$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft File: jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft (raw, json) Hash identifier: bpBqLid+qqOB9G9G0dehfaL3JLnsH2e3iuAa+vuTNGQ= Subject key identifier: EA:85:D2:40:B9:98:7E:4E:6E:D9:90:02:40:3F:FC:6C:AC:E5:C7:52 Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D Certificate serial: 95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft Manifest number: 20BE Signing time: Tue 07 Jul 2026 09:20:57 +0000 Manifest this update: Tue 07 Jul 2026 09:20:57 +0000 Manifest next update: Thu 06 Aug 2026 09:20:57 +0000 Files and hashes: 1: PRKOLBS6fheerd1Bn8Zw-X5fFyQ.roa (hash: 5AbtuT315gTMW3qyuDWwe4kJmoqdq1tQXn1/W8xqzKA=) 2: Sra8l9P9TXU4AHZTxkbkyrXYQi0.roa (hash: WZxWZhd2+jDe+1Nt4GiSrJnbQsJR9NzdBiHxJs04Egc=) 3: jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl (hash: uOVxamhREccQAErh0CAFFBIItAQRSRZlVRxg9FPI69U=) 4: oaJJcry2PaJK3Iofjvn3Uwyc60s.roa (hash: 5EsHPfzsFpcezJZG2nSr+t1AfDbQsClmPPK351ZLIE4=) 5: ptjjFWCdKZze-vcvw0suK9_Ir9c.roa (hash: 3pOm97oDXWno7uYEWdx23mJZ/6vaOQMmRzVO8ra4p48=) 6: t1AaKXuaFQqQhjNoK08FVHpix6w.roa (hash: V2ODOZMTPbAi9WcpVpWRXT7ZxFVIvvt2OPgDC+XRaBA=) 7: wCOi_NkXsuW2oUB9MeJk97uvLz8.roa (hash: TQAJysun5fxG3GigwYZjVsQ8ivpOX9IwyBx4+rrXIrY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 09:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D Validity Not Before: Jun 15 01:31:33 2026 GMT Not After : Jun 15 01:30:02 2027 GMT Subject: CN=EA85D240B9987E4E6ED99002403FFC6CACE5C752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9b:4a:85:38:d2:15:ce:e5:9b:91:7d:0b:e9: 0a:f3:d6:a1:10:b7:96:04:c1:af:fa:9d:cd:97:eb: 05:a0:99:49:ed:de:8b:c8:08:06:6d:f5:92:54:89: 7d:e7:6e:53:e7:5a:8e:bc:d5:4c:3b:ec:f4:b6:25: 54:85:03:f0:12:71:31:cf:f3:44:8c:e6:06:f2:9f: 62:a5:26:4e:bc:0e:6c:f0:94:a9:0d:4e:cf:c8:3e: 7c:e8:f9:4e:d0:94:11:1f:6c:7e:20:4f:7d:51:45: d9:e2:3d:52:9a:31:08:19:3c:6f:99:ad:83:b6:3b: c7:b6:cb:47:c6:99:6f:0c:84:3c:a3:77:9c:eb:54: a3:28:5b:6b:6a:c8:5f:ba:49:09:ac:33:cc:ef:0c: 6c:01:e4:42:07:ec:0b:68:2e:cc:fd:27:44:af:4d: 2b:a6:7e:7a:da:4a:59:76:61:9e:72:ba:ef:6f:91: 41:40:fd:d3:f1:1b:10:53:25:d1:47:98:e5:79:dc: 9b:3d:72:0a:3d:1d:a6:d9:25:d2:7c:ba:17:78:03: b2:2c:42:b0:fb:74:6d:f8:e7:6c:4a:a7:17:aa:ec: ab:0d:bc:dd:20:b4:58:ba:4c:c2:9a:fb:62:c9:db: 61:09:95:da:74:93:f9:d6:32:14:eb:36:9c:97:a9: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:85:D2:40:B9:98:7E:4E:6E:D9:90:02:40:3F:FC:6C:AC:E5:C7:52 