
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
File: if8a6GSr-fEmFOMHZAT1VtVv-oI.mft (raw, json)
Hash identifier: 7iAimExwmpZhtAJX6wrZFIQCRrx6u3EYQsIQ/t38vIw=
Subject key identifier: F1:90:9A:A8:7C:86:7B:21:FD:B4:D1:14:F2:2D:6D:F0:B3:2E:F5:17
Authority key identifier: 89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82
Certificate issuer: /CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
Certificate serial: 29
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
Manifest number: 0FFD
Signing time: Mon 21 Sep 2026 14:56:27 +0000
Manifest this update: Mon 21 Sep 2026 14:56:27 +0000
Manifest next update: Wed 21 Oct 2026 14:56:27 +0000
Files and hashes: 1: Hwp12BnVa8T9EGtoKcfBISvmwys.roa (hash: p1IObtWpcX0K5b7f/1RAekirGBh13TGtNxhqa4S8aHA=)
2: PH1CX4ddOaS4bNfJwTaS8xWR4K4.roa (hash: V9jSdj9pVJOUZJYX61Z0MQqPTDGa4dLV+qC0kvIIBmw=)
3: if8a6GSr-fEmFOMHZAT1VtVv-oI.crl (hash: UrcNLsCBv6+V0PcCAmCeLAWqT+jZPiMs2r3lzXkTBRQ=)
4: qEFFXx0Ti8chuDJCWuSs5UZ8JSM.roa (hash: i87uZtQUtHKherObZz7uf34kxVh1naUYaGxWQpc8tNU=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
Validity
Not Before: Sep 15 01:33:38 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=F1909AA87C867B21FDB4D114F22D6DF0B32EF517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:e0:34:8b:f8:f6:49:bf:f9:7e:b7:2b:fe:
d8:d9:31:2c:93:47:7c:cb:15:ad:10:b8:16:94:05:
3d:fb:39:81:24:32:db:9f:20:5d:e4:b1:1d:77:47:
45:05:61:00:dc:b9:8d:b0:63:64:7f:a9:d6:22:c4:
93:cd:e5:8d:e7:c2:3c:d2:32:e1:4f:a4:50:36:42:
c9:f7:09:e2:1e:bb:f1:52:7e:c1:ca:4b:c4:29:6f:
40:9c:05:45:de:be:8f:cb:81:f0:6c:dd:f0:79:6f:
8a:f7:8a:03:a9:ec:c6:f9:8e:be:e9:ba:c6:3e:7e:
80:ff:cc:c3:39:76:72:ff:12:2e:f3:46:6e:2a:04:
ca:43:d7:8b:18:22:91:b0:77:3f:45:87:1b:f3:b7:
e1:94:31:1b:4f:40:6a:7b:1f:f4:10:24:e0:7b:df:
bc:ad:ef:52:63:d3:15:e6:50:c2:02:08:35:85:67:
64:0e:c6:db:61:9a:25:d4:c8:ff:ab:0b:b5:f1:9f:
43:20:95:aa:7e:d1:72:6a:77:10:fa:4b:8f:bc:3d:
03:eb:84:32:3a:e8:ca:6f:83:c3:b4:28:ac:b2:68:
89:2a:98:af:78:2e:bd:80:45:06:3c:54:ae:dd:36:
35:06:7f:a9:fa:98:3b:3d:87:fc:aa:55:2b:e0:15:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:90:9A:A8:7C:86:7B:21:FD:B4:D1:14:F2:2D:6D:F0:B3:2E:F5:17
X509v3 Authority Key Identifier:
keyid:89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:a2:e4:79:75:64:70:e9:31:11:91:64:fb:42:35:f2:64:02:
