
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
File: HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft (raw, json)
Hash identifier: 1BQJCJA0UuyHYCWPSPjI6l3+QyGtVGcwJ67QMWwzjXQ=
Subject key identifier: 6C:AD:96:DC:D0:75:CD:5A:F9:6A:4F:C8:4B:0B:AE:0E:2B:D6:10:70
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Certificate issuer: /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial: 4F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
Manifest number: 1038
Signing time: Mon 21 Sep 2026 15:00:19 +0000
Manifest this update: Mon 21 Sep 2026 15:00:19 +0000
Manifest next update: Wed 21 Oct 2026 15:00:19 +0000
Files and hashes: 1: 8qFkll6FOXCV04OT8vEs5GqkNZw.roa (hash: lyXGLw4RH7hpQHci5LoUbv7r91SVyJOwvDO7QAIrSYA=)
2: HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl (hash: ekhjG71uF0iyj+lDvd4KJXd1W7fcJm85ZI00FF9nnmc=)
3: LgsUxyIlHoiY4KPk4BJxh6UFwvs.roa (hash: E8b6/oHsZ3N6i3s6fhNzAxlR5QZ07SxqHkAIGUXMLnc=)
4: Ll9H7u9laMcyvpYN4DgKOKBe6-A.roa (hash: RABLuOgCix94KpBPH+AG3L0BC2F14D90V+SZWw5eU5U=)
5: PYHQqXEPUgbU1yzPth4svmv4qRU.roa (hash: 01hAtBxYJSyFIwmkc8brwApiiWMpWL79ra64DMKKO2g=)
6: W5hxQ96Tpiz5CbOIdxHiBGLUT6k.roa (hash: L/xseV4VXeEqzPlMvTPsUL7HgJtHphOwfD62dNaVM2Q=)
7: WQp3KdeQf9T4PXnNCdmQQMEsN-w.roa (hash: KQr2lUVZBiP9RpFx9l6bbnUM7WXaFHSDEx/kDKOiUhc=)
8: mv51G69NHQhcKJx07hhU_5yerZE.roa (hash: EZahwTHlby6ESCG2HJ3bNgGp1vl7ShlUknUhpxgX5I8=)
9: y-dp2Vmnijdc-hgdXScbm5LJCYE.roa (hash: ktIeF0aQNwF0entVJ8PcsnqErwVFsu0octuG37c/pm8=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Validity
Not Before: Sep 15 01:38:38 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=6CAD96DCD075CD5AF96A4FC84B0BAE0E2BD61070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:89:f0:69:7a:1f:58:dd:27:ee:25:a6:1d:
5d:f5:b8:26:03:1c:09:4a:d2:4b:96:83:70:09:df:
c2:c8:01:78:cd:95:e4:1e:60:68:f0:be:a6:91:27:
2c:6e:8a:35:82:b1:8a:61:a9:7b:f0:7c:1b:0c:fd:
f8:f1:6b:79:02:c6:51:74:d1:b7:b0:3e:12:0b:c4:
a1:2e:56:3c:56:56:74:d1:26:62:aa:41:53:f9:c2:
b7:49:4e:fc:28:f6:0a:95:30:3b:d8:d1:36:eb:1f:
0e:ed:0f:95:7f:3c:c8:06:47:4d:09:7d:23:a9:c6:
4b:d7:be:95:96:8f:32:88:f4:d2:67:eb:de:5f:dc:
7e:1f:c1:bc:a7:1a:96:6c:99:d7:1c:8b:45:1e:b3:
e2:47:b2:7f:b1:6f:99:25:a9:3c:ab:30:2f:e5:45:
84:ed:4a:11:1c:81:45:b5:73:8a:42:b0:80:0c:a4:
ff:26:27:67:c3:7e:4f:cf:39:90:ef:eb:e8:a4:55:
2f:c8:20:9d:5d:0c:3a:3c:40:1c:5c:a4:03:fd:f4:
61:75:f6:8a:23:c7:1a:88:80:73:cc:87:ff:6a:0e:
24:18:d0:14:96:37:3e:8a:eb:5f:d4:75:e3:8e:ce:
6c:eb:cf:75:a9:22:3b:03:8e:9d:51:f2:bf:d3:6a:
30:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AD:96:DC:D0:75:CD:5A:F9:6A:4F:C8:4B:0B:AE:0E:2B:D6:10:70
X509v3 Authority Key Identifier:
keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:64:5d:66:e7:dd:5d:9b:91:07:a2:b8:97:d0:de:ea:3e:ed:
cf:d4:35:a4:87:e3:84:c2:1f:4d:3a:1d:50:b6:19:61:83:0d:
57:b0:4b:4a:10:9f:ae:58:8e:c5:78:d8:d9:de:29:65:ec:58:
aa:f6:26:2a:1a:b0:3f:7e:dc:0c:00:b6:80:1c:17:94:ad:0d:
f8:c9:bd:74:c6:43:06:a6:0c:e0:c7:f8:57:04:6e:97:70:07:
33:7a:64:7e:9b:1c:ee:f8:05:69:a4:7b:00:13:eb:b3:9c:51:
e8:97:94:76:fe:8e:de:7c:06:4e:db:7b:ff:30:f8:83:b4:cf:
4a:75:63:f3:de:2d:97:e8:82:8a:d2:38:01:31:6e:49:87:9d:
71:b2:c7:5b:6b:12:2f:4c:a4:0a:44:a7:52:72:1c:58:88:e3:
7a:6a:2d:c7:db:f9:81:3f:cb:6f:75:6b:d5:dc:02:08:83:e4:
38:40:94:27:f7:e0:c1:25:22:9f:9a:9a:e9:ae:89:1f:13:8d:
3f:69:94:5d:49:68:26:e6:9b:91:b2:4f:29:79:00:cb:57:24:
40:b6:a5:99:26:6f:09:a8:6b:08:1e:c3:44:ed:21:ba:4f:fd:
80:1b:89:c8:d2:ac:6a:16:38:d5:62:0a:99:d8:12:be:a8:f6:
93:24:1e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:39:32 2026 by rpki-client