
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.mft
File: ZxsefXydKSX_7K4VB8U_UEGlC_I.mft (raw, json)
Hash identifier: cwF2ytIxg3sCAOGtRP5Ndq1V3FsDLMQYi0p+kW6akKA=
Subject key identifier: 7C:5F:20:53:06:BC:88:E6:E1:63:97:FD:24:3B:CA:BE:43:18:0E:B4
Authority key identifier: 67:1B:1E:7D:7C:9D:29:25:FF:EC:AE:15:07:C5:3F:50:41:A5:0B:F2
Certificate issuer: /CN=671B1E7D7C9D2925FFECAE1507C53F5041A50BF2
Certificate serial: 02
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxsefXydKSX_7K4VB8U_UEGlC_I.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.mft
Manifest number: 49
Signing time: Mon 21 Sep 2026 13:33:03 +0000
Manifest this update: Mon 21 Sep 2026 13:33:03 +0000
Manifest next update: Wed 21 Oct 2026 13:33:03 +0000
Files and hashes: 1: -O7cx3tFfT7FajvvQ9TtZ1jIIQ4.roa (hash: n4A2XdrZYlENMMu7d+1Ism9PKnqGp06IQIUhIIr93sk=)
2: -gxMxmWAZ_D5J7zBQW_ltYEbF8k.roa (hash: w3CX9g7We5FSLvM7xJqXGYDJdkIHaZo6ikSw576gnWw=)
3: OEiV93bc9KY-ws2R-SZAbbbVIiY.roa (hash: 6EX1cZx4DluhfuLfX0lZ4yqY/AeXYQ/ZxqlH/b8fj4o=)
4: ShkBRAOAVtzAbSkKaHIp3TPnTVs.roa (hash: GnBLIQKMs3C/fkCjGMo8xmuPkHiUXTHrLSxsrHp+oz4=)
5: ZxsefXydKSX_7K4VB8U_UEGlC_I.crl (hash: QSENdOMMvkY4WyqCU6Z3RPMF+Xs67lEBj0ZZmU9megk=)
6: d0dlhxutYGnCVU4ASHZrzuie2mg.roa (hash: QUQDy3nPftJHc9TNpTBtNP6XsN2/nNAMBpEzD9mciuY=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxsefXydKSX_7K4VB8U_UEGlC_I.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 13:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671B1E7D7C9D2925FFECAE1507C53F5041A50BF2
Validity
Not Before: Sep 15 01:41:10 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=7C5F205306BC88E6E16397FD243BCABE43180EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:24:cb:b6:73:16:1d:d3:6a:dd:f6:40:e2:
4c:d8:bf:c2:1b:82:0d:5e:eb:d4:6b:47:16:df:6f:
90:b1:0d:93:59:b5:4b:05:3f:54:26:d5:26:79:4e:
f9:59:b1:32:ec:a0:57:1a:d1:73:db:5b:5f:0a:ea:
97:2d:35:0e:73:bc:a3:a1:bc:1b:eb:e3:23:e3:16:
a0:5b:8d:eb:5a:fa:a3:04:69:35:d1:d8:3c:2e:81:
97:ff:7e:60:c6:a9:ab:d3:50:2b:81:3d:dc:5a:09:
04:04:50:80:32:8c:af:3a:59:84:78:f4:64:6d:68:
3c:67:56:5d:48:01:9b:61:0b:3a:9c:47:16:dd:8c:
b7:67:f4:bc:14:19:cb:94:c8:8c:27:9f:96:9a:16:
2c:ef:69:04:ca:1f:cb:4f:83:33:ad:34:b2:c6:9e:
3a:10:17:52:ef:96:30:31:63:be:25:b3:19:8d:b5:
7d:03:54:7f:14:c1:f6:b8:23:08:b0:92:b5:2c:e2:
49:7b:f9:7b:4c:1f:ed:7f:91:6f:2e:0e:98:c0:38:
db:6f:0c:cc:9a:37:36:86:c4:93:59:50:68:ae:a2:
48:16:f6:8f:09:99:78:67:64:07:c1:b9:8a:5e:65:
5c:ed:c1:c1:59:8f:c6:0a:d5:cd:d5:ed:42:ff:65:
37:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5F:20:53:06:BC:88:E6:E1:63:97:FD:24:3B:CA:BE:43:18:0E:B4
X509v3 Authority Key Identifier:
keyid:67:1B:1E:7D:7C:9D:29:25:FF:EC:AE:15:07:C5:3F:50:41:A5:0B:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxsefXydKSX_7K4VB8U_UEGlC_I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:0e:f0:1e:02:ac:b8:00:0a:6e:16:0c:e9:92:e2:0f:fe:15:
10:8c:e0:ee:bd:44:64:67:db:4f:70:e3:0c:a9:0b:d8:d7:00:
23:b5:3b:8a:b7:de:01:fa:07:a1:cc:86:97:0b:65:6b:52:7a:
4c:93:1d:da:e0:31:73:2f:c7:02:82:a9:49:50:95:71:50:f2:
73:c2:b4:f9:dd:d4:1a:e1:73:9c:fb:88:69:1b:28:71:bb:e8:
c3:c8:c2:e7:9d:25:9b:2d:63:54:75:c6:1f:86:32:bb:89:e4:
01:a0:46:de:00:04:8b:79:d3:9e:b0:5b:4a:6c:64:e7:79:a9:
ea:cc:0b:e9:5a:58:30:80:d0:ff:de:47:98:bf:19:ea:15:c9:
9e:d2:c8:f4:16:27:b7:43:ff:ba:fa:64:19:f9:7f:9b:63:c3:
cb:b4:0d:98:8c:62:1f:2b:72:c6:7c:0b:07:84:f4:12:03:43:
45:4d:70:fd:e4:66:c7:12:42:96:3c:24:ee:e1:89:f0:3a:88:
9f:55:c7:a7:2a:2a:9b:34:9d:47:76:fb:4b:e9:b3:9f:1b:29:
8b:69:20:60:88:df:7d:35:98:36:ce:96:35:c5:d5:6e:2a:3d:
f4:6d:01:0e:d9:ac:07:8c:55:12:eb:80:dd:a3:a9:44:66:07:
cd:cd:55:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:11:09 2026 by rpki-client