
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
File: lMLwvhgAiadZPZ7TfQToUu1aJZo.mft (raw, json)
Hash identifier: eJTQxDzAn/+9wrmfGr2iNrDw4mGQi4NDTVnwH1AOrd0=
Subject key identifier: FB:3E:F1:E1:23:9D:35:C9:89:C7:37:98:3D:97:AE:74:69:53:33:EE
Authority key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
Certificate issuer: /CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Certificate serial: 2B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
Manifest number: 0F78
Signing time: Tue 10 Nov 2026 04:05:28 +0000
Manifest this update: Tue 10 Nov 2026 04:05:28 +0000
Manifest next update: Thu 10 Dec 2026 04:05:28 +0000
Files and hashes: 1: NtPUy9E9ESQdoTgoun7jTnrp9e0.roa (hash: rOhn/Xa2FnTGgBKyUyc7sfDTsub4/uoxjb1Xn/afJno=)
2: TnqRIdompsF-UKiILnSTRP9WhwU.roa (hash: ZOrg50bunY164hoamkRN+paK+FuL6McRsyq+DP0HB/Q=)
3: UPNgjWcLsnQub0NWgPIez47sPcI.roa (hash: eWtTDUtctIcBquKFs7JV04XfjF/yAMEszz49cX/5YGM=)
4: lMLwvhgAiadZPZ7TfQToUu1aJZo.crl (hash: F37wdUxgQbFOwo8Uj2tM0ZxEx+cCEkm5sjGfuUhXlZY=)
5: mKoDzEJN4ro4Q3bgjsswSkLK2U4.roa (hash: TXNeJaY4TGn8OHrfcTIV3aly+XE8uagCre1Na6L1f6c=)
6: wFILkJFtZdXVvX7eWtd_umI4b5w.roa (hash: Q/+u4QTAavMJBTluBIpJVifyD5SmkHtlSh4Tzwe3Zdo=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Nov 2026 02:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Validity
Not Before: Oct 15 01:42:11 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=FB3EF1E1239D35C989C737983D97AE74695333EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:ee:a6:91:a4:bc:95:20:f3:44:49:82:58:
d3:2b:a2:3c:84:de:a2:34:f4:8f:30:d3:55:ae:1f:
41:86:ab:d2:55:cb:ea:08:cd:e2:2c:8b:ab:72:29:
13:d0:b3:b8:3f:b3:50:93:b7:6e:d6:db:19:68:f7:
2e:be:88:dc:c7:89:5d:07:df:3f:6d:9b:0b:c0:1a:
ce:85:04:0a:f8:83:4c:41:70:a9:75:4f:ab:f3:75:
47:e3:f8:57:ea:ff:25:12:04:75:c6:f3:86:fd:f3:
08:17:2e:38:21:9f:f3:e4:aa:81:e5:d7:51:3d:42:
85:31:17:b8:ad:0e:36:b7:d4:06:fb:95:2e:ec:84:
48:87:5e:1b:56:f3:9f:34:f1:5f:dd:e2:c6:39:3c:
dc:9c:3d:1f:07:cb:67:b1:71:1b:43:f4:fc:45:f9:
de:d1:e4:97:82:42:d5:a4:4f:d0:a6:af:61:a9:a8:
93:29:63:d0:a7:bd:e5:d5:2d:ce:e0:b1:68:5d:46:
17:eb:31:ed:b8:bc:cf:cd:ea:02:8b:74:45:65:50:
0b:45:1e:57:60:c0:40:47:c5:96:7e:e9:27:7d:11:
61:d7:a2:87:51:21:7f:86:e1:54:8f:1d:9f:dc:be:
28:2f:40:97:6e:28:21:73:c0:50:5d:0c:70:27:a1:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3E:F1:E1:23:9D:35:C9:89:C7:37:98:3D:97:AE:74:69:53:33:EE
