$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft File: jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft (raw, json) Hash identifier: EYiOhTfBrMY07SfvBsnHIFpY04rJv0iKY7Glp7w4v0A= Subject key identifier: EA:85:D2:40:B9:98:7E:4E:6E:D9:90:02:40:3F:FC:6C:AC:E5:C7:52 Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D Certificate serial: 97 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft Manifest number: 21CE Signing time: Fri 21 Aug 2026 22:59:32 +0000 Manifest this update: Fri 21 Aug 2026 22:59:32 +0000 Manifest next update: Sun 20 Sep 2026 22:59:32 +0000 Files and hashes: 1: PRKOLBS6fheerd1Bn8Zw-X5fFyQ.roa (hash: 5AbtuT315gTMW3qyuDWwe4kJmoqdq1tQXn1/W8xqzKA=) 2: Sra8l9P9TXU4AHZTxkbkyrXYQi0.roa (hash: WZxWZhd2+jDe+1Nt4GiSrJnbQsJR9NzdBiHxJs04Egc=) 3: jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl (hash: /uAxU/JXS9dR4qIl19U60nkqwPabfCWAufcwbaeo2Mw=) 4: oaJJcry2PaJK3Iofjvn3Uwyc60s.roa (hash: 5EsHPfzsFpcezJZG2nSr+t1AfDbQsClmPPK351ZLIE4=) 5: ptjjFWCdKZze-vcvw0suK9_Ir9c.roa (hash: 3pOm97oDXWno7uYEWdx23mJZ/6vaOQMmRzVO8ra4p48=) 6: t1AaKXuaFQqQhjNoK08FVHpix6w.roa (hash: V2ODOZMTPbAi9WcpVpWRXT7ZxFVIvvt2OPgDC+XRaBA=) 7: wCOi_NkXsuW2oUB9MeJk97uvLz8.roa (hash: TQAJysun5fxG3GigwYZjVsQ8ivpOX9IwyBx4+rrXIrY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D Validity Not Before: Aug 15 01:35:52 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=EA85D240B9987E4E6ED99002403FFC6CACE5C752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9b:4a:85:38:d2:15:ce:e5:9b:91:7d:0b:e9: 0a:f3:d6:a1:10:b7:96:04:c1:af:fa:9d:cd:97:eb: 05:a0:99:49:ed:de:8b:c8:08:06:6d:f5:92:54:89: 7d:e7:6e:53:e7:5a:8e:bc:d5:4c:3b:ec:f4:b6:25: 54:85:03:f0:12:71:31:cf:f3:44:8c:e6:06:f2:9f: 62:a5:26:4e:bc:0e:6c:f0:94:a9:0d:4e:cf:c8:3e: 7c:e8:f9:4e:d0:94:11:1f:6c:7e:20:4f:7d:51:45: d9:e2:3d:52:9a:31:08:19:3c:6f:99:ad:83:b6:3b: c7:b6:cb:47:c6:99:6f:0c:84:3c:a3:77:9c:eb:54: a3:28:5b:6b:6a:c8:5f:ba:49:09:ac:33:cc:ef:0c: 6c:01:e4:42:07:ec:0b:68:2e:cc:fd:27:44:af:4d: 2b:a6:7e:7a:da:4a:59:76:61:9e:72:ba:ef:6f:91: 41:40:fd:d3:f1:1b:10:53:25:d1:47:98:e5:79:dc: 9b:3d:72:0a:3d:1d:a6:d9:25:d2:7c:ba:17:78:03: b2:2c:42:b0:fb:74:6d:f8:e7:6c:4a:a7:17:aa:ec: ab:0d:bc:dd:20:b4:58:ba:4c:c2:9a:fb:62:c9:db: 61:09:95:da:74:93:f9:d6:32:14:eb:36:9c:97:a9: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:85:D2:40:B9:98:7E:4E:6E:D9:90:02:40:3F:FC:6C:AC:E5:C7:52 X509v3 Authority Key Identifier: keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:dd:f3:43:12:09:ce:07:01:f6:c7:a9:2f:4f:72:fb:72:5d: 9f:f8:df:94:4c:e6:e2:a5:ff:97:92:5e:5b:49:22:b0:32:cf: 2b:7f:65:c4:93:1a:b9:bf:d7:72:16:90:d4:b8:25:ef:88:1c: b0:b8:86:fe:1a:00:cf:13:ec:d5:2f:e8:25:3c:29:8d:3c:bd: ca:08:a6:3d:2f:38:fe:57:1c:8a:8f:ff:a6:25:dd:74:0c:7c: 2b:2b:11:d7:21:fe:68:f0:48:4f:e9:74:f9:b7:89:c1:4a:e0: d4:9a:9c:d3:18:86:bb:8f:9b:8d:33:5c:27:8d:6f:52:5a:12: a7:09:a0:a1:61:69:e7:ce:9d:df:d7:8b:54:fe:b7:33:6d:c6: ab:c6:a6:0b:43:22:6a:f9:6e:c5:72:3a:ba:e9:18:7c:85:44: b1:e9:37:16:02:7d:20:43:cb:cd:92:ad:68:d3:d0:b6:ae:a0: b7:52:fa:6e:e3:b3:ab:45:be:46:30:4a:c0:cc:fb:9e:63:d1: 08:89:e5:f1:47:f6:d2:ff:5a:02:3a:25:b0:2a:3f:b0:9f:04: 07:a7:ea:dc:50:d0:3d:38:ad:c2:6b:a1:db:48:8b:71:54:98: 1d:44:fc:c7:d1:f4:ac:0d:dc:f8:9b:35:18:f2:cd:06:1b:4d: d6:88:8d:2d -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQy NkUwRDE3RTMwRDhCRjU3MTRGNEJBOTJFRUVCMEQyMkREREIxRDAeFw0yNjA4MTUw MTM1NTJaFw0yNzA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVBODVEMjQwQjk5ODdF NEU2RUQ5OTAwMjQwM0ZGQzZDQUNFNUM3NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHm0qFONIVzuWbkX0L6Qrz1qEQt5YEwa/6nc2X6wWgmUnt3ovI CAZt9ZJUiX3nblPnWo681Uw77PS2JVSFA/AScTHP80SM5gbyn2KlJk68DmzwlKkN Ts/IPnzo+U7QlBEfbH4gT31RRdniPVKaMQgZPG+ZrYO2O8e2y0fGmW8MhDyjd5zr VKMoW2tqyF+6SQmsM8zvDGwB5EIH7AtoLsz9J0SvTSumfnraSll2YZ5yuu9vkUFA /dPxGxBTJdFHmOV53Js9cgo9HabZJdJ8uhd4A7IsQrD7dG3452xKpxeq7KsNvN0g tFi6TMKa+2LJ22EJldp0k/nWMhTrNpyXqROtAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU6oXSQLmYfk5u2ZACQD/8bKzlx1IwHwYDVR0jBBgwFoAUjSbg0X4w2L9XFPS6 ku7rDSLd2x0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzk4OS9qU2JnMFg0dzJMOVhGUFM2a3U3ckRTTGQyeDAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9qU2JnMFg0dzJMOVhGUFM2a3U3ckRT TGQyeDAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvOTg5L2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNMZDJ4MC5tZnQwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB63fNDEgnOBwH2x6kvT3L7cl2f+N+U TObipf+Xkl5bSSKwMs8rf2XEkxq5v9dyFpDUuCXviBywuIb+GgDPE+zVL+glPCmN PL3KCKY9Lzj+VxyKj/+mJd10DHwrKxHXIf5o8EhP6XT5t4nBSuDUmpzTGIa7j5uN M1wnjW9SWhKnCaChYWnnzp3f14tU/rczbcarxqYLQyJq+W7Fcjq66Rh8hUSx6TcW An0gQ8vNkq1o09C2rqC3Uvpu47OrRb5GMErAzPueY9EIieXxR/bS/1oCOiWwKj+w nwQHp+rcUNA9OK3Ca6HbSItxVJgdRPzH0fSsDdz4mzUY8s0GG03WiI0t -----END CERTIFICATE-----Generated at Sat Aug 22 00:47:15 2026 by rpki-client