
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft
File: hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft (raw, json)
Hash identifier: pNQJaJaHBh3JuKDGOkGdv6iPVD9kVXt3NoQpcTR5u4Q=
Subject key identifier: E0:B1:1D:17:F0:B8:52:90:6E:67:A8:83:94:90:4A:04:7C:E4:2F:69
Authority key identifier: 85:3C:4F:1E:F3:7C:75:0A:48:33:95:69:E5:E6:7C:45:73:FB:AE:6E
Certificate issuer: /CN=853C4F1EF37C750A48339569E5E67C4573FBAE6E
Certificate serial: 0A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft
Manifest number: 033D
Signing time: Mon 09 Nov 2026 23:31:39 +0000
Manifest this update: Mon 09 Nov 2026 23:31:39 +0000
Manifest next update: Wed 09 Dec 2026 23:31:39 +0000
Files and hashes: 1: 3WVjC5G4YGChmiQH3qpb-MxuBz4.roa (hash: 9y53IEkAuPDEiLVpxJzHt/bCNBmCe4WSxmV/A/7JMpg=)
2: 3a2H1gtckhd2mV1Q0O6aWwzlZ_g.roa (hash: xmlBUkj1WkQ38JrI2CTSMsOGjO+J2bPkB6ORosKc0R8=)
3: SAl0_YjrbgEwVAktjuk8xJC_NFs.roa (hash: CZEaqPAg7RHIB2LbFj40HeMTYB9SCkw7LIMoMtzv974=)
4: hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl (hash: TKj8blIummKzZiiHk5r3k41GrrwXU9FK+ksxgy+NLy8=)
5: j9NuYoBI0S0SKTvsdOB2ZI2ejV4.roa (hash: f/JtlBbuCRA/QXmyv5Vu0SpVKfxhhESGoZunkZVeF9I=)
6: zZe6jl3jLMpQsjj7S3ENak3In4E.roa (hash: ljhBnlQqdGzHrCLMEw0ocJrMDwswKriF/4s1DnWL0SM=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853C4F1EF37C750A48339569E5E67C4573FBAE6E
Validity
Not Before: Oct 15 01:35:10 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=E0B11D17F0B852906E67A88394904A047CE42F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:2b:f9:b4:6e:c3:fb:7f:a9:93:77:fc:e1:
4e:20:9d:6c:05:f0:22:ee:91:75:c9:ad:3b:2a:53:
09:ec:3a:a7:68:24:97:23:6e:27:e8:3e:17:9d:bc:
64:23:17:a6:d5:ce:92:56:dc:e3:cb:2c:db:a5:25:
9a:c8:a6:ad:91:e9:9f:1f:48:bf:22:b2:c6:31:71:
8d:79:d2:05:7e:8e:ed:6b:4b:28:92:06:31:54:c5:
c8:ab:6f:d3:36:63:46:79:65:ab:2e:6c:8a:66:94:
74:6b:ae:f6:46:56:86:21:30:da:4e:67:d7:51:28:
b0:2e:75:3a:ea:ce:41:c1:29:c7:06:d0:52:8f:1d:
33:66:7c:46:28:04:7c:64:e0:26:6f:45:15:61:12:
7a:b0:db:eb:9b:95:eb:29:45:90:56:ec:a2:9f:23:
45:5a:eb:34:d9:0f:a8:74:55:ed:ab:b7:7c:96:a9:
8a:70:3c:2f:8d:4b:c0:a5:0b:fc:4f:cb:1e:0d:dc:
60:c8:5c:27:8c:b0:84:28:10:0e:c1:e7:7a:fb:15:
7a:0d:61:0a:82:2b:c6:a8:c9:e2:67:cb:59:c9:d2:
8d:04:7e:f8:d4:ee:7d:4e:52:0f:90:f7:8b:dd:c6:
28:c9:20:25:90:c7:69:cd:77:cd:55:8a:7f:58:7d:
90:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B1:1D:17:F0:B8:52:90:6E:67:A8:83:94:90:4A:04:7C:E4:2F:69
X509v3 Authority Key Identifier:
keyid:85:3C:4F:1E:F3:7C:75:0A:48:33:95:69:E5:E6:7C:45:73:FB:AE:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:c2:3c:0b:4a:7b:54:69:db:8b:4c:35:38:cc:f4:3b:21:15:
68:9d:14:dc:0e:3e:06:ba:3f:5f:e1:22:de:93:ea:e5:ab:45:
c5:ab:e6:27:15:54:13:5f:3b:fa:8a:7b:e5:25:e9:95:9b:df:
cb:a4:50:40:1e:86:05:5c:ae:01:5b:0a:0c:fc:a5:19:9c:cc:
d9:20:88:e6:fa:84:41:58:de:17:45:23:62:7d:c2:ef:52:f3:
a6:b3:12:b8:34:4f:b2:d7:f9:bb:2c:4a:8c:55:92:4e:bb:54:
08:b9:3f:ae:0a:b3:cc:c0:34:98:1d:0c:3a:aa:b0:ad:3f:8f:
62:29:67:8d:4e:49:7d:5b:dc:9b:ee:de:ad:5a:50:0e:12:33:
d8:88:24:7e:0b:cd:a4:81:6a:58:b1:53:d2:51:13:87:4b:57:
f6:68:96:3e:58:d4:ec:9f:c3:9a:a6:1a:29:f5:29:0b:fa:4b:
94:74:ee:e3:88:5e:57:b2:29:62:30:ef:57:db:3b:35:39:85:
16:7d:f7:6e:eb:e8:b7:ea:cf:62:21:5b:2c:bf:b3:e1:e2:2a:
d9:70:79:f6:f8:ce:bb:36:60:7e:36:34:d1:58:34:fb:58:ca:
0f:84:c9:63:ab:14:70:2b:c6:43:ae:0f:a0:37:5b:1d:5f:cd:
e7:c1:97:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 02:12:40 2026 by rpki-client