
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
File: -u9X_xRNJQlORg4P04yAN5M07W0.mft (raw, json)
Hash identifier: 1WRw97tgY+TKdSop7sPVJ6MERAaoVAFSIkMXCkY5K1s=
Subject key identifier: E9:18:A4:EE:83:06:5D:82:A3:15:46:AC:9E:B4:05:6A:3E:E1:1E:D4
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Certificate issuer: /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial: 3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
Manifest number: 0C8E
Signing time: Fri 17 Apr 2026 10:21:44 +0000
Manifest this update: Fri 17 Apr 2026 10:21:44 +0000
Manifest next update: Sat 02 May 2026 10:21:44 +0000
Files and hashes: 1: -5PdfljYR6ZRPny_911mNLUGC5M.roa (hash: drQ3r8gzfHUP1yJD2+URbtcIOes+poEWrdun5EZSnJ4=)
2: -u9X_xRNJQlORg4P04yAN5M07W0.crl (hash: vJ/TXTu7v7VKTLaOTg88ULF9D6530ZevfGP2IXDapLs=)
3: 24elPBV5YwWdwjmAjolPtShQoSA.roa (hash: AHHYwEcdD2GUewxScBizLNCs5LvW4UyaTOWFtf/ZFdU=)
4: T4NquQYsUGgUJh6vQwgQwdss9rE.roa (hash: w+i3O5W559NlrzxLMH5AdMcNSYQ+w4Ua3GQyetMcOJM=)
5: YC1Lm26XVdQtENdevIdeAO4nKWw.roa (hash: FOfkaqkMGJutvYcAKzZqrTYKig73kDIU+ZD7JQ74KyY=)
6: xLzfI9MfFJvXluJpG3zaUf88oOU.roa (hash: Swl0fLPZy8ptOthOe56jwN+rC4RhnZcWwB3HBih1kjs=)
7: yG5c7vhALgptvfamNJ3UPbZ48fs.roa (hash: 4zUOlXGUrb3VzoeUFAy0+j1fQX1No+ckrbHGon1XbUU=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Validity
Not Before: Apr 15 01:43:22 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=E918A4EE83065D82A31546AC9EB4056A3EE11ED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:42:be:89:18:89:6d:2c:37:11:e5:b3:de:
93:d7:b5:d4:25:4d:d9:aa:4e:30:c1:99:95:c3:e7:
1e:95:14:0a:38:3d:6b:de:74:56:e5:06:ed:31:c1:
62:22:82:97:0a:43:55:36:8c:de:3f:e5:db:bb:7b:
42:4a:80:f4:75:8d:e5:8d:0f:fd:6c:3a:e4:12:f7:
1e:57:39:68:18:6b:64:a7:01:36:e6:0b:4b:af:3f:
f9:c2:48:c3:02:6a:51:c1:1b:eb:44:18:19:48:f2:
be:16:da:2e:49:f2:86:73:30:aa:48:a3:78:e7:77:
35:74:18:83:a3:3d:73:f0:85:85:fc:71:36:35:91:
fa:b1:6e:e9:52:b1:e4:0f:1a:9e:d5:53:e7:31:56:
21:dd:1a:14:4a:8f:b8:ed:52:aa:b0:88:ef:00:80:
c2:06:85:d2:fa:e1:81:50:e7:b1:d7:6f:0c:b4:52:
70:ff:4d:12:79:e2:d5:8b:fd:a1:be:ae:ef:09:e0:
b5:c5:4e:7a:53:47:df:b2:af:5c:90:60:b9:c6:34:
65:3b:d7:ab:c3:35:d3:59:3d:5d:70:7f:ba:89:13:
29:5f:7d:35:e1:18:5b:50:c2:17:e2:a1:d8:d4:c9:
56:a7:b3:27:cd:f9:ae:f5:66:13:d7:4b:13:ef:f7:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:18:A4:EE:83:06:5D:82:A3:15:46:AC:9E:B4:05:6A:3E:E1:1E:D4
X509v3 Authority Key Identifier:
keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:56:53:eb:35:32:bb:a6:f2:3f:f6:2c:f7:ff:73:5f:7b:8c:
f1:36:82:e1:f2:3c:fe:6e:77:6e:36:88:fd:9b:73:89:7f:eb:
0f:ce:db:39:5a:f0:1c:d8:fa:5b:a3:ec:f4:2c:b1:2f:7b:13:
fc:c6:55:17:94:7f:a4:44:12:87:46:aa:0c:ed:46:ba:ff:4c:
10:a9:a4:d1:9a:ab:f2:47:86:f3:d4:39:99:4e:b0:6d:50:f7:
0d:03:c3:49:27:b2:b7:4a:3b:11:c1:0f:54:3b:18:11:c0:c9:
23:bd:0b:89:9c:59:d1:b8:38:15:7c:2b:d4:11:06:eb:b6:b5:
f9:ab:2f:c0:be:73:6e:6e:1f:53:38:1a:87:99:2e:9f:00:71:
97:2e:fc:1d:b9:36:9f:84:37:ee:4b:ec:32:aa:45:61:ca:d6:
78:95:5f:88:4f:57:08:ee:f2:48:88:0f:e6:12:5f:e6:81:49:
59:c2:10:12:60:87:90:9e:7b:5d:a4:b2:8c:36:30:bb:ac:f0:
cb:8d:97:dd:c7:ff:74:55:4a:d6:e2:7a:3b:a7:ab:6e:a4:98:
e6:72:b7:ac:28:2f:5b:de:aa:10:57:a5:54:a8:b1:e4:c4:88:
cc:b4:b7:77:0f:a9:65:34:95:d6:97:f5:4a:4e:ec:c0:14:73:
f1:f3:7f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:08:59 2026 by rpki-client