$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft File: hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft (raw, json) Hash identifier: Lx2EAXyMYRcxrp45/WQ5rLRNoljtttUf5x6vV5Dco6Q= Subject key identifier: E0:B1:1D:17:F0:B8:52:90:6E:67:A8:83:94:90:4A:04:7C:E4:2F:69 Authority key identifier: 85:3C:4F:1E:F3:7C:75:0A:48:33:95:69:E5:E6:7C:45:73:FB:AE:6E Certificate issuer: /CN=853C4F1EF37C750A48339569E5E67C4573FBAE6E Certificate serial: 09 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft Manifest number: 0219 Signing time: Mon 21 Sep 2026 23:33:31 +0000 Manifest this update: Mon 21 Sep 2026 23:33:31 +0000 Manifest next update: Wed 21 Oct 2026 23:33:31 +0000 Files and hashes: 1: 3WVjC5G4YGChmiQH3qpb-MxuBz4.roa (hash: 9y53IEkAuPDEiLVpxJzHt/bCNBmCe4WSxmV/A/7JMpg=) 2: 3a2H1gtckhd2mV1Q0O6aWwzlZ_g.roa (hash: xmlBUkj1WkQ38JrI2CTSMsOGjO+J2bPkB6ORosKc0R8=) 3: SAl0_YjrbgEwVAktjuk8xJC_NFs.roa (hash: CZEaqPAg7RHIB2LbFj40HeMTYB9SCkw7LIMoMtzv974=) 4: hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl (hash: s7ifBzRaLs7zpwT7nUle16pnhJImkvTxuKPZs7GfDGY=) 5: j9NuYoBI0S0SKTvsdOB2ZI2ejV4.roa (hash: f/JtlBbuCRA/QXmyv5Vu0SpVKfxhhESGoZunkZVeF9I=) 6: zZe6jl3jLMpQsjj7S3ENak3In4E.roa (hash: ljhBnlQqdGzHrCLMEw0ocJrMDwswKriF/4s1DnWL0SM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 20:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853C4F1EF37C750A48339569E5E67C4573FBAE6E Validity Not Before: Sep 15 01:42:49 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=E0B11D17F0B852906E67A88394904A047CE42F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f7:2b:f9:b4:6e:c3:fb:7f:a9:93:77:fc:e1: 4e:20:9d:6c:05:f0:22:ee:91:75:c9:ad:3b:2a:53: 09:ec:3a:a7:68:24:97:23:6e:27:e8:3e:17:9d:bc: 64:23:17:a6:d5:ce:92:56:dc:e3:cb:2c:db:a5:25: 9a:c8:a6:ad:91:e9:9f:1f:48:bf:22:b2:c6:31:71: 8d:79:d2:05:7e:8e:ed:6b:4b:28:92:06:31:54:c5: c8:ab:6f:d3:36:63:46:79:65:ab:2e:6c:8a:66:94: 74:6b:ae:f6:46:56:86:21:30:da:4e:67:d7:51:28: b0:2e:75:3a:ea:ce:41:c1:29:c7:06:d0:52:8f:1d: 33:66:7c:46:28:04:7c:64:e0:26:6f:45:15:61:12: 7a:b0:db:eb:9b:95:eb:29:45:90:56:ec:a2:9f:23: 45:5a:eb:34:d9:0f:a8:74:55:ed:ab:b7:7c:96:a9: 8a:70:3c:2f:8d:4b:c0:a5:0b:fc:4f:cb:1e:0d:dc: 60:c8:5c:27:8c:b0:84:28:10:0e:c1:e7:7a:fb:15: 7a:0d:61:0a:82:2b:c6:a8:c9:e2:67:cb:59:c9:d2: 8d:04:7e:f8:d4:ee:7d:4e:52:0f:90:f7:8b:dd:c6: 28:c9:20:25:90:c7:69:cd:77:cd:55:8a:7f:58:7d: 90:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B1:1D:17:F0:B8:52:90:6E:67:A8:83:94:90:4A:04:7C:E4:2F:69 