
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.mft
File: 0PVi_zb3EaPt-Z_IHbVO02Y02LE.mft (raw, json)
Hash identifier: 8zxLm6m37BMLbXvDRPOaQxQh0zMCNJppnpyLsiGQboA=
Subject key identifier: 29:68:31:0B:D2:94:6B:78:90:CE:13:17:42:7D:F2:DC:A0:D6:39:BC
Authority key identifier: D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1
Certificate issuer: /CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1
Certificate serial: 72
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.mft
Manifest number: 15D3
Signing time: Mon 21 Sep 2026 10:19:44 +0000
Manifest this update: Mon 21 Sep 2026 10:19:44 +0000
Manifest next update: Wed 21 Oct 2026 10:19:44 +0000
Files and hashes: 1: 0PVi_zb3EaPt-Z_IHbVO02Y02LE.crl (hash: TYy9YQ6x2Lr/QBB/axtjJ/y26NMxqhodBEgnTZZBiIk=)
2: 2nrplgdqWUaDgwgcInAOISxlFHw.roa (hash: YZHc/1BLr1jTCsb+NZJr8KQVZrd/F1fKN3qidLiGhsQ=)
3: 94k6tFyG1MVPn35qyHXLQDpGZXs.roa (hash: u7YgjUzH8zVzbGTsQEGytetkrBUKp0PqguiltTMeLCg=)
4: O_FA6IEp23m3aYuiGPPh4P7YVIM.roa (hash: T81NBeSYdX7wNSLaj9VvYDC0KD5x1R+aO9St5tEjVpY=)
5: PE0C-Mq4rNGylsTebmU5wsRtle0.roa (hash: Rho9BE1M2Ip2XEdgqlzd9gud866MHmBENezo0dO2OM4=)
6: Riq8n_CQdFWWu8W1czs0EHozPbw.roa (hash: 7m37JBD7ex2T3daphwcCzdej+sht4aK9U2D5omdf+NI=)
7: Wie7LfXBVjtOfuxvUligCCYaZrg.roa (hash: cuMHDTs+8C1P94cE7ymGSvVRrRRBpE09Jcz/LIH416U=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 13:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1
Validity
Not Before: Sep 15 01:31:05 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=2968310BD2946B7890CE1317427DF2DCA0D639BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:6a:de:5d:70:1a:bc:e8:62:8a:20:21:14:
1e:0b:1d:64:74:05:4d:31:c6:e3:a4:d0:62:33:c6:
90:01:0e:c1:bd:ae:e9:02:18:46:72:5b:75:43:ab:
c3:4a:91:4a:3b:92:af:bb:cc:83:3a:42:2a:05:73:
3d:37:32:d7:78:80:aa:01:f7:04:d4:6d:76:7e:b2:
6e:96:cc:03:3e:38:60:65:e5:a6:66:d8:95:68:cf:
24:07:1a:a4:55:20:ee:1d:91:3c:e3:d7:f5:54:3e:
b9:fe:ff:ea:e2:78:59:16:4d:7d:da:41:b1:41:58:
1c:a2:d9:3a:22:48:3c:18:74:7b:c6:90:27:49:68:
e1:88:9b:35:b4:3d:00:ba:64:d3:10:68:ec:cc:70:
88:eb:87:34:fc:cd:14:a5:7e:ae:31:dd:89:2c:a9:
6b:e9:34:2e:71:a5:37:d4:7d:56:7a:8e:84:fa:84:
ac:69:04:41:da:a9:b7:6b:c4:91:27:8b:d3:71:63:
e7:ae:52:c5:ff:b0:ce:a5:55:a4:b7:03:4b:cf:35:
7d:86:5a:99:7e:a8:b1:61:e3:46:19:29:3a:ee:71:
5d:44:ed:02:91:38:c8:75:de:46:d5:28:72:8d:fc:
22:ac:da:fb:9f:3e:a3:59:13:36:64:91:62:d4:c5:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:31:0B:D2:94:6B:78:90:CE:13:17:42:7D:F2:DC:A0:D6:39:BC
