
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
File: XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft (raw, json)
Hash identifier: WVhJ5hqtWVqeqqz+/TEey5zFgxGsyVDRPv6rMxY02dk=
Subject key identifier: 9F:5B:DC:1F:E1:F9:7B:C1:56:56:EE:97:EB:5A:C1:72:17:AC:B3:93
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Certificate issuer: /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial: 60
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
Manifest number: 1087
Signing time: Tue 22 Sep 2026 06:54:35 +0000
Manifest this update: Tue 22 Sep 2026 06:54:35 +0000
Manifest next update: Thu 22 Oct 2026 06:54:35 +0000
Files and hashes: 1: 1SJo71igaHLgUqK0qv65e1UZLaA.roa (hash: l7Nh6G5bM0ySyDxtiFLXl+6/Zslh+YuV/9NkG0Ajr2k=)
2: 2ZWoc0vfItRUHT-iHawd5xJ1AH0.roa (hash: 5oro9FPwuLX2h0lv/azTT6JOS1sD5Q97Gh46q0esP3A=)
3: 30tPl69056traOGJH4Ob9nl2keE.roa (hash: rkXWLnzAgLJSxPXU0KwalcIuXV74TRLnNkXNl16LCEM=)
4: EgzvxQs5umd5MzIZcXRFKSLH4zc.roa (hash: W9nkE5BInFbpftywAx7OKzY7tLZ4LMAlmi3gmDUkOB8=)
5: IZJHJaKXOKSaDlFNwUiMHoBonSc.roa (hash: OKViRoTiEJKyqFHuIOm3gRHfzqFnST+ckLsmtoQf3DI=)
6: XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl (hash: ObS+DIYp2x7JqUsOH7N4kQj9Xqa2XwnpYM9C77BvfaI=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 09:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Validity
Not Before: Sep 15 01:32:43 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=9F5BDC1FE1F97BC15656EE97EB5AC17217ACB393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:70:0e:27:27:3c:99:7d:2d:b0:38:59:ef:52:
a6:10:7e:87:c0:50:8e:cf:53:16:52:9f:32:5c:af:
46:e5:a6:d8:3b:40:89:28:e3:cf:96:4c:cd:ad:a4:
a3:5d:aa:34:d5:1a:f0:35:ee:21:fa:5a:64:41:a2:
40:de:3b:17:5f:7f:81:6f:c6:ff:44:64:78:08:22:
fd:3c:fe:76:0d:6f:54:dc:ca:6b:b6:aa:3e:a2:22:
3b:c1:0d:6d:37:18:52:a8:92:e6:fb:59:dc:dd:aa:
21:15:eb:67:5c:0b:f0:f4:f6:07:33:d8:aa:63:e1:
67:ca:07:e8:56:ee:a6:6c:95:02:60:46:fd:9a:8f:
49:3c:da:d0:e7:eb:13:85:be:fa:2b:f0:79:10:50:
4e:ff:75:c9:d8:2e:9f:50:17:e5:c6:ad:f9:09:22:
9f:24:75:c6:56:84:29:ac:7a:52:ce:55:9a:a8:33:
70:41:7d:2a:49:63:35:4a:45:4a:e2:61:6e:d3:c3:
5c:fc:6d:c0:62:73:20:c5:96:67:03:c3:db:d8:9d:
fd:89:c4:80:7d:94:6b:a3:59:88:c6:a9:25:80:0c:
6b:80:6b:af:bc:64:70:04:55:32:2c:8d:6c:d4:a2:
0d:d9:74:02:87:04:cc:8c:b3:b0:3e:fc:fe:e1:24:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5B:DC:1F:E1:F9:7B:C1:56:56:EE:97:EB:5A:C1:72:17:AC:B3:93
