$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft File: ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft (raw, json) Hash identifier: aFeUGuOczYXLI9iKCmJR+h2CzL3mQZtParwZ3N1Ro80= Subject key identifier: 47:A1:FD:BD:2E:A1:65:B9:D9:72:F0:D1:6E:FC:FB:5D:EF:5D:C3:67 Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Certificate serial: 3268 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft Manifest number: 543D Signing time: Mon 21 Sep 2026 06:39:43 +0000 Manifest this update: Mon 21 Sep 2026 06:39:43 +0000 Manifest next update: Wed 21 Oct 2026 06:39:43 +0000 Files and hashes: 1: L-ajjMfcB9CH96S7RrTORU_T4sA.roa (hash: LEPdSi8CFJPiDMp2PqrsWN7aIYU9685ewUJXNQnUy8U=) 2: ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl (hash: GYswIcK6bBunQ40stHA0asmCY97cuhpmYB5Q9uZHC0Q=) 3: cTRe1bwTJ-rozvmlw1HcSTTsVCw.roa (hash: oewNT4H07OFLMBGt5efmbiEEK9CDu+f3WmFip/axGqI=) 4: dPWkqeTx0ftf56FdrlpF3B07A-w.roa (hash: M+ol7OCIXpy8bUJR/S7IJnOeLwmHoAvYO5GeXWXBKqE=) 5: ha5BJHZVpMxhpr39drZjS5CVEkU.roa (hash: KeE5RUituVJHg8mboThShPgguosyHQr3u3+VrAA8CpY=) 6: tsBvbSzOu0cQ_N3MB_UOqzq47g0.roa (hash: j1vEPcQfgdUTsE5EtzqNwhmcdK06ZayoKVrmw64+SqU=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12904 (0x3268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Validity Not Before: Sep 15 01:35:54 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=47A1FDBD2EA165B9D972F0D16EFCFB5DEF5DC367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:3d:12:7f:f0:73:2a:65:da:f9:b6:9f:0a: 5f:63:dd:61:59:b4:44:2a:2e:d0:3e:2c:fd:86:ee: 35:26:46:f6:3e:49:11:e0:01:87:68:15:5c:ad:ea: ce:69:4f:c8:30:14:c5:78:26:3b:9f:04:3c:37:ec: d0:15:01:9c:21:40:dc:6d:76:68:58:a7:76:c8:74: 0a:b8:65:87:b7:07:ef:27:d3:ed:4f:6e:d5:5d:d4: e0:40:61:80:da:05:ef:10:09:f7:8b:88:8c:f8:e1: de:cc:85:a8:17:3c:bd:ac:ae:67:a7:47:c5:cf:d5: b6:44:44:11:ed:c2:ac:91:8b:32:28:e8:3f:3e:45: 76:4b:4f:40:dd:93:75:c5:a9:5b:44:7f:e3:b3:86: df:56:0e:54:9a:af:cc:06:c3:a0:de:a3:d5:3f:42: 9a:1e:25:6c:9d:5f:68:3d:90:83:6b:55:8d:8d:b7: 94:d3:eb:14:e7:7a:7b:9a:d0:c7:ad:67:69:ba:2d: 62:a3:b4:10:67:6f:4f:1c:de:a7:08:55:cd:d0:82: 16:af:e9:2d:c5:5c:24:58:e8:82:20:8b:6d:6a:bb: 07:6c:1b:79:c2:66:9b:ca:70:fd:4a:98:fa:54:e5: 98:45:75:0b:54:53:9e:5d:9d:7f:bb:1d:f8:08:9b: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A1:FD:BD:2E:A1:65:B9:D9:72:F0:D1:6E:FC:FB:5D:EF:5D:C3:67 X509v3 Authority Key Identifier: keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:24:76:f9:58:7c:d8:7c:50:fb:2e:b6:4b:05:99:ea:7c:3a: a2:90:dd:6a:94:45:f4:22:88:74:6c:cc:df:95:b3:f4:2c:6e: 4c:0c:75:51:3d:b8:99:a2:f4:3f:f2:d2:63:d4:2b:8e:54:fe: 32:6e:2f:be:c2:6c:4d:d3:2a:e8:39:82:76:ff:28:35:e8:3d: df:a7:3a:ad:3b:f0:f6:35:49:dd:e3:c1:39:62:08:54:60:ba: ae:96:d0:02:14:d1:4b:75:cc:c2:03:ad:cc:c7:81:6e:6a:9d: f3:71:69:01:e8:ad:98:ce:dd:29:f5:ae:d1:fd:1c:32:22:8d: e6:66:84:a3:de:13:76:da:2c:1c:e6:97:a7:35:09:39:ec:b9: ba:c2:89:c6:2a:6f:7f:6c:56:39:23:dd:3d:08:47:ef:1f:76: 13:85:16:6c:b7:6c:8c:76:cf:b2:48:fa:7c:e2:16:1e:f3:9d: eb:c2:4c:ba:ff:0b:c1:6a:98:3a:bd:f1:48:64:d7:83:ff:a3: 80:0b:ba:f7:c1:72:09:92:ab:07:6b:de:3a:75:5e:e3:2e:4c: 8f:2a:41:17:fc:aa:4b:65:c6:24:a2:98:31:37:df:eb:f4:db: af:c9:92:83:2a:23:08:e3:1d:aa:05:6f:16:8c:6e:36:00:87: 98:24:2e:e1 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICMmgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjUy MkUyQzNFRjREOTNGMTNFNzU4QTgwN0E0MEE4RTFCRjlBQjEzMDAeFw0yNjA5MTUw MTM1NTRaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ3QTFGREJEMkVBMTY1 QjlEOTcyRjBEMTZFRkNGQjVERUY1REMzNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpHD0Sf/BzKmXa+bafCl9j3WFZtEQqLtA+LP2G7jUmRvY+SRHg AYdoFVyt6s5pT8gwFMV4JjufBDw37NAVAZwhQNxtdmhYp3bIdAq4ZYe3B+8n0+1P btVd1OBAYYDaBe8QCfeLiIz44d7MhagXPL2srmenR8XP1bZERBHtwqyRizIo6D8+ RXZLT0Ddk3XFqVtEf+Ozht9WDlSar8wGw6Deo9U/QpoeJWydX2g9kINrVY2Nt5TT 6xTnenua0MetZ2m6LWKjtBBnb08c3qcIVc3Qghav6S3FXCRY6IIgi21quwdsG3nC ZpvKcP1KmPpU5ZhFdQtUU55dnX+7HfgIm+5NAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUR6H9vS6hZbnZcvDRbvz7Xe9dw2cwHwYDVR0jBBgwFoAUZSLiw+9Nk/E+dYqA ekCo4b+asTAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY5OS9aU0xpdy05TmtfRS1kWXFBZWtDbzRiLWFzVEEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9aU0xpdy05TmtfRS1kWXFBZWtDbzRi LWFzVEEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNjk5L1pTTGl3LTlOa19FLWRZcUFla0NvNGItYXNUQS5tZnQwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5JHb5WHzYfFD7LrZLBZnqfDqikN1q lEX0Ioh0bMzflbP0LG5MDHVRPbiZovQ/8tJj1CuOVP4ybi++wmxN0yroOYJ2/yg1 6D3fpzqtO/D2NUnd48E5YghUYLqultACFNFLdczCA63Mx4Fuap3zcWkB6K2Yzt0p 9a7R/RwyIo3mZoSj3hN22iwc5penNQk57Lm6wonGKm9/bFY5I909CEfvH3YThRZs t2yMds+ySPp84hYe853rwky6/wvBapg6vfFIZNeD/6OAC7r3wXIJkqsHa946dV7j LkyPKkEX/KpLZcYkopgxN9/r9NuvyZKDKiMI4x2qBW8WjG42AIeYJC7h -----END CERTIFICATE-----Generated at Mon Sep 21 13:35:41 2026 by rpki-client