$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.mft File: YNDe7pHLQdIf5EnLx4zf72N3EnE.mft (raw, json) Hash identifier: q1QlO6j1zziRygiNLhijZv7So+tPEYDiRot782WCV7E= Subject key identifier: CA:59:26:74:E9:0E:44:35:E1:83:73:80:14:FB:FA:92:91:F6:D2:AC Authority key identifier: 60:D0:DE:EE:91:CB:41:D2:1F:E4:49:CB:C7:8C:DF:EF:63:77:12:71 Certificate issuer: /CN=60D0DEEE91CB41D21FE449CBC78CDFEF63771271 Certificate serial: 44 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YNDe7pHLQdIf5EnLx4zf72N3EnE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.mft Manifest number: 11A1 Signing time: Tue 10 Nov 2026 02:08:42 +0000 Manifest this update: Tue 10 Nov 2026 02:08:42 +0000 Manifest next update: Thu 10 Dec 2026 02:08:42 +0000 Files and hashes: 1: 9Wc2fLG_i97mTbXt-_exptjJ4MM.roa (hash: ZWPPSGp6MsdX78KNcZ2MJqk9aO1/dK3erUMUHmPrOYA=) 2: A-x4wiJtzRwfwBg0WQlJeDOd7Tc.roa (hash: swS5NBxUilBE4cq1qOm58x0//6XKi1Zs21or3npQ7LQ=) 3: Fdaok-r4YvMwD7D96V0orE5jprU.roa (hash: OPnenPuEqlGJc+46RJFK6tXzM1RRCsqkkRCU4JcxN3U=) 4: PpLiyQWXKRxYA6aKfyQemDSnFAc.roa (hash: StPMVaJA6AZmSaP/x3mBP8QL6eNZ1wp0uhvZeBdZqSc=) 5: YNDe7pHLQdIf5EnLx4zf72N3EnE.crl (hash: ga9Cmqy/7jPhOGMI5rqD5scK1pN9grT7IJ+dRMqG8QE=) 6: wmG2TuM7fOyf-Of13P9pK5Z3boo.roa (hash: WaENVWamXp5Q+Q33aDYjZlo+7nwzyjA8I+goyIBXFEo=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YNDe7pHLQdIf5EnLx4zf72N3EnE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Nov 2026 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D0DEEE91CB41D21FE449CBC78CDFEF63771271 Validity Not Before: Oct 15 01:32:41 2026 GMT Not After : Oct 15 01:30:02 2027 GMT Subject: CN=CA592674E90E4435E183738014FBFA9291F6D2AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:48:a8:46:3f:84:5b:44:7d:62:76:99:64:72: fc:e7:a1:fa:6f:b7:29:7a:98:ed:b4:57:ce:11:66: c7:92:c0:41:80:a3:81:fc:c7:82:12:86:84:55:58: 8a:a5:e0:c1:2d:c8:79:b0:7a:3a:d9:73:dc:71:4c: 37:5d:cd:a2:da:08:ea:a2:e5:1f:b1:3e:ab:2f:50: 2f:ec:19:c8:bf:25:e4:4d:00:f7:92:70:f4:af:86: da:9d:6d:8a:5f:5a:e9:5f:b0:34:2a:2d:ba:83:06: 49:ed:5e:66:74:ea:99:59:65:ae:4e:be:1a:0c:99: c3:f0:c2:97:06:c5:e5:5b:56:f5:82:3c:e6:37:0e: cb:9b:ee:17:20:ee:b3:15:41:da:c8:2a:0f:05:2d: 34:06:06:3d:7d:da:2a:68:b8:68:e5:e4:92:87:a8: e7:3c:4b:f3:e9:5f:23:da:b1:b7:52:a1:ac:26:9e: d1:f9:53:e5:31:9b:0d:4e:80:22:2b:bd:9f:ab:12: d7:1b:04:b9:d7:0f:f5:b4:62:f3:e8:67:51:14:09: 52:77:b6:dd:08:c0:f2:e9:85:b0:53:2b:37:3c:ed: 42:0e:36:3b:cc:00:4d:af:75:a8:d8:22:bf:b2:51: f7:df:9a:94:5e:c9:cc:17:83:bc:b6:a6:8c:b9:58: bf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:59:26:74:E9:0E:44:35:E1:83:73:80:14:FB:FA:92:91:F6:D2:AC