$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft File: zgXnGt3sD442G7VasQP1PThWxgo.mft (raw, json) Hash identifier: 5P7hAzHwkd7SAOeuBiw82JeoyUqOYst2Bht2oH38Ra8= Subject key identifier: BB:89:C0:2D:63:E5:1E:AD:61:74:D3:61:08:C1:A9:29:38:DB:16:31 Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A Certificate issuer: /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Certificate serial: 3C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft Manifest number: 101A Signing time: Mon 21 Sep 2026 23:12:44 +0000 Manifest this update: Mon 21 Sep 2026 23:12:44 +0000 Manifest next update: Wed 21 Oct 2026 23:12:44 +0000 Files and hashes: 1: SDQ2lTLrg_BcFsJLEq2-B3qwaIo.roa (hash: hQWg6vcypJgwjwOlsOU1rm8RE0GW0g3stz8HRAvHJGE=) 2: TOqj5j_H71SZY6QKwFblWgdTqNU.roa (hash: CmPTLpNie63sevZ8P7foYxFzY+awt9hrQdG3rt+pMYw=) 3: aPGF_8vWusF0aFzhMJNQypY9cxY.roa (hash: OPMnI39nsQPnvPaknKR3M6ebPKH9qEeapTLChAi5x4E=) 4: j7enSkqGEa7ywbkQj6QsnYVFaQQ.roa (hash: SK0YpjO27bx+HT0Y7bElsk6N1XlT2ntyZxmWKFvCJeA=) 5: lI79newaLhT5zLqC3N1BIWX2Y7Q.roa (hash: N2ZIspmX38uCb6VP4D19N6gr83Eio8hhMStOPt3dYbE=) 6: zgXnGt3sD442G7VasQP1PThWxgo.crl (hash: 2G6gatRJRRZpdrBWa2+O/+oMAjPCe7L4MJ3g4lSiX6k=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 20:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Validity Not Before: Sep 15 01:39:23 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=BB89C02D63E51EAD6174D36108C1A92938DB1631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:8b:f6:1d:a0:50:6d:4a:b7:b8:f4:05:42: ab:f1:61:76:e7:81:24:bd:b0:b1:f8:33:b7:70:f5: b2:34:10:0f:c1:39:c1:42:01:16:cc:89:a7:ae:ae: b2:a0:6c:0e:71:6a:ec:20:2c:8d:e8:a0:f6:96:5d: 17:64:c5:e6:b0:03:03:cf:cb:4c:ca:3d:a8:c8:23: ba:83:5c:37:8a:39:6a:45:54:66:dc:c8:49:96:72: f0:7f:aa:18:26:18:16:eb:a7:c9:97:ab:e2:63:24: be:85:82:df:c6:d4:2e:83:53:2f:d7:86:d5:23:31: 76:8c:d7:04:8e:81:12:65:4d:3e:15:e5:4d:03:3f: 9c:0b:0c:c8:4a:9d:45:66:42:10:94:5a:f3:77:5a: 3c:a9:8e:f3:fa:59:a8:a4:81:6d:b5:55:23:87:28: dd:29:6b:1c:1e:25:ea:bb:61:eb:d7:0f:95:e4:81: e4:03:2c:f8:d1:70:2f:54:8b:e9:c3:6b:d8:30:b2: 8b:4d:02:e9:ca:e0:53:7f:31:43:12:f1:2c:9e:81: ba:80:3a:13:59:1f:e9:98:9a:b0:56:48:1a:af:70: 29:5f:3e:ae:91:73:98:40:c0:5a:8a:d7:3f:db:52: 00:44:96:fd:bd:d3:c1:6b:df:1c:11:e2:2f:57:68: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:89:C0:2D:63:E5:1E:AD:61:74:D3:61:08:C1:A9:29:38:DB:16:31 X509v3 