$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft File: heXxjZYxwlh7CU54zdThuGUPTLk.mft (raw, json) Hash identifier: d0eG1xgJkMYlvYFyK1Lf0Gk/ED8sMmbwIOJe4f1paz8= Subject key identifier: 35:FC:D8:FE:7F:83:87:94:A6:64:EF:FC:4C:2F:EA:9A:70:65:39:30 Authority key identifier: 85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9 Certificate issuer: /CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9 Certificate serial: 22 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft Manifest number: 0B61 Signing time: Fri 21 Aug 2026 19:16:39 +0000 Manifest this update: Fri 21 Aug 2026 19:16:39 +0000 Manifest next update: Sun 20 Sep 2026 19:16:39 +0000 Files and hashes: 1: LTQfvWYMHKhcYmZtZXRLZL1ooIE.roa (hash: ryJ7wdEWcilg7iH79bFr7p2fTaI/wyZZbuAW1Ei4sfM=) 2: _NE7CVHz1A70XO_5sC9UYfSWwHo.roa (hash: +mhLHL3IDfaya/YjPu+UMehO7Mc7rBwZlb3KdcjJpq0=) 3: asClh6qm19WbPCQ6epAGmgRVXOc.roa (hash: aVXEeHnEAemcV58g/udkCOIIkw0HKpt+gKPWfXZ2q0g=) 4: heXxjZYxwlh7CU54zdThuGUPTLk.crl (hash: lykclof/796/tA3F7NDXrL60TrZ+W9F5hb29GYP0ZhM=) 5: lROsTyhMHA1AViTf1XxmhwBHbQQ.roa (hash: jWUbBNslbEZtVQutwm81It7CO81eXTTADhDJSTeUiyU=) 6: nRiz7eJr9VqVU0oO9Jv4uiSKdbU.roa (hash: FO0D4yJ6H9a9XkL+HHNSaDQzbMvVTMKmDXJ4ds+BnmY=) 7: pP-9bisDDhB-CwiE0UZFPyW5Nlw.roa (hash: 8xQyVNrjXWB7i6WHfwYP6Ie7AUdFD+NwJuXcMuVqkfw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9 Validity Not Before: Aug 15 01:34:01 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=35FCD8FE7F838794A664EFFC4C2FEA9A70653930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:29:00:53:b7:7c:96:33:98:60:fd:8d:86: 55:c7:c4:2e:07:bb:be:b4:3a:dd:85:89:bf:8e:b3: 49:51:9a:4b:98:1f:84:22:42:26:1c:1a:8e:1d:ba: 34:8b:9e:04:ad:8f:b3:cc:48:eb:48:1d:0a:c1:e6: 9a:be:8c:5c:66:b1:e9:99:78:50:2e:f4:c2:85:fa: a0:ea:25:87:0c:fc:f3:7f:6c:5b:93:95:0d:f7:88: a5:44:8f:35:c3:17:2d:b7:26:9c:d3:fd:0f:9a:20: 05:67:22:41:67:f4:2b:27:6b:9a:e8:fa:1d:29:9d: 7a:25:f5:cf:3c:25:ad:b8:c1:d0:bf:f9:ea:9b:4c: 59:1c:70:10:f4:83:64:18:62:27:4a:91:51:a6:8a: 4e:c6:f0:af:34:23:de:05:a4:d0:c0:9d:65:22:b1: bb:7a:06:70:ba:f4:ec:d2:0a:e8:69:ae:96:7e:1e: 5e:e9:b5:28:7e:3f:57:88:fc:96:e3:aa:9e:e2:37: ba:6b:52:53:ef:b2:78:4b:b1:bf:2f:57:71:14:80: 3b:cb:36:02:e1:b3:59:fc:cb:85:ff:03:49:d1:d9: e1:65:87:c7:a4:78:4f:52:ed:93:20:ed:6a:a9:07: df:bf:83:0e:b9:84:21:76:e4:c7:bb:4c:f2:07:53: f7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FC:D8:FE:7F:83:87:94:A6:64:EF:FC:4C:2F:EA:9A:70:65:39:30 