
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
File: r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft (raw, json)
Hash identifier: S8C9riszFtID1XUktrEKzXFfmHlNCrgRNyeEtSfc7c8=
Subject key identifier: 7F:20:70:04:7E:E2:FF:1A:47:47:14:66:D2:B0:2B:E8:07:EA:8A:CD
Authority key identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5
Certificate issuer: /CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5
Certificate serial: 1F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
Manifest number: 0B47
Signing time: Tue 22 Sep 2026 03:56:59 +0000
Manifest this update: Tue 22 Sep 2026 03:56:59 +0000
Manifest next update: Thu 22 Oct 2026 03:56:59 +0000
Files and hashes: 1: -qZHmto1lqAQWIgvvLmIXpbK9wE.roa (hash: NmzDYpDKXQrchEp1FGdBTn2XRFNWf28H+zs858nc9RA=)
2: Et0xlHaBLGlJlw7J-YDjbyUiGBw.roa (hash: vLPdfbXg4JdfXjI79YrtlwANOfKQdFHlH5D2ouUUJGQ=)
3: KvQeS_L8j89a4TTbyqBxD9BTlnk.roa (hash: GdefVKsYksDUdBYFYkd+3eE8tm5FGX6XpQTedOSS8/0=)
4: gPFdjH-G3ix-PBu5qciAL2Rko-M.roa (hash: 3u9SpAlnP1ajcfz0gLHUdFeqx3gJladT1S809ETLIZE=)
5: r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl (hash: fIeJXy9bK5njL0PH65LSRaFKJHg8TmYUZuvmjNfUo7E=)
6: sX-vzJ651eFNncutB3lkt5117JY.roa (hash: 2csWAI5TzCpC5sJANoVTRXzyMqKAROzfPy+Cp/kTF48=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 06:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5
Validity
Not Before: Sep 15 01:42:23 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=7F2070047EE2FF1A47471466D2B02BE807EA8ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:78:16:8c:d0:24:d9:f4:2f:25:6a:76:ba:
bd:b3:26:0b:49:14:ab:1e:af:87:19:81:30:be:39:
41:73:88:97:61:dc:e6:29:36:6e:3e:b7:bb:04:09:
69:52:66:74:19:ec:2e:1f:c9:17:d3:77:4e:1d:a6:
04:3c:2a:d2:c9:aa:11:72:4f:0f:5c:b4:bd:07:5b:
ee:02:e6:69:d1:2a:7e:bf:be:92:eb:0b:40:e0:c2:
24:dc:c7:33:87:2b:94:2f:71:1b:4d:b9:12:51:68:
ba:4f:4a:30:95:32:08:8b:ab:e3:ac:f7:55:69:bc:
c7:2c:46:1d:3c:cc:cc:8b:b3:c7:31:80:64:f9:e7:
05:4b:29:1c:63:f1:40:78:cc:d9:98:b3:8b:1a:54:
82:84:1e:9a:6c:22:c8:66:27:21:0b:48:65:16:7c:
8c:42:ad:f5:d5:21:69:5d:ca:7c:2f:48:ed:1e:e5:
48:15:17:5c:78:ed:ea:54:80:27:e6:22:26:28:aa:
d5:33:e3:8b:49:f3:7a:6f:7c:18:ae:81:04:76:62:
ed:45:75:ac:49:3c:bb:63:2e:3c:12:7d:14:43:f1:
4b:6e:f2:c0:0c:6f:e6:f3:07:e0:57:a8:df:f0:95:
ab:33:23:6d:d1:41:5b:7b:c9:37:67:26:64:4d:62:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:20:70:04:7E:E2:FF:1A:47:47:14:66:D2:B0:2B:E8:07:EA:8A:CD
X509v3 Authority Key Identifier:
keyid:AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:da:5b:b2:6d:9f:7d:bd:a0:21:7f:ee:d1:0d:ca:c7:0f:fc:
15:2a:8d:e4:4d:17:b9:5f:55:5c:79:00:72:3b:21:81:ac:75:
0c:08:fe:4d:0b:47:9c:8d:0f:5e:3c:3b:bf:a6:f0:39:3d:85:
25:14:9a:45:8f:c8:07:aa:33:7f:d5:6e:0a:bc:9e:05:11:e4:
95:07:17:5d:25:b9:5a:06:99:95:e4:15:4a:00:08:54:88:4f:
e6:47:05:ba:41:ff:04:fe:8c:8e:74:f7:e9:94:31:d5:16:df:
fd:8b:31:df:50:07:2c:e7:28:cf:4a:c1:4c:af:2e:aa:1e:52:
10:c4:d9:4c:17:fc:2e:06:0d:27:d2:3b:d0:a6:a9:33:47:35:
b9:76:57:bf:f7:01:4a:ce:7f:8d:57:5a:da:fb:a1:06:1d:0b:
2e:d3:d7:7e:9e:5e:dc:d7:88:65:39:6c:70:d9:b5:d6:50:c2:
07:83:6a:f3:79:76:a4:d9:fe:b4:fe:de:a1:1e:6b:ba:b7:a0:
9a:ac:83:ca:97:12:a4:f1:90:0d:fd:f3:3c:4a:2a:3c:58:bd:
1a:b6:f3:93:07:47:f5:cc:d1:1c:6e:c6:37:e0:37:bc:40:4e:
5c:62:2e:3c:6f:2d:a7:da:3d:35:dd:74:30:02:72:ec:44:67:
17:71:97:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:11:55 2026 by rpki-client