
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft
File: jIbjLs6aPIUP6-ppZB81RCc9U3E.mft (raw, json)
Hash identifier: RSAiFWLUFrKU8k+yykPN5Cn1HPaSZeDn0ftL3Hf8CHM=
Subject key identifier: 5E:CE:2B:36:42:4F:7F:10:C9:ED:27:AD:CA:06:CD:77:6B:94:A6:BF
Authority key identifier: 8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71
Certificate issuer: /CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371
Certificate serial: 2B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft
Manifest number: 0C53
Signing time: Fri 17 Apr 2026 02:09:11 +0000
Manifest this update: Fri 17 Apr 2026 02:09:11 +0000
Manifest next update: Sat 02 May 2026 02:09:11 +0000
Files and hashes: 1: BFXchvn7A8t6yNxtkksPVG9errs.roa (hash: +mw3RHn0XXLI59tddMvbF1KhyPf6CBsxguM4Ot+8vx0=)
2: C_GH7njl41CnNuSVhiKjc63ogBA.roa (hash: E8CHCkQhC9BDMH5w8zD9s7Jna9uKTqUtirYBYYE73xk=)
3: F4lssYedQZTM6Pv782Lp-azmnYA.roa (hash: x2/+OwQhMV2SsxRkK66VE3rGqxvJYQ5YT0AyIe9AlVg=)
4: VLYiVNgA2u1ccyJzvXwfemZvJxI.roa (hash: lwBJ7rpwShZGhIAdxVWF76wXqFMHMmL+TmQo7H+WH30=)
5: cpeTyGveApa4Np68f_l1DdnwrTE.roa (hash: EdJ/PKuZX+mLu5DKYaGSsltUWF8hhQheczdRwuKcCx0=)
6: ddAoB8E2GyjKS3Pw5hcHuQpCFrE.roa (hash: AiHAzz+TUBRJoIojbJpwXveD80WGEHhaf1TXtuMDxBE=)
7: jIbjLs6aPIUP6-ppZB81RCc9U3E.crl (hash: w37HcJqCQJ1gd18izXfEBo7s2KRRgctIT8rblujTwJA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371
Validity
Not Before: Apr 15 01:32:20 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=5ECE2B36424F7F10C9ED27ADCA06CD776B94A6BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:dc:d6:93:72:f4:2b:6a:0e:3f:9c:c7:f6:
38:f7:be:dd:56:80:77:bb:61:ef:bf:8c:bd:2b:8f:
63:ea:51:5b:d3:7b:ee:15:ae:f3:a0:59:39:f4:39:
8a:ed:56:cd:4f:cc:b7:02:99:fb:23:41:65:3a:9f:
c6:fb:6e:80:f0:37:85:51:b0:71:b6:21:32:8f:ca:
cc:d2:be:0f:91:d0:68:83:dd:c1:76:6a:d9:68:7e:
34:9e:8c:61:a7:fa:9d:ef:06:90:0a:43:80:5a:ed:
d4:45:60:a2:8c:f3:4e:20:ed:51:53:98:dd:d3:c7:
e4:9f:6b:28:45:9e:01:c8:5b:4c:d0:95:77:bd:e9:
4a:a5:52:d6:09:85:25:67:28:6a:1e:05:26:78:a0:
16:ac:6e:e0:a5:8b:cd:3c:15:84:7f:4e:5f:67:bd:
65:01:be:d2:71:4e:7d:3c:b4:fc:94:40:76:21:19:
72:91:32:5a:58:6b:70:20:82:c0:84:6a:c4:cd:cd:
45:8d:7c:0b:fd:6b:09:c7:6d:52:5c:69:53:4c:0f:
6a:4d:31:db:fa:9e:bd:e1:54:31:2e:b7:de:9d:dd:
43:72:2f:0e:d9:23:cc:50:5a:e4:9b:18:4b:a1:e6:
50:67:11:4e:cb:e7:29:ff:cd:f5:ad:a2:94:3f:e5:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CE:2B:36:42:4F:7F:10:C9:ED:27:AD:CA:06:CD:77:6B:94:A6:BF
X509v3 Authority Key Identifier:
keyid:8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:15:bc:9c:a8:a2:0b:3d:6a:ac:a6:60:96:16:6c:f3:4e:97:
fe:36:5e:38:d1:f7:16:80:af:e1:ce:5c:89:0d:8e:59:fb:30:
88:59:13:8b:d1:25:59:26:62:e7:38:f1:6e:c1:44:e4:e2:3e:
8a:db:76:2e:be:c3:dd:8e:a9:eb:64:2d:8b:fc:b8:28:ff:15:
af:15:0f:0d:3c:e2:e4:d6:18:41:62:37:a9:29:d4:21:b0:a0:
8e:af:83:1a:5e:33:b4:46:cb:f7:35:e1:24:95:94:fc:25:9c:
bf:e3:80:1c:20:52:cb:3f:90:98:a8:08:4c:9e:6c:82:ff:89:
60:3f:8b:56:cd:14:6c:76:02:63:44:e2:1f:70:c5:5a:0e:c9:
0a:9e:62:98:31:96:17:b7:7c:cc:dd:92:d1:07:31:c0:ba:fe:
45:5c:43:49:13:05:ba:20:81:08:7f:66:84:e8:5d:79:36:52:
d6:70:93:8b:5e:4e:a1:b9:1b:15:41:e8:ef:96:41:ef:29:b6:
38:f3:8d:d4:15:b4:c9:d5:ba:ef:bd:26:0f:97:d2:46:b0:3b:
49:0d:d5:15:f2:f1:4d:7c:a1:1f:1e:58:c6:75:b0:92:4f:75:
d8:e1:ed:6d:cf:43:11:2c:45:45:39:1f:83:35:5c:0f:b4:83:
b5:c4:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:00:11 2026 by rpki-client