
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
File: Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft (raw, json)
Hash identifier: 2Lb4VhETycYsZ8Rud0ibLiQBDT5iYPXQjfeIdJjbYz8=
Subject key identifier: C7:0D:F9:55:06:1E:0D:64:7C:29:B9:08:FE:0C:7C:C6:29:6B:D0:21
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial: 88
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
Manifest number: 1151
Signing time: Mon 02 Mar 2026 08:25:45 +0000
Manifest this update: Mon 02 Mar 2026 08:25:45 +0000
Manifest next update: Tue 17 Mar 2026 08:25:45 +0000
Files and hashes: 1: 1R0jWYgA9O3sR6XVueYAH9DKCaM.roa (hash: k/+E7M8BM2kZ75NfZysIAr88Ev2k7FxbaAyVekCrGbY=)
2: Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl (hash: orG2a598/rHYyJUff7aKIM88zsxMMSKS4xM8H7xrG8A=)
3: OaQpDcIuE22mSjN-kItIVv5eMSc.roa (hash: bTIhYlV1vOmTswWCWXwQLOcCIBeoMU8iiu9h/w+Yzpc=)
4: TZhMguU14RSDsu6f6Po5541XVTw.roa (hash: 9GpbRdW16SCQrJIC5vfmFAmXJaTfotIr5Ov25HB8r3U=)
5: eK3ylaw0nA78U0MisARZJNCWOp0.roa (hash: rrkstphDqW9rvgtMDdUFchx1oeMC0JL+9qR4L7m1I3I=)
6: iy3UV7O-WjKbHDDAWtZRK8fwKmM.roa (hash: 0/6+FAPSWIKkbYTHDz0FnTtuhP7MB3cvi+JTo/rmM+8=)
7: yNjK0xkuK5SaDOCwHHFZmq-_A3Q.roa (hash: 1SYpMBTA2faqSyHVTzCUKfbPwMhoydwA0NnJ6xrdowY=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Validity
Not Before: Feb 15 01:31:53 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=C70DF955061E0D647C29B908FE0C7CC6296BD021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f7:90:79:e7:a5:b8:25:28:52:52:50:a9:7a:
9b:45:31:e9:23:d6:f8:ee:45:d6:4f:89:fa:6e:39:
1c:8e:f9:9f:ea:ae:6e:cc:00:f0:b7:4d:6f:1f:e0:
d2:88:86:04:79:9b:19:c0:d0:f0:24:d2:bd:f6:0b:
58:9b:04:ab:86:6c:80:55:fe:11:74:be:80:b7:5d:
a7:b7:5a:44:d2:46:63:7f:96:4f:b9:27:f9:74:d9:
0f:3f:8b:41:89:ed:d5:60:99:a5:5f:e2:4e:0c:12:
3e:15:f4:4e:a8:f4:60:f7:1d:de:6b:f8:ca:55:cb:
69:ab:31:a2:a3:d7:40:5f:3b:90:b8:19:e0:83:4f:
7f:a5:eb:fb:73:c5:14:f2:b0:f6:3c:af:8a:15:23:
b9:21:96:4c:5a:f5:ef:a8:bf:04:1d:0e:3d:7d:58:
82:76:87:ae:59:51:7a:53:c2:b6:ea:c1:ea:d5:ad:
b5:9a:09:d5:0b:92:75:77:47:b8:50:d2:3f:7c:65:
f6:46:76:7d:8c:b6:8f:95:e1:f2:df:fb:11:ba:eb:
76:1d:a6:c9:02:8f:eb:94:1e:86:92:36:c0:7a:30:
a1:cd:e5:00:8a:7e:48:2d:5f:b0:4a:ec:1d:17:06:
d6:f5:d8:9c:b4:6e:86:63:75:8c:ac:ad:c7:a0:40:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0D:F9:55:06:1E:0D:64:7C:29:B9:08:FE:0C:7C:C6:29:6B:D0:21
X509v3 Authority Key Identifier:
keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:db:b9:3f:7a:49:04:fc:d1:87:c1:24:8e:3d:2c:2c:f4:ef:
f6:d4:e9:db:51:4c:f9:ab:10:51:85:92:26:0c:55:f1:52:3e:
96:21:ae:0b:42:98:9f:0b:e1:c5:04:4b:e2:84:8b:35:c2:1a:
7b:a5:ab:52:14:af:bc:0c:20:a6:12:88:a8:c6:52:20:fa:4f:
b1:ea:b6:97:c0:fc:bc:e0:fd:0a:62:72:2b:01:65:00:11:7a:
e5:4a:82:1f:c4:97:41:0a:8a:80:96:29:fd:08:37:86:f9:00:
9f:f8:be:10:61:6a:26:55:16:f3:0d:99:35:fc:7b:86:68:76:
08:25:28:08:7a:5e:33:f8:16:05:64:69:09:fd:63:9d:97:6b:
9c:40:e4:7e:e7:e0:00:04:4f:6e:5e:3f:a9:ba:43:b4:f0:40:
c5:9a:fd:87:2e:c7:02:5d:07:0e:00:be:1a:a2:64:47:28:68:
63:96:9c:2d:55:e8:6c:a5:ca:3a:2e:f0:e9:52:11:51:05:83:
45:0d:d4:db:da:3d:87:68:8c:03:79:36:eb:f3:6d:d3:ca:db:
b5:5f:92:29:1e:3c:03:0a:00:55:be:ba:84:df:46:45:41:72:
ed:50:98:01:5a:48:59:d7:06:14:ac:9d:cd:46:f8:a8:b1:47:
19:70:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:14 2026 by rpki-client