$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft File: zgXnGt3sD442G7VasQP1PThWxgo.mft (raw, json) Hash identifier: jyKHdB5Cy33+0XHRF3LXrYcou/jIIBsdr3i52RExYkQ= Subject key identifier: BB:89:C0:2D:63:E5:1E:AD:61:74:D3:61:08:C1:A9:29:38:DB:16:31 Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A Certificate issuer: /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Certificate serial: 3B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft Manifest number: 0F60 Signing time: Fri 21 Aug 2026 19:12:28 +0000 Manifest this update: Fri 21 Aug 2026 19:12:28 +0000 Manifest next update: Sun 20 Sep 2026 19:12:28 +0000 Files and hashes: 1: SDQ2lTLrg_BcFsJLEq2-B3qwaIo.roa (hash: hQWg6vcypJgwjwOlsOU1rm8RE0GW0g3stz8HRAvHJGE=) 2: TOqj5j_H71SZY6QKwFblWgdTqNU.roa (hash: CmPTLpNie63sevZ8P7foYxFzY+awt9hrQdG3rt+pMYw=) 3: aPGF_8vWusF0aFzhMJNQypY9cxY.roa (hash: OPMnI39nsQPnvPaknKR3M6ebPKH9qEeapTLChAi5x4E=) 4: j7enSkqGEa7ywbkQj6QsnYVFaQQ.roa (hash: SK0YpjO27bx+HT0Y7bElsk6N1XlT2ntyZxmWKFvCJeA=) 5: lI79newaLhT5zLqC3N1BIWX2Y7Q.roa (hash: N2ZIspmX38uCb6VP4D19N6gr83Eio8hhMStOPt3dYbE=) 6: zgXnGt3sD442G7VasQP1PThWxgo.crl (hash: nSbgqXohatQxMaUTnHweuL6i9Q+DRh2Zl5QUmIbbRUU=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Validity Not Before: Aug 15 01:33:09 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=BB89C02D63E51EAD6174D36108C1A92938DB1631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:8b:f6:1d:a0:50:6d:4a:b7:b8:f4:05:42: ab:f1:61:76:e7:81:24:bd:b0:b1:f8:33:b7:70:f5: b2:34:10:0f:c1:39:c1:42:01:16:cc:89:a7:ae:ae: b2:a0:6c:0e:71:6a:ec:20:2c:8d:e8:a0:f6:96:5d: 17:64:c5:e6:b0:03:03:cf:cb:4c:ca:3d:a8:c8:23: ba:83:5c:37:8a:39:6a:45:54:66:dc:c8:49:96:72: f0:7f:aa:18:26:18:16:eb:a7:c9:97:ab:e2:63:24: be:85:82:df:c6:d4:2e:83:53:2f:d7:86:d5:23:31: 76:8c:d7:04:8e:81:12:65:4d:3e:15:e5:4d:03:3f: 9c:0b:0c:c8:4a:9d:45:66:42:10:94:5a:f3:77:5a: 3c:a9:8e:f3:fa:59:a8:a4:81:6d:b5:55:23:87:28: dd:29:6b:1c:1e:25:ea:bb:61:eb:d7:0f:95:e4:81: e4:03:2c:f8:d1:70:2f:54:8b:e9:c3:6b:d8:30:b2: 8b:4d:02:e9:ca:e0:53:7f:31:43:12:f1:2c:9e:81: ba:80:3a:13:59:1f:e9:98:9a:b0:56:48:1a:af:70: 29:5f:3e:ae:91:73:98:40:c0:5a:8a:d7:3f:db:52: 00:44:96:fd:bd:d3:c1:6b:df:1c:11:e2:2f:57:68: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:89:C0:2D:63:E5:1E:AD:61:74:D3:61:08:C1:A9:29:38:DB:16:31 X509v3 Authority Key Identifier: keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:db:11:85:f8:79:90:a8:73:67:03:b1:cd:c7:66:fb:b0:dd: 6a:64:96:e5:ea:5c:e2:cb:b6:d1:c5:9f:3d:9f:d2:bf:b7:3c: 87:6f:ad:08:59:ed:1f:53:c4:dd:80:7f:37:d4:ce:6a:c1:33: 54:31:77:32:5e:f5:81:b6:b6:26:6b:2d:7d:92:92:1d:40:e8: 8a:ad:ed:1a:85:2b:6e:04:b9:8c:7a:dd:a9:4a:de:40:04:bd: 52:4d:f7:a1:7e:8d:2f:f5:e4:40:6b:73:84:a8:bb:8f:04:6d: 7b:64:26:aa:05:5b:5a:1f:f2:92:42:6c:7b:0a:8a:e8:c0:75: 99:83:5a:fc:41:5e:13:63:e4:0d:4d:5e:dd:0e:5a:72:6b:bc: b7:44:f6:97:5f:50:58:3e:f1:34:43:0e:97:d1:9f:ab:60:81: a7:78:f1:58:d5:a5:6e:c1:ba:a1:1d:7b:45:e4:e5:63:8d:04: f4:10:33:47:65:df:66:ea:33:ba:d0:01:d6:8e:b4:6c:d6:e3: 2f:57:c6:aa:75:c7:e4:75:d0:09:9b:3e:94:36:f9:ff:f9:f7: 71:14:8e:9f:9b:f7:79:15:b1:60:48:25:08:32:5a:c5:a9:16: 49:ed:f9:fc:3a:c1:3a:00:49:7b:22:73:51:13:2e:5c:27:8a: 8b:4d:9f:7e -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRTA1 RTcxQURERUMwRjhFMzYxQkI1NUFCMTAzRjUzRDM4NTZDNjBBMB4XDTI2MDgxNTAx MzMwOVoXDTI3MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQkI4OUMwMkQ2M0U1MUVB RDYxNzREMzYxMDhDMUE5MjkzOERCMTYzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKxYi/YdoFBtSre49AVCq/FhdueBJL2wsfgzt3D1sjQQD8E5wUIB FsyJp66usqBsDnFq7CAsjeig9pZdF2TF5rADA8/LTMo9qMgjuoNcN4o5akVUZtzI SZZy8H+qGCYYFuunyZer4mMkvoWC38bULoNTL9eG1SMxdozXBI6BEmVNPhXlTQM/ nAsMyEqdRWZCEJRa83daPKmO8/pZqKSBbbVVI4co3SlrHB4l6rth69cPleSB5AMs +NFwL1SL6cNr2DCyi00C6crgU38xQxLxLJ6BuoA6E1kf6ZiasFZIGq9wKV8+rpFz mEDAWorXP9tSAESW/b3TwWvfHBHiL1doOG0CAwEAAaOCAfAwggHsMB0GA1UdDgQW BBS7icAtY+UerWF002EIwakpONsWMTAfBgNVHSMEGDAWgBTOBeca3ewPjjYbtVqx A/U9OFbGCjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzMvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhXeGdvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhX eGdvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMzL3pnWG5HdDNzRDQ0Mkc3VmFzUVAxUFRoV3hnby5tZnQwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAG2xGF+HmQqHNnA7HNx2b7sN1qZJbl6lzi y7bRxZ89n9K/tzyHb60IWe0fU8TdgH831M5qwTNUMXcyXvWBtrYmay19kpIdQOiK re0ahStuBLmMet2pSt5ABL1STfehfo0v9eRAa3OEqLuPBG17ZCaqBVtaH/KSQmx7 CorowHWZg1r8QV4TY+QNTV7dDlpya7y3RPaXX1BYPvE0Qw6X0Z+rYIGnePFY1aVu wbqhHXtF5OVjjQT0EDNHZd9m6jO60AHWjrRs1uMvV8aqdcfkddAJmz6UNvn/+fdx FI6fm/d5FbFgSCUIMlrFqRZJ7fn8OsE6AEl7InNREy5cJ4qLTZ9+ -----END CERTIFICATE-----Generated at Sat Aug 22 00:52:17 2026 by rpki-client