
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
File: lMLwvhgAiadZPZ7TfQToUu1aJZo.mft (raw, json)
Hash identifier: eH9JPuq651u5Nv/i/J34lYmDOf6udKNEImLSZNzFteo=
Subject key identifier: FB:3E:F1:E1:23:9D:35:C9:89:C7:37:98:3D:97:AE:74:69:53:33:EE
Authority key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
Certificate issuer: /CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Certificate serial: 25
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
Manifest number: 0AA5
Signing time: Thu 16 Apr 2026 22:06:47 +0000
Manifest this update: Thu 16 Apr 2026 22:06:47 +0000
Manifest next update: Fri 01 May 2026 22:06:47 +0000
Files and hashes: 1: NtPUy9E9ESQdoTgoun7jTnrp9e0.roa (hash: rOhn/Xa2FnTGgBKyUyc7sfDTsub4/uoxjb1Xn/afJno=)
2: TnqRIdompsF-UKiILnSTRP9WhwU.roa (hash: ZOrg50bunY164hoamkRN+paK+FuL6McRsyq+DP0HB/Q=)
3: UPNgjWcLsnQub0NWgPIez47sPcI.roa (hash: eWtTDUtctIcBquKFs7JV04XfjF/yAMEszz49cX/5YGM=)
4: lMLwvhgAiadZPZ7TfQToUu1aJZo.crl (hash: oXggq9/KLWY18l7mpBxsw/gzqSY/O7ottWgT7pQsdX4=)
5: mKoDzEJN4ro4Q3bgjsswSkLK2U4.roa (hash: TXNeJaY4TGn8OHrfcTIV3aly+XE8uagCre1Na6L1f6c=)
6: wFILkJFtZdXVvX7eWtd_umI4b5w.roa (hash: Q/+u4QTAavMJBTluBIpJVifyD5SmkHtlSh4Tzwe3Zdo=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Validity
Not Before: Apr 15 01:39:36 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=FB3EF1E1239D35C989C737983D97AE74695333EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:ee:a6:91:a4:bc:95:20:f3:44:49:82:58:
d3:2b:a2:3c:84:de:a2:34:f4:8f:30:d3:55:ae:1f:
41:86:ab:d2:55:cb:ea:08:cd:e2:2c:8b:ab:72:29:
13:d0:b3:b8:3f:b3:50:93:b7:6e:d6:db:19:68:f7:
2e:be:88:dc:c7:89:5d:07:df:3f:6d:9b:0b:c0:1a:
ce:85:04:0a:f8:83:4c:41:70:a9:75:4f:ab:f3:75:
47:e3:f8:57:ea:ff:25:12:04:75:c6:f3:86:fd:f3:
08:17:2e:38:21:9f:f3:e4:aa:81:e5:d7:51:3d:42:
85:31:17:b8:ad:0e:36:b7:d4:06:fb:95:2e:ec:84:
48:87:5e:1b:56:f3:9f:34:f1:5f:dd:e2:c6:39:3c:
dc:9c:3d:1f:07:cb:67:b1:71:1b:43:f4:fc:45:f9:
de:d1:e4:97:82:42:d5:a4:4f:d0:a6:af:61:a9:a8:
93:29:63:d0:a7:bd:e5:d5:2d:ce:e0:b1:68:5d:46:
17:eb:31:ed:b8:bc:cf:cd:ea:02:8b:74:45:65:50:
0b:45:1e:57:60:c0:40:47:c5:96:7e:e9:27:7d:11:
61:d7:a2:87:51:21:7f:86:e1:54:8f:1d:9f:dc:be:
28:2f:40:97:6e:28:21:73:c0:50:5d:0c:70:27:a1:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3E:F1:E1:23:9D:35:C9:89:C7:37:98:3D:97:AE:74:69:53:33:EE
X509v3 Authority Key Identifier:
keyid:94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:c2:67:1f:74:71:56:4e:f5:16:d5:2a:72:c8:36:ec:b8:38:
65:a1:04:93:8e:ba:89:06:7c:1d:fe:d6:df:7f:dc:86:d7:a7:
ca:b2:00:e2:ff:95:dc:ab:92:6f:f3:e4:92:37:7e:84:75:1a:
49:8b:b4:77:f3:6d:6e:25:72:2b:c7:c2:82:89:0d:c1:e2:fd:
21:ce:26:02:8b:4c:63:d6:05:0e:25:a1:2f:98:4d:9d:0e:95:
9d:86:e7:39:16:3f:a9:f4:19:59:d0:ed:e4:6f:79:d7:ab:70:
7e:c0:33:b4:e8:8b:6b:6e:e2:37:7b:56:95:16:e4:a1:e8:a6:
dc:86:db:54:ba:fa:0e:be:fa:b1:59:99:8c:d7:5b:a1:d6:3d:
2b:9c:89:03:8a:e3:8b:42:d4:2c:0c:1b:d5:b1:4b:3e:70:44:
ee:6e:7c:5d:cb:23:4e:3a:b9:40:53:01:dc:31:a7:1e:7d:fc:
8e:6b:8b:80:ca:64:a5:79:a2:42:d0:e5:14:7c:eb:06:fa:80:
7f:f0:92:84:ac:99:38:82:f2:be:4f:7b:5d:b6:5b:0d:d6:57:
77:89:db:a9:9c:94:c5:99:70:ec:40:ce:74:41:0c:a1:3f:88:
0e:37:bd:cb:46:d6:65:ed:9f:dd:06:6a:1b:37:3e:1f:08:cf:
fc:f5:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:03 2026 by rpki-client