
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
File: I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft (raw, json)
Hash identifier: fBKiy45Ko0mOXIljJsPN/dcAW1tHZpbiPRXqiPh0SnI=
Subject key identifier: ED:E3:76:CC:D5:7F:D3:28:8D:9F:74:AA:EF:09:F4:76:3D:4F:75:AC
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Certificate issuer: /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial: 49
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
Manifest number: 103C
Signing time: Mon 21 Sep 2026 11:08:18 +0000
Manifest this update: Mon 21 Sep 2026 11:08:18 +0000
Manifest next update: Wed 21 Oct 2026 11:08:18 +0000
Files and hashes: 1: 9_VXatsk8sE58JrqjYQRkk5bYO8.roa (hash: PV3DrXuoBLbhNAkBpD4/nc5P9Ao6UNX+C7Ixo8Xj3bk=)
2: I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl (hash: RfcSquqp24chvkz9rDjOnBL30V8mMSqBUurN1Z3YgFA=)
3: LaWA04ddbP_pz-OgoAPs5LuLyT0.roa (hash: gMZnRxYTs5woAjJSR2uP9hQcnRk5wTzHyXCGBvYe2VE=)
4: P7YnGxmL_Emd9zetq0ELA8lyVr4.roa (hash: PfQeDOV2MTUTU+jVtD7vSdrBSArqL9E1LWXx41pSRO4=)
5: Vn_EN-HiOgU4yCueybNZBruFgSc.roa (hash: dhYAf3jQBj2LJ8E8ZkDPXMAgwh4WTIw4RG3qd2+Iwq4=)
6: WrMft5e4PnPgMY7N6cMZBaUMZ4c.roa (hash: xNwv/t3ZhrBuwnOEPs1cLgFUpEM9FhAeFNEugYAPzBk=)
7: w0T4eyQO7Yiu7XHBRl3zS9JPAXc.roa (hash: J3AKkOSall1VthYvbjdBmOey3tnE15sBqE3wR81j8DE=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Validity
Not Before: Sep 15 01:38:20 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=EDE376CCD57FD3288D9F74AAEF09F4763D4F75AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:ec:4f:b6:d1:d7:30:6d:f3:dd:4b:58:48:
bc:e5:e1:3b:1d:b5:2d:51:c5:88:5e:43:9c:ec:3b:
b5:90:fc:83:14:cc:b1:d5:fc:45:25:ed:95:60:bd:
8f:64:9a:ec:99:b3:11:e2:ac:ac:77:55:eb:50:a2:
c8:41:4d:6d:b3:78:b2:a3:09:8e:81:8b:03:07:18:
f0:b3:2b:f9:93:5b:20:a8:1e:bd:d5:c2:e7:ac:67:
a2:0b:ea:e7:1c:98:c9:1b:99:77:e0:17:d4:3b:90:
64:b9:f7:ef:b1:9b:48:63:ed:c1:b5:a8:fb:a2:90:
26:5a:63:50:fb:05:d8:33:81:b1:d9:1d:02:67:08:
cb:61:25:e4:60:eb:bc:93:5b:22:48:f0:bc:14:9e:
4e:e9:62:ea:86:77:e2:25:42:43:d9:a5:28:99:58:
59:19:c7:15:47:43:f8:fc:d8:0b:84:36:c0:33:14:
33:67:c2:ff:cd:07:8e:91:76:24:df:03:02:8b:14:
a3:b0:e9:77:b5:8f:4d:c8:5a:ab:5a:ca:7a:8d:1c:
26:74:23:c1:50:d7:b6:18:ae:2f:4b:cd:01:61:7e:
60:33:0b:2c:3f:2c:95:8c:24:aa:1d:f8:54:91:45:
03:2b:c1:77:07:61:cc:04:06:8b:5d:47:de:22:f0:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E3:76:CC:D5:7F:D3:28:8D:9F:74:AA:EF:09:F4:76:3D:4F:75:AC
X509v3 Authority Key Identifier:
keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:c0:9f:30:84:4a:ca:05:a2:78:39:c6:cf:7c:58:8e:cb:81:
4e:74:d5:e9:02:1b:4d:d4:93:0b:60:dc:df:23:c6:4f:7b:fc:
c5:c7:a0:b5:81:19:c5:ad:87:4b:32:57:7d:2a:ff:d9:c5:e8:
4f:4d:df:f2:93:10:59:5e:c7:f3:9f:8d:ae:78:9d:d3:95:e2:
1a:7d:87:24:11:b4:40:a1:15:cf:3a:32:6d:5a:01:dc:e2:3d:
44:f0:d8:54:9f:b4:28:b5:dd:ab:a2:95:52:25:a4:a1:a2:dd:
b3:ff:8f:92:8f:99:1d:45:51:99:19:1c:83:50:72:d6:52:b7:
8f:21:44:d7:01:b2:a6:d2:5a:28:00:8b:01:ee:56:ac:df:ac:
42:17:54:79:b7:cc:91:11:ba:6a:ed:05:27:7e:29:c8:37:3b:
f5:6b:67:b8:5a:51:f5:a1:6f:0c:ea:04:48:4f:b4:a3:df:d0:
59:62:e2:82:c3:84:40:c3:ce:9e:54:d8:00:ab:9a:6c:19:cd:
50:33:e8:d1:f8:df:3a:a8:e3:a7:2f:c9:df:85:e0:50:83:c8:
39:96:07:d1:31:a7:50:84:e8:05:ac:76:fe:01:89:92:fa:b0:
d1:49:83:41:08:c5:40:f5:0b:95:10:61:9e:98:5b:d6:6b:21:
87:eb:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:07:40 2026 by rpki-client