X509v3 Authority Key Identifier:
keyid:94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:dd:5d:1b:d8:15:5e:5a:c5:9d:9e:47:c6:ae:5a:37:e5:d1:
53:76:75:d1:4d:14:e4:27:47:8f:57:ca:7f:2b:df:0a:8a:e3:
37:f3:69:3e:84:69:08:04:bb:44:51:1a:50:e4:d2:1b:9b:da:
ba:8c:1b:ac:76:70:ff:17:56:fb:a3:cd:05:09:a8:e6:25:66:
88:4d:7e:d2:10:2a:19:11:67:6e:78:1d:38:12:ef:9e:85:85:
10:0c:3b:1e:5c:84:ad:c6:a1:ae:bd:f9:b8:27:2c:d2:6f:19:
21:1e:21:3b:78:70:05:11:e1:6d:0f:10:2b:04:4a:9d:52:4e:
dd:6c:86:28:37:63:b6:fd:50:f4:60:00:e8:78:87:d7:08:a2:
4f:1a:5b:07:7d:8d:bd:9c:e5:48:71:e7:3f:bd:5a:d8:6c:1a:
89:c8:31:56:f8:f7:94:3d:65:f4:b9:e7:1d:23:5c:16:88:82:
74:87:98:06:bf:a0:6e:c0:4b:91:9d:23:b9:3d:70:f9:f5:d6:
a7:e9:36:b9:aa:df:71:78:8b:7e:8d:c4:d0:02:d1:df:61:a1:
67:81:3d:07:d2:9a:71:9d:58:10:f1:ba:61:6f:b7:35:e2:81:
2d:e0:78:bb:57:68:98:39:31:03:2d:6d:08:c7:75:5b:48:00:
ec:fc:a8:0a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEMy
RjBCRTE4MDA4OUE3NTkzRDlFRDM3RDA0RTg1MkVENUEyNTlBMB4XDTI2MTAxNTAx
NDIxMVoXDTI3MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRkIzRUYxRTEyMzlEMzVD
OTg5QzczNzk4M0Q5N0FFNzQ2OTUzMzNFRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ9E7qaRpLyVIPNESYJY0yuiPITeojT0jzDTVa4fQYar0lXL6gjN
4iyLq3IpE9CzuD+zUJO3btbbGWj3Lr6I3MeJXQffP22bC8AazoUECviDTEFwqXVP
q/N1R+P4V+r/JRIEdcbzhv3zCBcuOCGf8+SqgeXXUT1ChTEXuK0ONrfUBvuVLuyE
SIdeG1bznzTxX93ixjk83Jw9HwfLZ7FxG0P0/EX53tHkl4JC1aRP0KavYamokylj
0Ke95dUtzuCxaF1GF+sx7bi8z83qAot0RWVQC0UeV2DAQEfFln7pJ30RYdeih1Eh
f4bhVI8dn9y+KC9Al24oIXPAUF0McCehS1UCAwEAAaOCAfIwggHuMB0GA1UdDgQW
BBT7PvHhI501yYnHN5g9l650aVMz7jAfBgNVHSMEGDAWgBSUwvC+GACJp1k9ntN9
BOhS7VolmjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTAzL2xNTHd2aGdBaWFkWlBaN1RmUVRvVXUxYUpaby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xNTHd2aGdBaWFkWlBaN1RmUVRvVXUx
YUpaby5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MDMvbE1Md3ZoZ0FpYWRaUFo3VGZRVG9VdTFhSlpvLm1mdDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAJHdXRvYFV5axZ2eR8auWjfl0VN2ddFN
FOQnR49Xyn8r3wqK4zfzaT6EaQgEu0RRGlDk0hub2rqMG6x2cP8XVvujzQUJqOYl
ZohNftIQKhkRZ254HTgS756FhRAMOx5chK3Goa69+bgnLNJvGSEeITt4cAUR4W0P
ECsESp1STt1shig3Y7b9UPRgAOh4h9cIok8aWwd9jb2c5Uhx5z+9WthsGonIMVb4
95Q9ZfS55x0jXBaIgnSHmAa/oG7AS5GdI7k9cPn11qfpNrmq33F4i36NxNAC0d9h
oWeBPQfSmnGdWBDxumFvtzXigS3geLtXaJg5MQMtbQjHdVtIAOz8qAo=
-----END CERTIFICATE-----
Generated at Tue Nov 10 07:11:52 2026 by rpki-client