d5:dd:af:80:3d:bf:1b:7d:64:79:1c:d3:01:eb:ba:82: 70:b9:17:d3:e4:1e:c8:e2:03:9d:3a:c7:52:75:a6:76:5d:c7: 0d:6a:93:80:46:fd:ce:9f:d8:d1:ef:2b:da:f0:82:5c:7b:02: aa:87:6f:90:ad:08:70:22:ee:1f:9c:7d:dc:09:89:cf:c1:d1: 23:83:05:7a:94:0b:a1:10:7b:61:73:f7:a2:37:ac:3d:d2:8f: e8:72:70:88:d8:64:a3:49:12:03:ed:19:00:e3:8b:e7:0c:c0: 35:b2:c9:bd:8e:45:c5:0b:41:01:63:41:b8:b2:4c:ee:8d:80: d1:22:57:39:83:3d:cb:56:35:89:73:16:c4:40:db:20:0a:5a: be:8a:a4:85:96:74:f7:1f:92:ad:08:8a:9b:31:76:cf:96:73: 3b:2a:18:8e:ce:27:79:cb:21:f5:e5:9f:0c:d0:2a:05:84:8a: c1:f3:dc:8b:4c:b6:f2:48:2a:77:ad:83:7a:46:dd:21:e5:96: d0:87:1b:cc:c6:cf:21:75:69:3b:15:69:1c:2e:80:bf:1b:bb: e3:43:7b:6e -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OTgw MURCREJFMTY4ODYzQUIwRTgwMkYwRUM5MEEzNTI1QzIzNDdDMB4XDTI2MDIxNTAx MzA0OVoXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoRTMwN0Y2MzMwRUJFM0E1 NEZCNjU5RDkzNTNBNjQ4QkUwNDM0MDg5NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALqjkT9g/UC6ZMMwdsLCaZhHNKg9l3f5vJGen09F2kknSNOOQ3jd tVCnkXrWcopqrGyEDKOAdJn64xNqxxeZm9vMqpoeFhotsyiIuH/u3cafkKnCD2zL eW/+DUsRihfQr4K9KRUVLl+qXtXJh803InbhzdqXYlx61jmTMPYxdG+Yaf0sr5LI a5UU5Ry1IAaJWNepPdrsVA/IVNg1XmOVHt6TYEFP1IukoUcygYh0Nbr4Dluet8bk GihXzQfq/nQXUbmrU4KHpaBJ7DJWcLkr290NyidhjjwDh/og2TInbXGOV6uk1Jk/ SdcTsmfA/hg5l8aHbw9BzNxmz6uL3pjZuBMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTjB/YzDr46VPtlnZNTpki+BDQIlzAfBgNVHSMEGDAWgBSJgB29vhaIY6sOgC8O yQo1JcI0fDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwOTEvaVlBZHZiNFdpR09yRG9BdkRza0tOU1hDTkh3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaVlBZHZiNFdpR09yRG9BdkRza0tO U1hDTkh3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDkxL2lZQWR2YjRXaUdPckRvQXZEc2tLTlNYQ05Idy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUPoQWEWuE0zEJQNtBFqVAinYckLzmhO1VGF8f5HDp1b4CeGSqxdXd r4A9vxt9ZHkc0wHruoJwuRfT5B7I4gOdOsdSdaZ2XccNapOARv3On9jR7yva8IJc ewKqh2+QrQhwIu4fnH3cCYnPwdEjgwV6lAuhEHthc/eiN6w90o/ocnCI2GSjSRID 7RkA44vnDMA1ssm9jkXFC0EBY0G4skzujYDRIlc5gz3LVjWJcxbEQNsgClq+iqSF lnT3H5KtCIqbMXbPlnM7KhiOzid5yyH15Z8M0CoFhIrB89yLTLbySCp3rYN6Rt0h 5ZbQhxvMxs8hdWk7FWkcLoC/G7vjQ3tu -----END CERTIFICATE-----Generated at Mon Mar 2 19:26:20 2026 by rpki-client