X509v3 Authority Key Identifier: keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:46:b1:f3:ad:f1:eb:13:fb:95:26:5f:85:07:a1:26:af:ac: f1:72:d3:e5:9c:c0:c3:4e:ee:28:50:34:b2:01:29:0e:45:34: 92:c8:8c:1b:fe:85:22:5a:ee:ab:35:56:82:3c:cc:3a:df:cd: 77:34:d0:42:49:80:09:c6:5a:bb:09:ff:b0:92:d0:6d:d1:8e: e6:3d:00:77:57:dd:ba:89:28:6c:17:15:3a:04:5c:07:c6:7a: 61:14:83:fb:92:e3:b4:f4:4e:9e:df:74:d3:6d:ea:87:03:ab: 8c:f4:47:6b:0f:2f:6c:60:8e:f5:41:d6:c5:3b:68:6b:b3:ee: fe:d8:9c:6f:80:9b:00:b0:58:96:d3:02:51:12:6c:cc:a9:6a: 39:5b:f7:be:e7:f3:1c:ef:48:24:9a:b9:76:e7:b5:c6:0f:7c: 54:66:89:85:46:28:59:62:dc:e5:b0:b6:23:a4:cd:dc:42:50: 4c:82:e5:dc:e4:8d:4b:a0:1f:cf:9a:9b:e6:1a:59:15:1f:00: 0f:b0:f3:86:4f:69:d8:5f:47:13:9d:e7:a6:e6:4f:aa:2a:60: b7:d8:aa:d6:f5:c1:f3:e7:f8:cd:13:33:da:85:30:e7:17:df: 1d:66:18:df:2d:fe:c1:7c:ee:41:da:f4:5c:bd:a8:b6:95:4c: 79:a0:01:5b -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQy NkUwRDE3RTMwRDhCRjU3MTRGNEJBOTJFRUVCMEQyMkREREIxRDAeFw0yNjA2MTUw MTMxMzNaFw0yNzA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVBODVEMjQwQjk5ODdF NEU2RUQ5OTAwMjQwM0ZGQzZDQUNFNUM3NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHm0qFONIVzuWbkX0L6Qrz1qEQt5YEwa/6nc2X6wWgmUnt3ovI CAZt9ZJUiX3nblPnWo681Uw77PS2JVSFA/AScTHP80SM5gbyn2KlJk68DmzwlKkN Ts/IPnzo+U7QlBEfbH4gT31RRdniPVKaMQgZPG+ZrYO2O8e2y0fGmW8MhDyjd5zr VKMoW2tqyF+6SQmsM8zvDGwB5EIH7AtoLsz9J0SvTSumfnraSll2YZ5yuu9vkUFA /dPxGxBTJdFHmOV53Js9cgo9HabZJdJ8uhd4A7IsQrD7dG3452xKpxeq7KsNvN0g tFi6TMKa+2LJ22EJldp0k/nWMhTrNpyXqROtAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU6oXSQLmYfk5u2ZACQD/8bKzlx1IwHwYDVR0jBBgwFoAUjSbg0X4w2L9XFPS6 ku7rDSLd2x0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzk4OS9qU2JnMFg0dzJMOVhGUFM2a3U3ckRTTGQyeDAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9qU2JnMFg0dzJMOVhGUFM2a3U3ckRT TGQyeDAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvOTg5L2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNMZDJ4MC5tZnQwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTRrHzrfHrE/uVJl+FB6Emr6zxctPl nMDDTu4oUDSyASkORTSSyIwb/oUiWu6rNVaCPMw63813NNBCSYAJxlq7Cf+wktBt 0Y7mPQB3V926iShsFxU6BFwHxnphFIP7kuO09E6e33TTbeqHA6uM9EdrDy9sYI71 QdbFO2hrs+7+2JxvgJsAsFiW0wJREmzMqWo5W/e+5/Mc70gkmrl257XGD3xUZomF RihZYtzlsLYjpM3cQlBMguXc5I1LoB/PmpvmGlkVHwAPsPOGT2nYX0cTneem5k+q KmC32KrW9cHz5/jNEzPahTDnF98dZhjfLf7BfO5B2vRcvai2lUx5oAFb -----END CERTIFICATE-----Generated at Tue Jul 7 12:41:35 2026 by rpki-client