
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
File: BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft (raw, json)
Hash identifier: 4q5ke0/bx2Klbgge+9fdQqcYlKqphIOaO8XYs4JEulY=
Subject key identifier: 27:15:D4:C7:64:A9:9A:AE:4D:95:45:5E:56:66:40:28:A0:E3:CE:45
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: CB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
Manifest number: 0D89
Signing time: Fri 17 Apr 2026 14:05:55 +0000
Manifest this update: Fri 17 Apr 2026 14:05:55 +0000
Manifest next update: Sat 02 May 2026 14:05:55 +0000
Files and hashes: 1: -doE8Y61pin06oVq3jdDajNNFPs.roa (hash: JvIRuIP8QAj9MDqzcQ/FcXbS7NSZp9492+yKxrN1FxY=)
2: 0j0daBP0db5ZVJQSr-r7nTn_IyM.roa (hash: 5XmtiPmb2bEP/6SJkI0woBYr319gAKqGcD28niNEI7g=)
3: 2Nl--sFTUew5gdslHb50wskB_4o.roa (hash: xPTBSyuOZ2SNTc9d/Io4k4suX0piPAPvpUPDF8q+uXY=)
4: 62XkW8eBJjeOipAR3irxhtIGa0E.roa (hash: hPjEBXDeWIZUteE6TQbTzczx/o/3TnUvClmVvyFyMhs=)
5: BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl (hash: tqRNaIHWS6VXZdAWAscFxendjCW3on/Oi21iIjs3qj4=)
6: Da3eUR_OepYHMyy4E97hjdpjSBo.roa (hash: rrKE99mJkzr/cl0Ga6L9djjnFeGk7Y5j7KL0N08dpuU=)
7: FKenv4QXCJ4U0PSdg7qfMx00h9U.roa (hash: +2aGW9eUtdcIs4JDNMxuc49v+d2VoDX/sDykYHH6Wa0=)
8: FV3DzycBEG5GHRBhc9ZJ1MDS6cM.roa (hash: /lJO3aMWN/rIq1XLnFJC8ZJHFeOAw3fUNXy7WPaadtw=)
9: I-oozCfWXE-lCdy7kIDQU6AkYFI.roa (hash: Dy2wp5SVs0F9NH7amueslr6RPElLxpcVrnl18LDJlCU=)
10: RTOwU7Imd3AesfhB3UhvlRjzGLY.roa (hash: gWDDmhl8ZacRMnBoYXivsJLEWPJHDi2DbEVHwI1jHJM=)
11: T0AGha7SFMPC1fiTD8WgLKGPdJI.roa (hash: lE9zfsyo0chNdeIpIRn5wmae5TdHGQ5AaVmpO+qbhu4=)
12: eMjYtMAMeFTzh4qBI4KiNoKcd7k.roa (hash: dmm/Ew0XOIs8S8PEx3HRyjdkc4A3pwzas+WFw+0oMd0=)
13: nqVF-Is06obxv18metr5M92h5h4.roa (hash: 2AI11DXpqAZTE2lOR2Ww0OqbD3RiGqd0tjsF3ivhV2g=)
14: sZqxWHU_R-ZKySo6fEoTZ7B7m6I.roa (hash: VUPOcCOPPUB99QFIh2Y3YYUrm5m2bajnBlvLePY3akg=)
15: toYxsCxjAKW4AnlhCgsq_ZBJ5KA.roa (hash: sGNI6B0W1hhLqzeNH4XzeQ3zqN8qFgRijJ1WSduUvjs=)
16: uKAI9O1ep1YJ-1VJrFQHLyH35qg.roa (hash: +OE/5OkzkZcHOLy3kOe9x5choNoFozJYt8TVvhw0myo=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Apr 15 01:35:01 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=2715D4C764A99AAE4D95455E56664028A0E3CE45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:95:0b:b8:b4:39:c8:7d:ce:a8:84:46:5f:
8a:d4:14:92:8f:67:6c:cf:ae:04:87:e8:b2:fe:0e:
3d:ac:96:c5:22:dc:2a:80:44:a0:79:71:f5:03:bd:
6c:91:d6:88:44:60:6d:4b:02:fc:b7:1a:9f:71:5d:
e2:58:a2:a7:5c:6f:c6:d5:55:8a:73:34:ae:fa:f3:
03:d9:b2:54:1c:b5:65:48:5b:bc:dc:83:6b:a0:58:
54:cf:b1:95:69:f7:6d:6f:e5:f7:6a:35:d0:a6:4c:
ac:a4:9a:45:5b:ee:09:5a:6f:50:38:71:53:d3:ba:
ad:d8:14:4c:a4:1a:e9:3d:60:bd:ca:44:1d:99:e7:
53:6b:90:f2:9c:7a:74:17:34:49:bf:6f:87:85:bd:
47:1e:bb:ad:41:a6:0b:64:d6:5e:d7:74:fa:eb:11:
63:06:02:a0:9f:55:1f:4c:72:b7:3b:9e:0b:40:ee:
2d:a5:2e:30:1c:27:d8:85:d9:f9:b5:17:86:81:10:
af:36:86:6a:27:5a:81:0e:97:b2:06:c5:2b:25:56:
9e:6e:9a:85:a6:57:8c:d7:19:f1:ed:6c:1f:55:cb:
1e:4d:81:25:4d:c9:66:a8:9f:d0:49:b2:d9:59:e0:
8f:cc:2e:59:f7:54:d6:76:30:04:aa:16:49:82:de:
d8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:15:D4:C7:64:A9:9A:AE:4D:95:45:5E:56:66:40:28:A0:E3:CE:45
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:07:5c:a6:56:9c:b0:99:05:b6:a9:d0:80:62:6c:d8:92:e8:
2d:73:25:db:5d:43:56:14:ea:ea:50:97:16:56:49:81:70:7c:
7a:e2:93:8b:ce:57:9f:70:35:d8:e6:41:7b:68:db:9c:8d:80:
20:5d:db:74:11:2d:7c:8c:11:db:a6:eb:4f:9d:3c:5c:59:2e:
42:11:02:a2:14:1a:c0:8b:42:7a:71:c5:48:1e:68:1e:6e:f6:
b8:40:fe:bb:18:ae:7d:ac:da:04:28:48:bf:33:a7:3e:ce:61:
cd:27:b9:e8:02:7b:f6:0c:77:41:d1:1d:48:5f:f6:bb:68:ab:
f1:a9:bc:31:59:56:79:4c:5e:b2:48:ea:d6:e0:50:2b:f3:0b:
de:e2:9c:63:71:22:73:24:5b:e7:b2:7b:3a:9d:5f:a9:b8:fc:
c8:53:c5:1c:22:d3:e6:11:67:29:84:e6:b3:b7:09:44:97:38:
4d:f2:e1:52:f8:f4:04:8f:8c:34:df:0b:dd:8c:a1:d6:64:2a:
72:2f:3d:16:d4:fa:c4:69:d6:05:95:c8:19:3b:94:ac:e7:6c:
ec:86:95:25:9d:b6:4f:bf:ae:03:cc:3f:69:7e:07:f8:76:b9:
ec:37:9b:50:f4:f7:ee:e1:7d:23:12:ef:e8:97:e0:55:9a:63:
9e:e9:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:34:07 2026 by rpki-client