45:9d:13:e2:f9:63:97:ec:e4:cb:f8:bb:8b:de:12:a1:54:9f:
f6:05:66:c9:88:bd:72:36:5c:15:63:17:4e:69:f5:eb:e6:49:
c5:06:ab:61:66:ec:32:42:d9:4c:dc:8a:3b:4c:eb:f0:be:fc:
dc:96:56:4c:a0:a6:3e:ef:00:ae:73:1b:65:ba:f4:09:fc:ba:
72:2d:f5:97:b2:04:0d:9f:93:33:cd:0e:c2:76:f9:53:83:23:
3e:2c:dd:9e:6e:28:07:c2:69:39:a0:b2:07:7a:07:a3:c8:59:
cd:d0:1a:2b:d6:df:47:4e:5d:30:6b:2d:a0:78:7f:8a:98:a1:
87:f6:fb:bc:c4:58:19:15:ff:4e:6d:51:9c:84:c9:f2:44:63:
a8:f8:a0:45:ac:61:ff:d3:a0:ca:cc:ae:11:da:9f:5c:50:b4:
57:80:54:66:ad:4e:65:6c:8e:ce:bb:d6:07:54:e9:a4:2c:fe:
62:24:e3:68:84:5e:eb:59:f2:63:68:7e:6c:3f:93:3e:85:00:
9b:4f:04:00:10:2d:76:eb:5d:b1:63:2a:cf:c2:0e:a9:67:dd:
2c:eb:0d:22:cd:de:54:f2:5e:f2:c4:c4:ff:e1:a2:f0:71:00:
10:42:17:f9
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OUZG
MUFFODY0QUJGOUYxMjYxNEUzMDc2NDA0RjU1NkQ1NkZGQTgyMB4XDTI2MDkxNTAx
MzMzOFoXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoRjE5MDlBQTg3Qzg2N0Iy
MUZEQjREMTE0RjIyRDZERjBCMzJFRjUxNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMIj4DSL+PZJv/l+tyv+2NkxLJNHfMsVrRC4FpQFPfs5gSQy258g
XeSxHXdHRQVhANy5jbBjZH+p1iLEk83ljefCPNIy4U+kUDZCyfcJ4h678VJ+wcpL
xClvQJwFRd6+j8uB8Gzd8HlviveKA6nsxvmOvum6xj5+gP/Mwzl2cv8SLvNGbioE
ykPXixgikbB3P0WHG/O34ZQxG09Aansf9BAk4HvfvK3vUmPTFeZQwgIINYVnZA7G
22GaJdTI/6sLtfGfQyCVqn7Rcmp3EPpLj7w9A+uEMjroym+Dw7QorLJoiSqYr3gu
vYBFBjxUrt02NQZ/qfqYOz2H/KpVK+AVNFMCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBTxkJqofIZ7If200RTyLW3wsy71FzAfBgNVHSMEGDAWgBSJ/xroZKv58SYU4wdk
BPVW1W/6gjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyNTAvaWY4YTZHU3ItZkVtRk9NSFpBVDFWdFZ2LW9JLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaWY4YTZHU3ItZkVtRk9NSFpBVDFW
dFZ2LW9JLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjUwL2lmOGE2R1NyLWZFbUZPTUhaQVQxVnRWdi1vSS5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5ouR5dWRw6TERkWT7QjXyZAJF
nRPi+WOX7OTL+LuL3hKhVJ/2BWbJiL1yNlwVYxdOafXr5knFBqthZuwyQtlM3Io7
TOvwvvzcllZMoKY+7wCucxtluvQJ/LpyLfWXsgQNn5MzzQ7CdvlTgyM+LN2ebigH
wmk5oLIHegejyFnN0Bor1t9HTl0way2geH+KmKGH9vu8xFgZFf9ObVGchMnyRGOo
+KBFrGH/06DKzK4R2p9cULRXgFRmrU5lbI7Ou9YHVOmkLP5iJONohF7rWfJjaH5s
P5M+hQCbTwQAEC12612xYyrPwg6pZ90s6w0izd5U8l7yxMT/4aLwcQAQQhf5
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:55:42 2026 by rpki-client