
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
File: 0imUh5wlgSP_oJfoTgU3X2ClkaU.mft (raw, json)
Hash identifier: XUGbjXIigEBdasOk3JMru8XqgJEIC4C+zQXSFwFzcsk=
Subject key identifier: 39:D1:00:CF:01:51:78:F8:85:34:72:CD:78:62:6D:69:6B:55:E2:13
Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
Certificate issuer: /CN=D22994879C258123FFA097E84E05375F60A591A5
Certificate serial: 22
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
Manifest number: 08D5
Signing time: Mon 02 Mar 2026 13:48:41 +0000
Manifest this update: Mon 02 Mar 2026 13:48:41 +0000
Manifest next update: Tue 17 Mar 2026 13:48:41 +0000
Files and hashes: 1: 0RzMqK9UrKU_S1S7X-mYhs1lxys.roa (hash: OswmE36uvavuTyDR4N5iQvMH5IEwHuAJxabNF993Wss=)
2: 0imUh5wlgSP_oJfoTgU3X2ClkaU.crl (hash: Y6M52OfgiD/hEceR4s/NRv7u6C3jLVc7lNtx36xbb74=)
3: 2Fgq5yO9sEISWrE57GhxAYvKjJY.roa (hash: iUxKgnNgDWvBt3TKp6bbhNo3+b6ycKMX+YdGESKxaq0=)
4: A3Oevf-hjgx1oygSRBBScIBK3jo.roa (hash: WnosYAFLcRRMpn4IrT1OBrLiltG9N+UqV4vRZwcJbgc=)
5: GuImz6n15TZRKw9PST-SDAlYfvM.roa (hash: nzUkAXNlwIiF0YYCAIWghEG9oKXOMCQHSCX3+Q1RD3M=)
6: I7y2yw4pyAPYf-lfPqDUcj4u7Uw.roa (hash: pXnKZKWJscq3M7ThJx6uwwZyHQVysUoxeacMC59jISQ=)
7: PmU4tFeEK_j1rHiRRkmOwo6pbfE.roa (hash: xPkkyXeJCy5/d3ft4uanVpKcLktOt64SDLVOdZsk5r0=)
8: gEFUjoGYf7L2DKOP9yOA0iCzbRA.roa (hash: /xUk9zb0NdQ0SNQQVGbcyCtO0g7U/m1gpKwbFiakTxE=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5
Validity
Not Before: Feb 15 01:41:10 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=39D100CF015178F8853472CD78626D696B55E213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:36:3d:e5:15:06:be:94:60:db:06:fd:e0:
f8:3f:60:b4:9d:5f:68:f0:00:74:28:20:55:f9:b0:
cc:08:3a:24:ac:e2:54:da:21:dc:9e:e3:5d:25:fb:
ac:5c:d0:cb:1e:a3:59:f5:f8:20:df:21:f7:36:03:
73:26:0e:10:6b:2a:a8:20:0b:1e:be:1e:b4:e0:d9:
da:d9:81:8a:c5:91:b5:2f:06:e2:71:ef:80:52:22:
36:b8:15:42:3a:f4:36:35:bc:db:6a:3d:34:77:af:
a2:35:fd:5c:38:7e:96:74:3f:dd:e8:5e:4d:54:5f:
86:a5:82:8e:27:d4:98:64:2b:80:bd:77:40:e9:3b:
90:fc:f1:fb:f5:c4:16:5f:7a:a8:f0:53:f1:1e:2d:
b3:3a:fd:0e:66:49:dc:a6:67:8c:19:55:59:84:06:
6d:98:a2:36:e0:f4:de:ff:b4:17:51:f0:3a:59:7b:
98:78:80:9d:f2:93:1e:7b:cc:fd:92:ba:37:99:fb:
c1:d1:8f:2e:91:5d:1b:cd:c5:91:e5:fb:f9:4a:89:
42:82:59:03:a3:0d:16:5d:a8:17:dc:a5:69:58:7d:
68:c3:b2:ed:3f:6a:3d:2b:a2:18:0b:55:d2:a7:e3:
ef:f4:d7:6e:bb:d0:ed:17:54:b1:46:61:af:f7:b0:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D1:00:CF:01:51:78:F8:85:34:72:CD:78:62:6D:69:6B:55:E2:13
X509v3 Authority Key Identifier:
keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:9a:b1:1c:36:93:06:c0:17:cb:32:f9:8c:37:54:1a:e7:97:
59:39:dd:57:10:4e:b5:12:a8:a2:64:d9:06:cd:37:bf:d2:48:
20:7f:50:59:82:b8:10:a4:e0:36:9b:b8:a6:97:35:0f:e1:ea:
e9:45:3b:04:c6:58:cf:d1:eb:5c:e1:db:e9:33:96:aa:83:36:
a5:b5:ba:3d:70:d9:59:50:1a:3e:1e:71:f8:4e:99:7e:55:1d:
7e:74:b3:73:2a:c5:2a:31:bc:75:24:0c:72:0d:95:18:b0:e8:
08:cc:7a:ef:28:fb:46:ec:26:7c:fc:20:30:41:84:d3:1e:75:
f3:76:13:ec:c0:f6:46:12:d1:f1:73:45:08:01:4e:8b:06:0f:
61:8e:0d:a9:a8:35:18:75:1b:4c:80:f4:83:38:03:18:82:75:
91:4a:8a:a0:bd:94:a9:0e:bc:6d:ad:62:7c:78:b7:65:54:c2:
bd:1b:f8:bf:35:e5:7e:67:8d:d1:a0:cd:5d:aa:f1:1e:2c:f5:
35:cb:98:47:4a:4a:2b:82:44:0c:26:fa:2b:c7:d1:03:c4:43:
91:9a:91:6c:1f:a1:c8:65:9b:8b:89:40:ea:68:36:fd:77:77:
df:15:da:a3:84:70:c8:98:51:8c:49:43:db:4f:6c:d7:fa:3b:
74:b5:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:37 2026 by rpki-client