
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
File: JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft (raw, json)
Hash identifier: kkES1eoL+4rhH9CNbQZoeUim998M5kg1ZBkQuO3tHkg=
Subject key identifier: 31:50:38:AA:C2:4C:17:54:9A:82:BA:AD:E2:AF:44:63:12:D6:F6:D2
Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
Certificate issuer: /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Certificate serial: 44
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
Manifest number: 1049
Signing time: Tue 22 Sep 2026 11:18:51 +0000
Manifest this update: Tue 22 Sep 2026 11:18:51 +0000
Manifest next update: Thu 22 Oct 2026 11:18:51 +0000
Files and hashes: 1: 7Cf9VbqlI6vc0h2UgFjGMVZtHYo.roa (hash: DyYom2bshDmZ38vFBUag1xdUtfw2yHSB2ZZ7QJXMHmk=)
2: 93hIVtxcpKKWPj2lwqKuHaZgMZk.roa (hash: lgu9fauSKYkCue9/e7cEdwN1D4fvJP2pfnU1yl8E0F4=)
3: JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl (hash: PA4+Iq9EtxkhAsqPKvMfFecZIyKvFkAklK7mIUxHMeM=)
4: MyyFqln-P5CAFgV1p7Bxsoe04oE.roa (hash: ElDW+NpP9+B9wTXtRr0/WSbsSUpOGxnj97pk98UlEVk=)
5: b8buXXSdXc50EoN_9z4lL81yxLc.roa (hash: y1+5GgrVlxar8AhFDExwyNjRYr2VXZ8nJ3r1LAS3BQs=)
6: dJB4MS4HT-PXmgb27v7yzuoaUec.roa (hash: yk82kxXPs3siGc6DkrNtbxJMeEXWQnc9Nf+oeetU4Sc=)
7: kAxuuW_pfwxpY3HogyB4mEHRSuQ.roa (hash: 5E/eoqFn3bltIb3d+XAIbaNmFtbombeELoWwRt986a4=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 12:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Validity
Not Before: Sep 15 01:38:21 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=315038AAC24C17549A82BAADE2AF446312D6F6D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:91:7a:c7:7c:e2:70:90:2c:3d:bb:7a:46:
2d:3a:26:24:9d:51:43:55:5b:fd:9b:50:38:f5:15:
df:2c:0a:72:61:07:25:48:f4:d1:2b:0f:20:0c:ac:
c2:c2:21:f0:6f:7a:c6:20:65:7c:7b:a8:f4:01:62:
64:31:1a:12:72:f0:70:53:1c:05:a0:77:c3:5c:40:
28:f7:cc:59:fe:c2:4b:24:d9:26:08:58:75:f5:c2:
a3:3f:aa:5d:74:a2:5f:15:5b:2c:bf:5c:0c:19:5d:
4f:c3:20:f6:16:75:a5:4e:f0:82:35:a8:da:fc:d8:
d6:7e:1a:ca:be:87:a6:c5:bc:90:a3:c9:aa:12:ed:
0e:5e:1d:06:bd:94:d2:6f:c8:34:9f:ea:a2:fc:3e:
61:11:2e:95:36:aa:54:5d:af:63:3a:02:42:df:0c:
e5:d7:a0:e7:3a:5a:80:85:6a:0d:0c:60:53:fd:56:
cd:aa:b1:b0:77:e3:d7:77:af:c7:c1:5b:fe:db:3a:
3d:1a:a9:2d:6d:cc:b4:44:5b:5b:e2:a6:2b:ef:de:
39:9f:44:66:4b:d6:4a:8c:e9:5e:6a:5a:0e:d5:ef:
a9:44:97:13:6f:0e:bc:11:7c:ef:41:4f:9f:b3:9c:
28:6b:f6:75:b2:05:3a:0d:2b:24:53:28:bd:cd:81:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:50:38:AA:C2:4C:17:54:9A:82:BA:AD:E2:AF:44:63:12:D6:F6:D2
X509v3 Authority Key Identifier:
keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:e1:e0:20:1c:0e:2d:00:9e:66:68:53:4c:74:69:1f:36:3c:
be:83:30:2d:11:f0:91:59:73:66:eb:d9:3e:8b:23:76:28:c4:
4a:31:2a:f9:61:56:c1:8e:63:3b:de:6c:b3:52:a6:2a:f8:93:
96:71:f3:eb:e0:f0:53:f2:39:03:ff:6b:e0:ae:ec:0c:e9:b9:
77:f5:e0:3a:de:00:8e:7f:ee:7a:62:f4:91:f9:50:da:70:6d:
b8:76:42:09:b8:6d:51:41:10:22:39:eb:36:86:ad:9b:19:c4:
5b:32:f5:0f:8d:42:4d:f8:aa:19:e5:9b:7e:6c:8c:3f:16:e7:
f0:51:1a:13:e4:13:67:ff:11:02:c3:8c:47:0b:fa:a1:8c:51:
c4:8e:a7:d2:06:7b:bd:2d:00:a1:2a:c9:ff:8c:d3:ba:75:e2:
0f:a9:29:ae:5d:ae:60:69:3d:39:75:81:a0:81:b5:92:c1:01:
88:58:7a:a4:2d:8f:4b:22:63:0f:5e:0d:95:61:fe:67:2f:2f:
e1:21:28:0e:e6:7f:9c:ac:5c:e9:22:0e:79:14:cd:c2:6c:f7:
5e:71:7b:c8:db:9a:e2:eb:2f:ab:60:51:5d:88:e5:54:91:9a:
64:bc:56:af:4c:1e:e8:6b:55:ab:6b:b3:ef:a7:72:52:39:0c:
2c:87:30:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:18:03 2026 by rpki-client