
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
File: sO8BlKUNHPsce5lL7-S-faasGWg.mft (raw, json)
Hash identifier: EKk2AvKR6r9fw0tCgndkzCE3Y78G1WzUoZE/29GGjRg=
Subject key identifier: 43:57:90:D5:43:86:5E:8A:1D:68:31:C3:51:22:4F:21:6D:16:DD:E9
Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
Certificate issuer: /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Certificate serial: 2B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
Manifest number: 0EF1
Signing time: Sun 20 Sep 2026 23:18:48 +0000
Manifest this update: Sun 20 Sep 2026 23:18:48 +0000
Manifest next update: Tue 20 Oct 2026 23:18:48 +0000
Files and hashes: 1: 6zBWFbMSLn7CY8g7XFwQXgg3lJU.roa (hash: FW8FqgVVpR9pwps8b8SMf4uJ9IIZY9NPyf3C7BWhbr0=)
2: AsXQFFllWUs7Lx2gWcQEskwiv3M.roa (hash: lThvz2n55kabVdspT8zJME044hEWcB8DRsCwosHk/i8=)
3: RWcI3c3D2cb2pHayV2z9hsZxDRM.roa (hash: YkOhmc5aWYuRefd/k0j0WFFOaMpfwF671o326eyB4xA=)
4: Zn2SJ1TMU0zx6u0I_qaUFfPce6g.roa (hash: M5/iOfI4wipf8npqmomSntwBh10RaC8oCYOzbM4GaIM=)
5: sO8BlKUNHPsce5lL7-S-faasGWg.crl (hash: yvitPuI5TvjHF4g1pgDp4ZK7tsvsbJkzhF7zN5AG/+U=)
6: vjb4PZQeOkns3j5c6qwyjWaClQQ.roa (hash: jDCMkZhT1mQMLwJ9v5kMXBiE2mTT0xCnvHrFAr9Egqg=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Validity
Not Before: Sep 15 01:41:53 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=435790D543865E8A1D6831C351224F216D16DDE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:d9:8f:ad:0c:fe:b0:a3:86:8d:06:42:b8:
ce:71:47:42:ff:fe:1e:c2:bb:21:31:2d:82:99:a9:
9a:26:76:5c:98:7f:d9:8e:33:dd:03:38:75:79:44:
a0:38:1c:60:34:29:af:00:46:be:c3:c0:7b:d7:08:
cd:5e:df:60:11:62:0a:99:08:e6:15:1c:02:07:70:
a3:1d:91:09:16:8f:c5:b2:81:ce:5a:c5:fd:8f:76:
37:48:e3:b9:da:35:48:18:7e:53:38:b9:71:f6:d3:
fc:d4:c0:b6:85:78:df:90:73:06:5c:69:1a:07:b5:
4a:1f:96:5c:61:92:27:38:19:b9:f9:f6:b8:c7:c3:
fa:98:3c:d8:75:03:6a:64:29:60:89:da:e0:09:74:
21:bf:27:2b:69:a6:6a:a6:47:7b:ef:b9:9c:39:09:
06:26:66:27:4c:66:d4:63:60:aa:f8:0f:2c:a4:8a:
aa:db:85:36:5d:f9:6c:aa:6b:38:8b:a6:06:5a:ee:
e4:44:15:6a:80:da:86:4b:82:5b:88:e9:19:34:78:
b7:3b:41:e4:a6:1d:8f:e6:27:e9:fb:8a:5a:f6:60:
ff:bc:bf:62:35:da:1b:91:5c:20:9b:7f:51:b3:5b:
25:f6:8f:c9:8b:a5:ea:2b:f1:f6:40:ed:f9:97:ac:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:57:90:D5:43:86:5E:8A:1D:68:31:C3:51:22:4F:21:6D:16:DD:E9
X509v3 Authority Key Identifier:
keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:a6:9c:a0:1b:b3:98:34:c4:c7:1b:e8:ec:72:df:0d:d2:86:
17:27:61:55:f3:12:12:92:8b:05:33:bc:e7:ff:bc:ad:02:b3:
8b:c2:a5:39:97:16:4d:25:8f:6e:81:b4:aa:93:34:74:fb:cd:
41:4f:70:b3:c5:d9:73:18:61:ca:fc:f0:ae:cf:a2:3d:80:38:
e9:cb:95:de:bd:03:2b:2a:04:65:de:f8:e7:29:e5:18:7a:02:
cd:79:74:68:b1:4c:bd:b0:f9:fc:6b:5c:be:c6:14:e1:77:ee:
08:b8:68:a8:cd:1e:cc:b4:bd:20:a6:9c:c1:52:e3:5e:70:e1:
ee:5a:25:ce:99:79:b8:4a:61:2e:bf:a3:96:b8:0d:ec:ba:f3:
39:ba:7f:8a:ca:0f:97:c3:a9:3a:a3:97:d7:ff:4c:1d:78:0d:
aa:55:2a:b0:6b:1d:ef:fe:4d:8a:37:ca:10:5e:a2:09:bd:ef:
dd:d1:56:32:8a:3e:95:2c:c8:18:c7:54:55:11:69:bd:f1:18:
32:e5:09:1d:50:49:28:ab:3c:7a:2e:16:95:4c:67:4c:0e:ca:
bf:61:47:bf:4d:df:f1:b2:07:32:39:1a:93:93:10:e8:f6:d6:
df:81:e2:d5:28:0b:4e:fa:ce:fb:fe:99:eb:9b:62:c3:ee:91:
f6:f0:91:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:44:59 2026 by rpki-client