
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
File: S-pr2KnHhIgpFBmZoBagydGZEq8.mft (raw, json)
Hash identifier: pxHZ0Xghdz0UsOfazF4f+zFDr+8re8eAlOcZoXj/9S4=
Subject key identifier: 88:05:D1:97:AF:6A:98:C2:B2:54:25:D0:95:A1:4A:95:E2:AE:DF:46
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Certificate issuer: /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial: 86
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
Manifest number: 1401
Signing time: Mon 21 Sep 2026 02:37:26 +0000
Manifest this update: Mon 21 Sep 2026 02:37:26 +0000
Manifest next update: Wed 21 Oct 2026 02:37:26 +0000
Files and hashes: 1: -3No4v_sIPA2CX1SnoZwvf9TCq0.roa (hash: KrnP6wiaBVTeitELkMzlpsiiZQLsaL2MzvCN6UklLgA=)
2: -Jcx8rP0Gv20W-OXaTXFw_ELBLw.roa (hash: R8iODMDANf6tIiDP2ObSlIHJbhSAidG9P+QF0RtNIG4=)
3: 3ss85Gu5j6X25mKzb1Zg13Na2pA.roa (hash: ygnTXKejh0gRDeFkUQQJceOE12PkPeDTHLWRVBfNsu0=)
4: 8DbqdOJF-kDXjCliosjSNYL-zls.roa (hash: v+V2pfs4YmMN5+il920VSUBBJv2eDXjn04zeDB0YO7Q=)
5: BfImgGL5NZoLBYiO53pvdTPFhzI.roa (hash: CfgvmUmlD5dJgN4QMCztIQ3WvqNtkhY8yzHEFa4/cJA=)
6: C30Mf9gppmRn4G6qXaU1ckP5-SY.roa (hash: t/M+Z/hQhjlj2c6d9+JfUeTHzs2RTn9qIe/juNTrHdA=)
7: Pk8M5tg7OAadwCsYk_7blX9PDMU.roa (hash: fjmEeHvq6Dp/TzAtAbE9ne/oRvkikgn1nx2Mc9CVX3U=)
8: RxiN8h_pCN_rrs-_Nn9QZuXidUA.roa (hash: dH+Y/x6ELostYuMejTzsZsr0zbDF4lJpW1+RlbGhtjQ=)
9: S-pr2KnHhIgpFBmZoBagydGZEq8.crl (hash: ihrJ5GYq/zb9L8tqc5/EDN36ciYApIOFRNgdfuJ5OZg=)
10: XbZ7gxvwHh6lkBw4GScee8uCVA0.roa (hash: PvA+LKuu609JFX7K0r/27WjL7f2zzNUFPPPAXXAhG0w=)
11: YdI_y697mtsK46UmBUFWB2uU1es.roa (hash: Muv5gj7+5YOY1uK+RgOATOnaDNYVhx3/T/Tq9mQYi2A=)
12: YwZsn7l0NSstMfvr8ntD_lc2trY.roa (hash: kn9+O0+gGpT+6HUpSLxjiSyUy0S3fz+avNssTbHTGQA=)
13: aizhGDmoT4jEJ3jFJVr8R-NpeeE.roa (hash: e49wC5CwEuNtcv9E2pDRUSK730KqAJCIMgNlJNojnY8=)
14: mt_PBO4wAbnfFgzTYMs_YptBovg.roa (hash: nKwcG/HcZlHLIRdOX2/zWUoVI0aSNb7B0uZcv+4N5Sc=)
15: vS0jEecLj5_4NoTq_4NMJocIWOo.roa (hash: QvogR3RjyFcoJpq7o9LoMuW5wDOnX6X1acMOTllDaxA=)
16: xaRiZZ-GBlbzPEAhz-fW20hNKt4.roa (hash: B16KSdNJDoQ5rMNrFEQtmzrM7Y4F61cmgSMlHy92X5o=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Validity
Not Before: Sep 15 01:35:56 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=8805D197AF6A98C2B25425D095A14A95E2AEDF46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:34:67:74:e1:d8:9c:9f:ce:87:c4:34:1f:25:
b1:d9:4c:fb:85:a8:18:bf:28:ad:7f:24:9d:56:ba:
37:a4:e2:2f:34:1a:48:e2:99:e7:56:78:d7:e2:23:
09:f4:b1:ae:35:a2:d2:19:11:fb:87:54:8a:0d:69:
e4:d4:c1:8c:f2:53:c6:6d:91:4f:3a:5a:a4:cc:ad:
5c:16:76:0d:9e:17:f1:95:fd:bd:48:b3:b0:f3:8f:
e4:7d:25:3b:b1:3b:89:12:02:b9:0a:4d:da:f0:5a:
38:b5:ae:44:9c:53:fb:a7:58:e3:39:14:b1:2e:e5:
9e:e1:c6:5d:98:1b:6b:b7:02:3c:0c:ce:f6:55:4b:
38:36:7f:36:d3:4d:25:47:c7:65:c1:c6:bb:b5:6f:
ba:5e:36:9b:23:07:1a:f5:36:46:12:97:e8:a9:1e:
05:e8:c7:f7:02:62:53:fa:ca:18:c4:06:fa:0a:1e:
d5:5f:98:f5:9f:d9:f8:c9:ca:f0:13:8a:10:f3:e9:
65:12:a7:9f:e3:fc:0a:17:25:14:7c:1d:cb:8b:65:
2d:6f:95:4e:1a:a5:8d:5d:59:8a:9c:36:d6:b0:3b:
dd:1a:bc:9e:be:ea:aa:70:bf:3c:96:ec:29:ed:66:
45:92:44:08:d5:a2:9c:e6:5e:cc:7c:51:b1:d1:cd:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:05:D1:97:AF:6A:98:C2:B2:54:25:D0:95:A1:4A:95:E2:AE:DF:46
X509v3 Authority Key Identifier:
keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:8d:36:6c:bd:3f:de:87:80:cd:71:e8:c2:c4:19:ef:47:bc:
f9:23:f6:be:2c:ce:e2:2d:5e:a9:75:fe:8a:bb:50:99:97:4e:
8f:de:69:1c:2f:06:35:75:e5:ec:2c:35:0d:0e:e1:0d:fa:2d:
e8:a1:74:f8:52:cb:27:4b:bb:6c:09:b1:64:bb:44:1f:69:26:
13:21:e5:d5:4b:fd:4e:91:eb:d5:69:63:a7:88:82:da:da:ad:
de:72:10:c7:02:8d:a1:df:48:db:8c:5f:cd:6e:ce:fe:2c:d3:
54:43:06:83:0d:a9:65:ce:fb:96:87:3b:d8:74:e0:a9:1a:f6:
56:70:71:b4:b9:df:9a:7d:1a:da:12:e6:41:5f:74:62:82:56:
fb:03:9d:ec:eb:75:8b:1d:1e:f1:24:2d:28:40:01:f1:57:e7:
c3:c1:1c:a4:a1:7a:a6:4e:24:d4:21:80:96:41:e1:7f:50:ed:
1a:64:60:17:35:f7:54:52:de:2b:6c:af:71:ee:4b:ba:40:9e:
a0:b7:0e:fb:55:c3:bb:59:52:a0:2b:9e:d0:60:e3:d9:22:d4:
25:e1:ff:e0:60:ac:09:7b:98:53:5c:84:1f:a3:b5:2c:ab:5e:
4c:57:24:65:83:20:b4:64:51:96:64:ad:86:c8:20:60:43:08:
04:9c:26:d0
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEJF
QTZCRDhBOUM3ODQ4ODI5MTQxOTk5QTAxNkEwQzlEMTk5MTJBRjAeFw0yNjA5MTUw
MTM1NTZaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg4MDVEMTk3QUY2QTk4
QzJCMjU0MjVEMDk1QTE0QTk1RTJBRURGNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZNGd04dicn86HxDQfJbHZTPuFqBi/KK1/JJ1Wujek4i80Gkji
medWeNfiIwn0sa41otIZEfuHVIoNaeTUwYzyU8ZtkU86WqTMrVwWdg2eF/GV/b1I
s7Dzj+R9JTuxO4kSArkKTdrwWji1rkScU/unWOM5FLEu5Z7hxl2YG2u3AjwMzvZV
Szg2fzbTTSVHx2XBxru1b7peNpsjBxr1NkYSl+ipHgXox/cCYlP6yhjEBvoKHtVf
mPWf2fjJyvATihDz6WUSp5/j/AoXJRR8HcuLZS1vlU4apY1dWYqcNtawO90avJ6+
6qpwvzyW7CntZkWSRAjVopzmXsx8UbHRzdttAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUiAXRl69qmMKyVCXQlaFKleKu30YwHwYDVR0jBBgwFoAUS+pr2KnHhIgpFBmZ
oBagydGZEq8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwNi9TLXByMktuSGhJZ3BGQm1ab0JhZ3lkR1pFcTguY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9TLXByMktuSGhJZ3BGQm1ab0JhZ3lk
R1pFcTguY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTA2L1MtcHIyS25IaElncEZCbVpvQmFneWRHWkVxOC5tZnQwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCjTZsvT/eh4DNcejCxBnvR7z5I/a+
LM7iLV6pdf6Ku1CZl06P3mkcLwY1deXsLDUNDuEN+i3ooXT4UssnS7tsCbFku0Qf
aSYTIeXVS/1OkevVaWOniILa2q3echDHAo2h30jbjF/Nbs7+LNNUQwaDDallzvuW
hzvYdOCpGvZWcHG0ud+afRraEuZBX3Riglb7A53s63WLHR7xJC0oQAHxV+fDwRyk
oXqmTiTUIYCWQeF/UO0aZGAXNfdUUt4rbK9x7ku6QJ6gtw77VcO7WVKgK57QYOPZ
ItQl4f/gYKwJe5hTXIQfo7Usq15MVyRlgyC0ZFGWZK2GyCBgQwgEnCbQ
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:18:04 2026 by rpki-client