X509v3 Authority Key Identifier:
keyid:D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f6:ef:1f:a7:df:61:ac:8e:77:1d:db:7c:e4:ed:ea:de:c0:
3b:d0:bd:f7:c1:d5:3c:f0:e3:8b:57:8a:3a:e0:3d:e1:0c:0e:
d7:b0:5e:8f:0e:7c:37:31:90:48:6a:db:85:68:26:a0:c9:fc:
df:41:8b:ad:91:7e:80:8a:8d:8b:40:6e:40:fe:79:64:67:bc:
5d:6c:c7:71:59:f4:dc:7b:41:3a:54:8f:8f:7b:6b:b9:29:86:
8a:b9:d3:c4:8d:bf:38:8d:82:45:57:64:35:5f:7a:1e:9a:e7:
26:ea:50:86:bb:57:11:17:bb:79:d7:0f:d3:1b:58:b4:cc:5a:
db:41:9e:66:95:7b:52:49:06:fe:04:e0:5a:eb:61:fe:0b:24:
83:b1:95:2b:ec:80:1f:5e:15:67:4a:14:74:b1:aa:dc:01:e7:
84:b1:c1:36:5d:e7:e4:94:60:21:10:46:02:a6:76:d3:19:48:
a6:b8:01:17:65:6c:f3:01:1a:97:40:b6:a2:e6:78:30:cb:d8:
e1:ab:63:d1:d6:f8:e8:56:5e:72:b4:7a:73:c1:7e:f0:8e:e8:
19:06:dc:96:f4:30:c9:42:40:3d:a8:4e:47:4b:93:17:a5:fd:
93:17:7b:95:80:22:2f:b3:08:36:3c:b6:29:08:f1:9d:68:c5:
ac:30:7d:3e
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMEY1
NjJGRjM2RjcxMUEzRURGOTlGQzgxREI1NEVEMzY2MzREOEIxMB4XDTI2MDkxNTAx
MzEwNVoXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMjk2ODMxMEJEMjk0NkI3
ODkwQ0UxMzE3NDI3REYyRENBMEQ2MzlCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANNFat5dcBq86GKKICEUHgsdZHQFTTHG46TQYjPGkAEOwb2u6QIY
RnJbdUOrw0qRSjuSr7vMgzpCKgVzPTcy13iAqgH3BNRtdn6ybpbMAz44YGXlpmbY
lWjPJAcapFUg7h2RPOPX9VQ+uf7/6uJ4WRZNfdpBsUFYHKLZOiJIPBh0e8aQJ0lo
4YibNbQ9ALpk0xBo7MxwiOuHNPzNFKV+rjHdiSypa+k0LnGlN9R9VnqOhPqErGkE
Qdqpt2vEkSeL03Fj565Sxf+wzqVVpLcDS881fYZamX6osWHjRhkpOu5xXUTtApE4
yHXeRtUoco38Iqza+58+o1kTNmSRYtTFp90CAwEAAaOCAfIwggHuMB0GA1UdDgQW
BBQpaDEL0pRreJDOExdCffLcoNY5vDAfBgNVHSMEGDAWgBTQ9WL/NvcRo+35n8gd
tU7TZjTYsTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTM5LzBQVmlfemIzRWFQdC1aX0lIYlZPMDJZMDJMRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBQVmlfemIzRWFQdC1aX0lIYlZPMDJZ
MDJMRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MzkvMFBWaV96YjNFYVB0LVpfSUhiVk8wMlkwMkxFLm1mdDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAD/27x+n32Gsjncd23zk7erewDvQvffB
1Tzw44tXijrgPeEMDtewXo8OfDcxkEhq24VoJqDJ/N9Bi62RfoCKjYtAbkD+eWRn
vF1sx3FZ9Nx7QTpUj497a7kphoq508SNvziNgkVXZDVfeh6a5ybqUIa7VxEXu3nX
D9MbWLTMWttBnmaVe1JJBv4E4FrrYf4LJIOxlSvsgB9eFWdKFHSxqtwB54SxwTZd
5+SUYCEQRgKmdtMZSKa4ARdlbPMBGpdAtqLmeDDL2OGrY9HW+OhWXnK0enPBfvCO
6BkG3Jb0MMlCQD2oTkdLkxel/ZMXe5WAIi+zCDY8tikI8Z1oxawwfT4=
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:17:33 2026 by rpki-client