X509v3 Authority Key Identifier: keyid:60:D0:DE:EE:91:CB:41:D2:1F:E4:49:CB:C7:8C:DF:EF:63:77:12:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YNDe7pHLQdIf5EnLx4zf72N3EnE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c2:6d:da:d4:2b:39:7e:73:0d:b3:b7:f8:2f:cc:58:cb:f6: 3a:24:60:81:72:7e:1d:9b:9e:2c:67:67:05:eb:74:55:8a:60: 29:8d:81:2e:f1:63:72:62:a6:94:e8:4e:99:6b:7f:c2:80:3f: a8:c8:f2:86:6e:a2:75:17:07:bf:c6:fe:55:19:ae:c4:b9:cf: 69:97:3e:8b:94:ae:93:0a:53:75:3e:43:48:f7:6a:36:90:ff: 78:dc:52:7d:dd:b5:43:7c:66:e6:4d:06:60:4f:80:d8:79:be: 7c:2c:ad:c4:66:ca:9f:42:7c:62:61:20:f8:f2:41:79:71:fa: 49:ad:d3:ec:6f:fa:4f:00:d3:43:2d:e3:d7:d6:32:75:94:ad: f4:42:0f:41:c5:0a:1d:c3:99:b0:fa:9a:7c:7d:f7:31:a7:2b: f6:b8:44:64:fe:e7:ab:a5:5d:3c:5b:e3:91:0c:50:e6:f2:e3: cd:16:13:42:aa:83:7e:b3:80:8d:93:cf:ad:78:e5:6a:36:38: d5:cb:67:97:3e:8e:5c:56:55:2a:41:18:68:e8:20:a1:4a:5c: c6:26:9b:93:ea:03:83:d8:7c:0a:cf:2c:78:ac:67:22:8c:89: bd:36:ff:6d:85:e9:35:17:51:54:d5:e3:2b:b7:d4:57:80:4d: 56:67:db:4e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MEQw REVFRTkxQ0I0MUQyMUZFNDQ5Q0JDNzhDREZFRjYzNzcxMjcxMB4XDTI2MTAxNTAx MzI0MVoXDTI3MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0E1OTI2NzRFOTBFNDQz NUUxODM3MzgwMTRGQkZBOTI5MUY2RDJBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANBIqEY/hFtEfWJ2mWRy/Oeh+m+3KXqY7bRXzhFmx5LAQYCjgfzH ghKGhFVYiqXgwS3IebB6Otlz3HFMN13NotoI6qLlH7E+qy9QL+wZyL8l5E0A95Jw 9K+G2p1til9a6V+wNCotuoMGSe1eZnTqmVllrk6+GgyZw/DClwbF5VtW9YI85jcO y5vuFyDusxVB2sgqDwUtNAYGPX3aKmi4aOXkkoeo5zxL8+lfI9qxt1KhrCae0flT 5TGbDU6AIiu9n6sS1xsEudcP9bRi8+hnURQJUne23QjA8umFsFMrNzztQg42O8wA Ta91qNgiv7JR99+alF7JzBeDvLamjLlYv6UCAwEAAaOCAfIwggHuMB0GA1UdDgQW BBTKWSZ06Q5ENeGDc4AU+/qSkfbSrDAfBgNVHSMEGDAWgBRg0N7ukctB0h/kScvH jN/vY3cScTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTU3L1lORGU3cEhMUWRJZjVFbkx4NHpmNzJOM0VuRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1lORGU3cEhMUWRJZjVFbkx4NHpmNzJO M0VuRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85NTcvWU5EZTdwSExRZElmNUVuTHg0emY3Mk4zRW5FLm1mdDAVBggr BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwDQYJKoZIhvcNAQELBQADggEBADrCbdrUKzl+cw2zt/gvzFjL9jokYIFy fh2bnixnZwXrdFWKYCmNgS7xY3JippToTplrf8KAP6jI8oZuonUXB7/G/lUZrsS5 z2mXPouUrpMKU3U+Q0j3ajaQ/3jcUn3dtUN8ZuZNBmBPgNh5vnwsrcRmyp9CfGJh IPjyQXlx+kmt0+xv+k8A00Mt49fWMnWUrfRCD0HFCh3DmbD6mnx99zGnK/a4RGT+ 56ulXTxb45EMUOby480WE0Kqg36zgI2Tz6145Wo2ONXLZ5c+jlxWVSpBGGjoIKFK XMYmm5PqA4PYfArPLHisZyKMib02/22F6TUXUVTV4yu31FeATVZn204= -----END CERTIFICATE-----Generated at Tue Nov 10 04:50:57 2026 by rpki-client