$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft File: ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft (raw, json) Hash identifier: Wyt+72lgaGWRYGewydb9y+I6HYaXCdELqUCrPZq/8R8= Subject key identifier: 47:A1:FD:BD:2E:A1:65:B9:D9:72:F0:D1:6E:FC:FB:5D:EF:5D:C3:67 Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Certificate serial: 3263 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft Manifest number: 509F Signing time: Sun 19 Apr 2026 06:37:13 +0000 Manifest this update: Sun 19 Apr 2026 06:37:13 +0000 Manifest next update: Mon 04 May 2026 06:37:13 +0000 Files and hashes: 1: L-ajjMfcB9CH96S7RrTORU_T4sA.roa (hash: LEPdSi8CFJPiDMp2PqrsWN7aIYU9685ewUJXNQnUy8U=) 2: ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl (hash: CCjzMceMyvI7Ly8X4DRFikrM0rIPFj1IGM5sg2XL4j4=) 3: cTRe1bwTJ-rozvmlw1HcSTTsVCw.roa (hash: oewNT4H07OFLMBGt5efmbiEEK9CDu+f3WmFip/axGqI=) 4: dPWkqeTx0ftf56FdrlpF3B07A-w.roa (hash: M+ol7OCIXpy8bUJR/S7IJnOeLwmHoAvYO5GeXWXBKqE=) 5: ha5BJHZVpMxhpr39drZjS5CVEkU.roa (hash: KeE5RUituVJHg8mboThShPgguosyHQr3u3+VrAA8CpY=) 6: tsBvbSzOu0cQ_N3MB_UOqzq47g0.roa (hash: j1vEPcQfgdUTsE5EtzqNwhmcdK06ZayoKVrmw64+SqU=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12899 (0x3263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Validity Not Before: Apr 15 01:40:54 2026 GMT Not After : Apr 15 01:30:02 2027 GMT Subject: CN=47A1FDBD2EA165B9D972F0D16EFCFB5DEF5DC367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:3d:12:7f:f0:73:2a:65:da:f9:b6:9f:0a: 5f:63:dd:61:59:b4:44:2a:2e:d0:3e:2c:fd:86:ee: 35:26:46:f6:3e:49:11:e0:01:87:68:15:5c:ad:ea: ce:69:4f:c8:30:14:c5:78:26:3b:9f:04:3c:37:ec: d0:15:01:9c:21:40:dc:6d:76:68:58:a7:76:c8:74: 0a:b8:65:87:b7:07:ef:27:d3:ed:4f:6e:d5:5d:d4: e0:40:61:80:da:05:ef:10:09:f7:8b:88:8c:f8:e1: de:cc:85:a8:17:3c:bd:ac:ae:67:a7:47:c5:cf:d5: b6:44:44:11:ed:c2:ac:91:8b:32:28:e8:3f:3e:45: 76:4b:4f:40:dd:93:75:c5:a9:5b:44:7f:e3:b3:86: df:56:0e:54:9a:af:cc:06:c3:a0:de:a3:d5:3f:42: 9a:1e:25:6c:9d:5f:68:3d:90:83:6b:55:8d:8d:b7: 94:d3:eb:14:e7:7a:7b:9a:d0:c7:ad:67:69:ba:2d: 62:a3:b4:10:67:6f:4f:1c:de:a7:08:55:cd:d0:82: 16:af:e9:2d:c5:5c:24:58:e8:82:20:8b:6d:6a:bb: 07:6c:1b:79:c2:66:9b:ca:70:fd:4a:98:fa:54:e5: 98:45:75:0b:54:53:9e:5d:9d:7f:bb:1d:f8:08:9b: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A1:FD:BD:2E:A1:65:B9:D9:72:F0:D1:6E:FC:FB:5D:EF:5D:C3:67 X509v3 Authority Key Identifier: keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e0:2f:07:53:b2:c7:8d:38:b8:9b:a5:0c:7a:92:50:f5:00: c9:dc:cd:99:95:6c:60:43:55:23:48:e5:4f:3b:97:a8:46:2b: 48:92:80:58:fa:6c:8d:fc:5c:fa:89:9f:38:be:08:e3:74:c2: b5:00:d5:b3:be:13:ee:fa:f5:72:b9:b6:e4:46:d9:cc:05:69: 28:c0:70:9f:ee:11:d4:08:9b:46:bd:73:a5:c0:04:50:e3:8d: e3:73:58:2c:46:ca:e0:78:bf:a4:23:29:d8:0c:27:a9:d0:46: 43:71:1d:28:35:33:e9:0b:b2:90:3a:69:7b:24:e8:09:7b:38: c5:20:1b:75:8c:5c:3e:9a:05:52:2f:8b:b3:92:1e:ac:f7:0c: d9:2d:64:11:65:54:51:55:01:24:f1:03:60:bc:a2:80:22:9e: 69:b1:96:e6:af:e0:66:08:71:3c:a1:9b:52:ef:73:6c:3e:a1: bf:20:72:49:fa:8d:3b:07:34:5e:07:6d:fc:85:32:4f:5d:ee: 63:63:a8:f9:4f:5c:2f:3f:ef:86:31:16:8a:6d:b2:6d:ba:cd: 49:8e:7b:c2:a9:67:78:de:c1:f3:b9:ae:10:df:e3:22:80:5e: 9e:07:a1:63:75:43:d5:70:1d:c3:f8:d7:17:e2:e6:e4:cd:09: 39:aa:00:13 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICMmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjUy MkUyQzNFRjREOTNGMTNFNzU4QTgwN0E0MEE4RTFCRjlBQjEzMDAeFw0yNjA0MTUw MTQwNTRaFw0yNzA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ3QTFGREJEMkVBMTY1 QjlEOTcyRjBEMTZFRkNGQjVERUY1REMzNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpHD0Sf/BzKmXa+bafCl9j3WFZtEQqLtA+LP2G7jUmRvY+SRHg AYdoFVyt6s5pT8gwFMV4JjufBDw37NAVAZwhQNxtdmhYp3bIdAq4ZYe3B+8n0+1P btVd1OBAYYDaBe8QCfeLiIz44d7MhagXPL2srmenR8XP1bZERBHtwqyRizIo6D8+ RXZLT0Ddk3XFqVtEf+Ozht9WDlSar8wGw6Deo9U/QpoeJWydX2g9kINrVY2Nt5TT 6xTnenua0MetZ2m6LWKjtBBnb08c3qcIVc3Qghav6S3FXCRY6IIgi21quwdsG3nC ZpvKcP1KmPpU5ZhFdQtUU55dnX+7HfgIm+5NAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUR6H9vS6hZbnZcvDRbvz7Xe9dw2cwHwYDVR0jBBgwFoAUZSLiw+9Nk/E+dYqA ekCo4b+asTAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY5OS9aU0xpdy05TmtfRS1kWXFBZWtDbzRiLWFzVEEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9aU0xpdy05TmtfRS1kWXFBZWtDbzRi LWFzVEEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNjk5L1pTTGl3LTlOa19FLWRZcUFla0NvNGItYXNUQS5tZnQwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCD4C8HU7LHjTi4m6UMepJQ9QDJ3M2Z lWxgQ1UjSOVPO5eoRitIkoBY+myN/Fz6iZ84vgjjdMK1ANWzvhPu+vVyubbkRtnM BWkowHCf7hHUCJtGvXOlwARQ443jc1gsRsrgeL+kIynYDCep0EZDcR0oNTPpC7KQ Oml7JOgJezjFIBt1jFw+mgVSL4uzkh6s9wzZLWQRZVRRVQEk8QNgvKKAIp5psZbm r+BmCHE8oZtS73NsPqG/IHJJ+o07BzReB238hTJPXe5jY6j5T1wvP++GMRaKbbJt us1JjnvCqWd43sHzua4Q3+MigF6eB6FjdUPVcB3D+NcX4ubkzQk5qgAT -----END CERTIFICATE-----Generated at Sun Apr 19 10:07:16 2026 by rpki-client