
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft
File: s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft (raw, json)
Hash identifier: /apFhIdZd4Y5F6tzG6y5ble0CtbuOM9ijo1mtdsb7yQ=
Subject key identifier: B4:1B:49:F7:B8:94:A6:63:AC:74:E0:BB:78:BE:E3:B6:9C:A9:3D:90
Authority key identifier: B3:DF:98:D4:8F:44:8B:48:A4:71:1C:87:6C:CD:27:BA:8B:71:85:27
Certificate issuer: /CN=B3DF98D48F448B48A4711C876CCD27BA8B718527
Certificate serial: 08
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft
Manifest number: 035D
Signing time: Mon 02 Mar 2026 05:53:21 +0000
Manifest this update: Mon 02 Mar 2026 05:53:21 +0000
Manifest next update: Tue 17 Mar 2026 05:53:21 +0000
Files and hashes: 1: PKZOGuSM1daMWe_atD4yLJjyIWY.roa (hash: mYCW9R+3RDvom53E61DhCGSZB8pUKkwxRAcw0FVo9Vw=)
2: ouB_bdr1K5eIOYjTEwNp8GHgyMw.roa (hash: u6I9NueSvmkR8yp/TFNjqx+RV8o/wcsfLdAlSlZSVc0=)
3: s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl (hash: XVH+ocBfEP7XwRp7QjE90nl2EXNWvT7j79yBhHd1HCc=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3DF98D48F448B48A4711C876CCD27BA8B718527
Validity
Not Before: Feb 15 01:36:16 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=B41B49F7B894A663AC74E0BB78BEE3B69CA93D90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:40:3c:fb:8a:24:71:be:b8:c5:f4:60:8b:92:
8a:7f:53:ea:cc:5b:61:7a:7d:f3:30:aa:4b:ff:ea:
40:7f:ed:54:63:ee:a3:29:e9:49:a5:90:82:0c:48:
b4:66:e7:55:37:93:cf:19:f9:3e:0f:7c:e1:92:cb:
63:bc:9c:75:a5:32:4b:a6:62:fd:72:46:1f:38:ac:
13:f5:9c:0c:9b:f2:8a:8b:43:25:3d:9c:89:13:52:
5d:ad:06:03:bf:50:b7:43:fc:15:64:7d:8c:17:20:
23:d9:4f:90:02:c7:44:e9:db:ad:03:ab:ed:5a:bf:
f1:d3:f7:eb:5b:29:3e:61:7f:ce:22:fc:10:bb:41:
d0:09:15:44:e8:1d:f4:fd:3b:79:50:81:e6:78:85:
e6:bf:b5:32:7b:7b:f0:72:a2:69:95:c1:87:a8:72:
fe:74:aa:93:c9:12:c9:c4:26:4f:7b:28:bb:8e:fe:
45:e6:3e:16:bd:bd:04:04:d8:03:04:eb:34:81:7c:
6a:5c:25:0b:0d:b7:a1:7b:bf:72:fc:fd:97:c8:d8:
44:19:7c:3c:f2:a6:3e:5a:3e:1e:d0:90:83:6b:00:
d3:66:55:b2:01:b7:30:22:6a:47:4d:7c:d7:04:9d:
16:9b:fa:b8:40:2e:40:47:f6:8f:0e:14:cf:6b:75:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1B:49:F7:B8:94:A6:63:AC:74:E0:BB:78:BE:E3:B6:9C:A9:3D:90
X509v3 Authority Key Identifier:
keyid:B3:DF:98:D4:8F:44:8B:48:A4:71:1C:87:6C:CD:27:BA:8B:71:85:27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b7:28:a7:ce:1d:49:15:0a:d7:46:03:8f:48:77:a7:56:f0:
4c:08:e5:3b:12:f0:98:68:08:54:cd:67:09:69:29:f4:25:2b:
db:21:f5:2e:55:c8:41:fc:c3:44:9f:e0:df:61:7b:c2:ea:e4:
66:23:0b:e8:f4:1f:c4:d2:5b:d0:da:e9:d5:60:8c:29:9e:49:
bf:0a:ca:8a:cf:d7:a2:37:66:f6:b9:20:17:68:47:9b:3a:ee:
29:12:4a:27:a2:3f:39:ca:b5:d4:4c:23:ce:10:da:26:35:e7:
e9:43:2c:fe:ac:f8:04:ff:98:f3:a4:c2:28:72:fa:57:5d:6d:
26:dd:77:00:20:34:61:a8:0b:26:ee:59:dd:6b:c9:05:30:a8:
5b:b5:97:10:66:4f:7e:4a:6f:6a:c7:65:eb:19:60:49:16:38:
0a:01:f3:00:e7:f8:81:b3:ed:b4:2d:88:82:40:84:8b:75:05:
35:21:21:dd:a0:7e:b0:d8:2d:61:ed:39:fc:22:73:6a:23:74:
cf:a1:55:d3:d5:e7:c0:1c:5d:43:5c:78:ab:b3:d5:53:f9:63:
81:de:bc:13:c5:92:09:8d:d5:a4:01:ad:4c:a9:30:bf:04:82:
ff:2b:18:b9:1a:40:ab:02:19:4c:a4:c9:8d:83:61:e1:08:c6:
2c:99:98:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:11 2026 by rpki-client