X509v3 Authority Key Identifier:
keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e9:c6:f0:cc:4f:7c:77:b0:9e:79:21:c5:38:ec:74:18:bd:
7f:94:8b:87:f8:e1:e7:06:9f:1e:f7:fa:e1:ff:ca:45:94:07:
82:6c:d5:fe:da:70:82:75:89:81:24:25:3e:c4:32:b5:69:bc:
e3:b9:fa:49:5a:a1:38:14:d1:b0:69:60:9c:8a:26:2e:f7:2f:
ed:cd:e0:12:5e:da:d5:82:be:2b:a9:65:bf:5b:b7:8f:cb:53:
08:33:0b:88:48:d4:72:bf:d2:d5:e3:7a:9a:a1:d3:7a:01:b3:
6c:a7:15:51:66:d5:ef:0a:76:6b:1f:18:18:02:8e:b1:1c:27:
8d:f1:01:29:b9:0f:61:32:45:a1:db:b5:11:7d:61:cc:6e:95:
81:3d:3a:01:24:a4:e7:1b:a1:ed:75:f0:ac:44:86:93:cc:f4:
36:3a:ca:d4:f9:5c:e3:cb:dd:1e:75:4f:e0:9b:a8:67:94:14:
44:d8:0f:9f:19:8d:81:4c:d5:a6:31:38:5b:bf:dd:99:3c:0e:
7d:90:f2:50:ad:9c:fd:03:ab:aa:98:4d:81:3c:36:8d:2b:14:
e6:04:86:54:8a:a5:64:26:f9:90:8e:71:a1:23:8e:04:e5:e1:
6e:f1:7b:71:60:a4:2d:2d:c2:77:75:77:5f:bd:11:03:e5:39:
9f:85:f1:15
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RTcw
OEU4NUIxMEFDNjAzQzA2RDc4NUI0MjE1M0RDRkUxNjYzQUVBMB4XDTI2MDkxNTAx
MzI0M1oXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoOUY1QkRDMUZFMUY5N0JD
MTU2NTZFRTk3RUI1QUMxNzIxN0FDQjM5MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOpwDicnPJl9LbA4We9SphB+h8BQjs9TFlKfMlyvRuWm2DtAiSjj
z5ZMza2ko12qNNUa8DXuIfpaZEGiQN47F19/gW/G/0RkeAgi/Tz+dg1vVNzKa7aq
PqIiO8ENbTcYUqiS5vtZ3N2qIRXrZ1wL8PT2BzPYqmPhZ8oH6FbupmyVAmBG/ZqP
STza0OfrE4W++ivweRBQTv91ydgun1AX5cat+QkinyR1xlaEKax6Us5VmqgzcEF9
KkljNUpFSuJhbtPDXPxtwGJzIMWWZwPD29id/YnEgH2Ua6NZiMapJYAMa4Brr7xk
cARVMiyNbNSiDdl0AocEzIyzsD78/uEk7g0CAwEAAaOCAfIwggHuMB0GA1UdDgQW
BBSfW9wf4fl7wVZW7pfrWsFyF6yzkzAfBgNVHSMEGDAWgBRecI6FsQrGA8BteFtC
FT3P4WY66jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODI2L1huQ09oYkVLeGdQQWJYaGJRaFU5ei1GbU91by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1huQ09oYkVLeGdQQWJYaGJRaFU5ei1G
bU91by5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84MjYvWG5DT2hiRUt4Z1BBYlhoYlFoVTl6LUZtT3VvLm1mdDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAKjpxvDMT3x3sJ55IcU47HQYvX+Ui4f4
4ecGnx73+uH/ykWUB4Js1f7acIJ1iYEkJT7EMrVpvOO5+klaoTgU0bBpYJyKJi73
L+3N4BJe2tWCviupZb9bt4/LUwgzC4hI1HK/0tXjepqh03oBs2ynFVFm1e8Kdmsf
GBgCjrEcJ43xASm5D2EyRaHbtRF9YcxulYE9OgEkpOcboe118KxEhpPM9DY6ytT5
XOPL3R51T+CbqGeUFETYD58ZjYFM1aYxOFu/3Zk8Dn2Q8lCtnP0Dq6qYTYE8No0r
FOYEhlSKpWQm+ZCOcaEjjgTl4W7xe3FgpC0twnd1d1+9EQPlOZ+F8RU=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:14:10 2026 by rpki-client