X509v3 Authority Key Identifier: keyid:85:3C:4F:1E:F3:7C:75:0A:48:33:95:69:E5:E6:7C:45:73:FB:AE:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:95:a4:19:81:4f:38:59:81:c2:0d:64:6f:c3:f0:33:73:67: c2:35:8f:77:c2:df:86:a7:74:23:61:1c:16:0f:e7:06:c7:b5: a3:91:f9:e4:0d:41:36:82:b1:19:38:c8:b3:fd:3b:8c:0b:9c: 31:6e:65:60:e1:1e:f0:79:ba:ba:60:bf:91:5a:43:1f:aa:dc: 0d:da:14:50:66:a9:d8:e3:c5:5d:9b:9f:25:01:88:ab:1d:c5: 70:86:95:0a:21:67:c2:5b:da:3d:63:22:5d:f5:23:99:b7:ae: 20:90:db:fe:71:5b:b2:6f:7c:2f:d8:58:5e:28:0d:15:6b:fa: e2:1f:47:4a:20:d7:c2:ad:3b:bd:ee:0a:e1:94:d8:bc:e6:52: 1b:b5:78:51:44:1e:24:8c:74:b2:4b:4d:ae:6f:b7:92:ce:62: 2d:49:d3:12:1d:16:b4:7e:7e:74:1e:d4:27:d9:4d:fa:6f:5e: cb:fc:c8:ba:e0:21:8b:01:d4:b7:b5:85:47:59:5d:2b:aa:54: ef:0f:cc:b1:78:22:e0:93:84:e4:14:3c:d6:23:4e:82:32:80: d3:f4:26:11:fa:40:3f:aa:87:27:f6:bb:6d:cd:a8:b7:b5:c7: 0c:a0:6e:65:49:f4:55:67:95:d3:7b:13:80:f6:56:f3:7f:2c: 1f:af:ce:b8 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NTND NEYxRUYzN0M3NTBBNDgzMzk1NjlFNUU2N0M0NTczRkJBRTZFMB4XDTI2MDkxNTAx NDI0OVoXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoRTBCMTFEMTdGMEI4NTI5 MDZFNjdBODgzOTQ5MDRBMDQ3Q0U0MkY2OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL/3K/m0bsP7f6mTd/zhTiCdbAXwIu6RdcmtOypTCew6p2gklyNu J+g+F528ZCMXptXOklbc48ss26UlmsimrZHpnx9IvyKyxjFxjXnSBX6O7WtLKJIG MVTFyKtv0zZjRnllqy5simaUdGuu9kZWhiEw2k5n11EosC51OurOQcEpxwbQUo8d M2Z8RigEfGTgJm9FFWESerDb65uV6ylFkFbsop8jRVrrNNkPqHRV7au3fJapinA8 L41LwKUL/E/LHg3cYMhcJ4ywhCgQDsHnevsVeg1hCoIrxqjJ4mfLWcnSjQR++NTu fU5SD5D3i93GKMkgJZDHac13zVWKf1h9kGMCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBTgsR0X8LhSkG5nqIOUkEoEfOQvaTAfBgNVHSMEGDAWgBSFPE8e83x1CkgzlWnl 5nxFc/uubjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyOTEvaFR4UEh2TjhkUXBJTTVWcDVlWjhSWFA3cm00LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaFR4UEh2TjhkUXBJTTVWcDVlWjhS WFA3cm00LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMjkxL2hUeFBIdk44ZFFwSU01VnA1ZVo4UlhQN3JtNC5tZnQw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAolaQZgU84WYHCDWRvw/Azc2fC NY93wt+Gp3QjYRwWD+cGx7WjkfnkDUE2grEZOMiz/TuMC5wxbmVg4R7webq6YL+R WkMfqtwN2hRQZqnY48Vdm58lAYirHcVwhpUKIWfCW9o9YyJd9SOZt64gkNv+cVuy b3wv2FheKA0Va/riH0dKINfCrTu97grhlNi85lIbtXhRRB4kjHSyS02ub7eSzmIt SdMSHRa0fn50HtQn2U36b17L/Mi64CGLAdS3tYVHWV0rqlTvD8yxeCLgk4TkFDzW I06CMoDT9CYR+kA/qocn9rttzai3tccMoG5lSfRVZ5XTexOA9lbzfywfr864 -----END CERTIFICATE-----Generated at Tue Sep 22 04:09:55 2026 by rpki-client