$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft File: 0A4IOTaIsEc3h07NY92L545e8tA.mft (raw, json) Hash identifier: C4xRjgim5gWgLZw1WfPwkMOa9NQCmaoGYJT5R/RYgok= Subject key identifier: 58:DF:50:79:4E:5E:F2:88:51:8A:8A:0B:BE:50:55:80:C5:C2:6A:64 Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0 Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0 Certificate serial: 71 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft Manifest number: 10D1 Signing time: Mon 21 Sep 2026 10:41:19 +0000 Manifest this update: Mon 21 Sep 2026 10:41:19 +0000 Manifest next update: Wed 21 Oct 2026 10:41:19 +0000 Files and hashes: 1: -7AjrQNvjkni8YasrAfT6W_LJJ0.roa (hash: c+eVuu2LzSHsulOMVfFUB+826AYgRUbrvHbeL4jMNoQ=) 2: 0A4IOTaIsEc3h07NY92L545e8tA.crl (hash: TzzkPXtUPt4UPqVGbSq4gWZC1LomFEyF4myH84fuQWw=) 3: 8ydxZq81c6AC6AVDjqIar_x4Bgk.roa (hash: CEEZG/focxRcaYzFgMywV2Uq261ZXhKMP9qexvbloQw=) 4: SEI1vzMZw7KA_m54fnHmQuowqjQ.roa (hash: Tit545l6LXMYSs12NYVnYDkjKggd2fzUoF+ZQcuTHDE=) 5: _2drMcCoNj9SNl0mqahuHoGd9-Y.roa (hash: 37hRGHq3C7Uj8Mwp3HO7FtMf64hT/71NIeEBaeZtsbM=) 6: u1vbxKXb4699o3kyD3tS3GpbdVs.roa (hash: XYBzxJxR4X+m9ED00f2+K4X6neWgENp6h/k5bJJSSxk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0 Validity Not Before: Sep 15 01:36:59 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=58DF50794E5EF288518A8A0BBE505580C5C26A64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:36:28:8e:db:78:af:3b:4b:19:65:cd:b4: 7a:bd:8f:06:4c:d7:8f:dc:6a:32:67:79:f2:2e:3e: a2:da:d0:84:bf:fe:c0:c9:58:c8:1a:8b:fe:0e:91: 85:8e:69:60:39:7e:27:6c:f6:7e:ad:a2:83:fd:81: ab:d9:22:54:b6:44:0d:ff:be:12:53:a3:f2:e2:f3: b5:bf:a8:30:c8:eb:e1:ea:19:74:aa:f3:6d:52:9e: ed:b4:07:94:d5:91:19:86:b6:84:e9:2a:5e:41:23: 63:f5:82:40:70:1a:0d:f5:77:92:e9:4e:6a:0e:4c: cf:8a:55:80:88:c8:83:7d:f0:a2:6f:80:25:de:f1: 7d:2e:b9:5e:4f:19:17:48:b3:d5:73:06:f0:95:82: 5d:3c:f5:b9:a2:f8:6d:c6:3f:4a:e5:ee:73:d9:6d: a0:53:3f:c7:63:59:f8:df:53:54:9a:a8:f2:13:21: 03:da:2c:d2:b4:0a:44:38:b4:64:f2:21:74:ff:db: b2:07:01:87:07:35:8b:3a:37:51:45:df:d1:d2:88: 21:35:81:c5:25:51:d0:b5:3e:5b:8b:ec:03:42:a6: b9:92:e0:84:f7:b1:b9:fc:ba:70:63:69:89:95:9f: 73:b3:60:01:87:aa:a7:e6:72:6e:fa:18:ca:83:ff: 73:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DF:50:79:4E:5E:F2:88:51:8A:8A:0B:BE:50:55:80:C5:C2:6A:64 X509v3 Authority Key Identifier: keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:83:0e:0b:d0:06:81:ff:08:d4:7c:4e:ac:4a:ec:de:ef:49: 10:2d:c1:f0:48:f8:f4:2d:5b:81:ae:d1:4e:3f:c9:5c:d6:e5: 49:a6:7f:f4:8e:85:ca:cd:b1:09:fd:0f:b1:57:46:6b:6b:a4: 21:a6:d1:e2:21:2c:f6:72:84:44:5f:0c:10:ef:e1:c8:90:3c: 76:ff:e6:9e:f2:51:bc:69:f8:20:d1:7e:b3:8b:7d:6a:d2:58: 2b:b6:c8:e6:76:ee:4b:21:a3:e9:c7:cf:4e:f6:97:fb:cf:3a: 46:20:da:08:e3:40:f9:9c:28:55:af:aa:96:75:e9:ac:54:a0: 18:84:67:8c:4b:a1:6b:fd:b0:84:0f:f8:30:a6:70:60:b0:17: 0a:6d:83:92:30:34:a3:41:f7:a1:65:44:66:47:16:16:b7:2d: d7:80:e0:bc:d6:6e:68:70:c1:28:03:3d:c9:24:3c:dc:ce:99: cb:51:1e:40:02:72:5a:35:a7:03:9d:e2:61:ee:3b:55:84:6d: f3:37:92:83:f7:06:56:77:a7:1f:fa:b2:3c:f7:bc:b9:3e:ad: 63:1f:17:f5:e5:0d:e5:76:0d:2b:5f:50:d8:67:19:76:eb:b7: aa:5e:31:eb:f3:b9:e0:85:5e:e7:67:41:85:bd:78:40:29:44: d8:8b:5a:db -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIBcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDBF MDgzOTM2ODhCMDQ3Mzc4NzRFQ0Q2M0REOEJFNzhFNUVGMkQwMB4XDTI2MDkxNTAx MzY1OVoXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoNThERjUwNzk0RTVFRjI4 ODUxOEE4QTBCQkU1MDU1ODBDNUMyNkE2NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALicNiiO23ivO0sZZc20er2PBkzXj9xqMmd58i4+otrQhL/+wMlY yBqL/g6RhY5pYDl+J2z2fq2ig/2Bq9kiVLZEDf++ElOj8uLztb+oMMjr4eoZdKrz bVKe7bQHlNWRGYa2hOkqXkEjY/WCQHAaDfV3kulOag5Mz4pVgIjIg33wom+AJd7x fS65Xk8ZF0iz1XMG8JWCXTz1uaL4bcY/SuXuc9ltoFM/x2NZ+N9TVJqo8hMhA9os 0rQKRDi0ZPIhdP/bsgcBhwc1izo3UUXf0dKIITWBxSVR0LU+W4vsA0KmuZLghPex ufy6cGNpiZWfc7NgAYeqp+ZybvoYyoP/c6sCAwEAAaOCAfIwggHuMB0GA1UdDgQW BBRY31B5Tl7yiFGKigu+UFWAxcJqZDAfBgNVHSMEGDAWgBTQDgg5NoiwRzeHTs1j 3Yvnjl7y0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgxLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1ZTh0QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1 ZTh0QS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84ODEvMEE0SU9UYUlzRWMzaDA3Tlk5Mkw1NDVlOHRBLm1mdDAVBggr BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwDQYJKoZIhvcNAQELBQADggEBADODDgvQBoH/CNR8TqxK7N7vSRAtwfBI +PQtW4Gu0U4/yVzW5Ummf/SOhcrNsQn9D7FXRmtrpCGm0eIhLPZyhERfDBDv4ciQ PHb/5p7yUbxp+CDRfrOLfWrSWCu2yOZ27ksho+nHz072l/vPOkYg2gjjQPmcKFWv qpZ16axUoBiEZ4xLoWv9sIQP+DCmcGCwFwptg5IwNKNB96FlRGZHFha3LdeA4LzW bmhwwSgDPckkPNzOmctRHkACclo1pwOd4mHuO1WEbfM3koP3BlZ3px/6sjz3vLk+ rWMfF/XlDeV2DStfUNhnGXbrt6peMevzueCFXudnQYW9eEApRNiLWts= -----END CERTIFICATE-----Generated at Mon Sep 21 15:31:38 2026 by rpki-client