Authority Key Identifier: keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:86:69:44:0b:f4:c5:7e:41:76:33:51:cf:80:be:93:e8:93: 0e:af:69:90:a2:de:8c:c9:15:d7:90:6d:de:44:7d:53:a4:d4: d6:27:e8:21:87:5b:1a:3e:b7:04:73:a4:c3:23:31:f8:cd:24: 38:ce:26:1a:17:42:b4:21:49:23:d2:9d:51:34:f9:a6:8a:41: 59:8d:8b:74:be:27:33:c7:fa:27:d2:d3:43:4e:99:9c:0b:20: cc:1c:fb:82:3a:e4:5f:23:6f:6b:3f:26:0b:22:d8:a4:93:f8: 48:0e:3a:09:94:2c:9c:fe:5e:6f:0d:1c:b2:37:a6:c2:4c:14: 80:85:ef:ab:b7:cb:95:7f:29:7d:1a:24:75:f0:e0:8f:14:31: 89:12:0a:62:93:d9:4f:df:16:48:01:e4:64:f8:66:43:f9:c6: 7b:a9:00:92:cb:02:bb:d3:b9:89:81:e5:62:36:0a:7e:bd:10: 25:32:e7:17:42:e6:ec:7a:b3:69:56:fb:6f:0e:bb:ca:22:69: f1:35:c7:ba:28:b7:8d:72:97:4f:05:01:1f:d7:4d:59:40:3d: aa:33:71:95:76:28:8b:40:ff:95:10:5d:fb:bb:aa:af:d3:98: 50:dc:f5:2f:59:0d:8f:49:9b:8c:73:49:ba:83:59:52:ba:42: 68:ee:80:cc -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRTA1 RTcxQURERUMwRjhFMzYxQkI1NUFCMTAzRjUzRDM4NTZDNjBBMB4XDTI2MDkxNTAx MzkyM1oXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoQkI4OUMwMkQ2M0U1MUVB RDYxNzREMzYxMDhDMUE5MjkzOERCMTYzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKxYi/YdoFBtSre49AVCq/FhdueBJL2wsfgzt3D1sjQQD8E5wUIB FsyJp66usqBsDnFq7CAsjeig9pZdF2TF5rADA8/LTMo9qMgjuoNcN4o5akVUZtzI SZZy8H+qGCYYFuunyZer4mMkvoWC38bULoNTL9eG1SMxdozXBI6BEmVNPhXlTQM/ nAsMyEqdRWZCEJRa83daPKmO8/pZqKSBbbVVI4co3SlrHB4l6rth69cPleSB5AMs +NFwL1SL6cNr2DCyi00C6crgU38xQxLxLJ6BuoA6E1kf6ZiasFZIGq9wKV8+rpFz mEDAWorXP9tSAESW/b3TwWvfHBHiL1doOG0CAwEAAaOCAfAwggHsMB0GA1UdDgQW BBS7icAtY+UerWF002EIwakpONsWMTAfBgNVHSMEGDAWgBTOBeca3ewPjjYbtVqx A/U9OFbGCjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzMvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhXeGdvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhX eGdvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMzL3pnWG5HdDNzRDQ0Mkc3VmFzUVAxUFRoV3hnby5tZnQwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBhmlEC/TFfkF2M1HPgL6T6JMOr2mQot6M yRXXkG3eRH1TpNTWJ+ghh1saPrcEc6TDIzH4zSQ4ziYaF0K0IUkj0p1RNPmmikFZ jYt0viczx/on0tNDTpmcCyDMHPuCOuRfI29rPyYLItikk/hIDjoJlCyc/l5vDRyy N6bCTBSAhe+rt8uVfyl9GiR18OCPFDGJEgpik9lP3xZIAeRk+GZD+cZ7qQCSywK7 07mJgeViNgp+vRAlMucXQubserNpVvtvDrvKImnxNce6KLeNcpdPBQEf101ZQD2q M3GVdiiLQP+VEF37u6qv05hQ3PUvWQ2PSZuMc0m6g1lSukJo7oDM -----END CERTIFICATE-----Generated at Tue Sep 22 03:38:17 2026 by rpki-client