X509v3 Authority Key Identifier: keyid:85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b0:96:94:20:d7:14:b8:18:b4:36:4d:b9:00:e4:e9:32:4d: 77:b3:96:60:dc:0b:50:c1:e7:36:17:2a:a0:47:2b:2b:48:5b: 65:28:da:50:00:6b:71:82:35:18:ac:f2:af:46:87:bf:ab:bb: 04:9a:1d:b8:35:57:2f:89:aa:b8:76:e5:5b:b5:3f:f1:29:47: 48:b6:98:a7:35:9c:ee:a9:80:96:88:33:29:00:f4:9c:45:bf: 25:c3:07:58:2f:86:0e:32:b4:0d:1d:c4:cc:cb:83:36:18:8c: 63:c7:82:56:66:f4:01:f1:89:d7:b0:c0:4c:35:68:3c:80:60: 80:b0:bb:7d:df:4f:31:77:7b:cf:0e:57:04:2b:b3:5e:e1:bc: 97:d3:69:8e:27:5d:29:32:aa:ef:f8:f0:8a:4d:dc:95:73:aa: 47:7c:15:81:60:ae:3d:6b:b7:37:00:4c:37:65:2e:c4:ea:dc: 72:85:cf:40:7f:d5:92:9c:1a:3e:6d:a4:c1:c8:d9:b6:79:f1: 9a:ec:af:62:03:c5:03:6d:9e:c7:13:15:a6:ea:63:37:57:2c: ea:8d:cf:8a:ef:69:bc:18:03:21:e2:e7:46:bf:0a:45:f6:e1: 49:ff:40:2d:c8:da:c2:25:a0:60:cb:56:98:ae:2d:4e:87:72: 66:d1:40:f0 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUU1 RjE4RDk2MzFDMjU4N0IwOTRFNzhDREQ0RTFCODY1MEY0Q0I5MB4XDTI2MDgxNTAx MzQwMVoXDTI3MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMzVGQ0Q4RkU3RjgzODc5 NEE2NjRFRkZDNEMyRkVBOUE3MDY1MzkzMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALoGKQBTt3yWM5hg/Y2GVcfELge7vrQ63YWJv46zSVGaS5gfhCJC Jhwajh26NIueBK2Ps8xI60gdCsHmmr6MXGax6Zl4UC70woX6oOolhwz8839sW5OV DfeIpUSPNcMXLbcmnNP9D5ogBWciQWf0Kydrmuj6HSmdeiX1zzwlrbjB0L/56ptM WRxwEPSDZBhiJ0qRUaaKTsbwrzQj3gWk0MCdZSKxu3oGcLr07NIK6Gmuln4eXum1 KH4/V4j8luOqnuI3umtSU++yeEuxvy9XcRSAO8s2AuGzWfzLhf8DSdHZ4WWHx6R4 T1LtkyDtaqkH37+DDrmEIXbkx7tM8gdT9x8CAwEAAaOCAfIwggHuMB0GA1UdDgQW BBQ1/Nj+f4OHlKZk7/xML+qacGU5MDAfBgNVHSMEGDAWgBSF5fGNljHCWHsJTnjN 1OG4ZQ9MuTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjc3L2hlWHhqWll4d2xoN0NVNTR6ZFRodUdVUFRMay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hlWHhqWll4d2xoN0NVNTR6ZFRodUdV UFRMay5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC82NzcvaGVYeGpaWXh3bGg3Q1U1NHpkVGh1R1VQVExrLm1mdDAVBggr BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwDQYJKoZIhvcNAQELBQADggEBAGSwlpQg1xS4GLQ2TbkA5OkyTXezlmDc C1DB5zYXKqBHKytIW2Uo2lAAa3GCNRis8q9Gh7+ruwSaHbg1Vy+Jqrh25Vu1P/Ep R0i2mKc1nO6pgJaIMykA9JxFvyXDB1gvhg4ytA0dxMzLgzYYjGPHglZm9AHxidew wEw1aDyAYICwu33fTzF3e88OVwQrs17hvJfTaY4nXSkyqu/48IpN3JVzqkd8FYFg rj1rtzcATDdlLsTq3HKFz0B/1ZKcGj5tpMHI2bZ58Zrsr2IDxQNtnscTFabqYzdX LOqNz4rvabwYAyHi50a/CkX24Un/QC3I2sIloGDLVpiuLU6HcmbRQPA= -----END CERTIFICATE-----Generated at Sat Aug 22 00:47:15 2026 by rpki-client