
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft
File: ih5yUXa_2avaXMt7IaELj4231Xg.mft (raw, json)
Hash identifier: GU7tASEgABugmHWAeegZHkV7y1IXX1SJV0Hm6cYmqvc=
Subject key identifier: ED:A9:6D:4E:AC:22:60:03:DC:14:BA:44:BE:2D:A4:25:D2:EF:A4:85
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Certificate issuer: /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial: 66
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft
Manifest number: 1082
Signing time: Mon 21 Sep 2026 14:45:54 +0000
Manifest this update: Mon 21 Sep 2026 14:45:54 +0000
Manifest next update: Wed 21 Oct 2026 14:45:54 +0000
Files and hashes: 1: 4cMVGji_CSDiEOzTcLmS_JCE_gk.roa (hash: 9izGyHYj87UaEt95xXEoxpz7ULHLu3vBEEUsDKyw/aA=)
2: HgICBi7AoCs2n4dhD4mAVak8-h8.roa (hash: Q4Hv3W/Gyfarmg31kavFmC9JYf08iMeuWqixJXQ03Sk=)
3: TEwvIcPECPVUNSZOYciPcr5_hXk.roa (hash: BWKr+kDXODk6tk+2nrHsqvpNEhPALRhCUcbGVvIq6N0=)
4: b4JpVXE7TjXkT8MdXZq9_n99hHI.roa (hash: w/LiMW/0SzNtPaC3fafTaJojv2wRwYCYMknBRufvK4s=)
5: ih5yUXa_2avaXMt7IaELj4231Xg.crl (hash: pAiO9sCopR46gjTmAIL0sZt6akjDDxRxAbh/oT1IhkI=)
6: qr_ClXf41JbTuCXMyIdYdl4QHh4.roa (hash: o0DKhip0SBONFtXcHRCM/KyClFUzsfk09n3AVSuCoeA=)
7: zW8MCH6Z8A8ICcOT3VdBrWqyfm8.roa (hash: DW7y0LxIpiijxaiEQqiHjUkI/6Rw2eNxPDVIuvXypJQ=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Validity
Not Before: Sep 15 01:32:42 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=EDA96D4EAC226003DC14BA44BE2DA425D2EFA485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cc:f3:cb:18:c7:18:20:1e:4a:ce:69:29:96:
dc:6b:14:3c:9d:79:65:a3:4e:68:4e:ef:c3:80:ae:
75:01:47:dd:0b:66:29:a0:d2:ec:ef:e4:9d:1a:38:
d0:7f:89:d6:2e:25:aa:5f:eb:45:ff:d8:6e:ac:83:
b2:30:ef:c8:0b:2d:00:02:d7:c4:89:c4:46:49:dd:
b9:bf:84:01:28:1d:8c:75:d3:74:87:69:1f:0b:a2:
64:11:7a:7d:c2:86:52:75:42:3f:ef:28:38:b6:a9:
62:b8:77:95:a3:75:54:2a:ec:16:1b:d3:06:8a:46:
4b:eb:2c:a0:f3:00:6a:71:cc:cd:1f:cf:fb:4c:41:
51:64:ab:bb:77:b5:eb:d8:fc:4c:73:15:e1:95:d9:
a2:af:f9:d6:25:90:ca:8c:2c:3e:f1:32:9f:41:d8:
40:8d:31:ac:ea:f4:3c:ae:05:0f:6f:b9:97:66:39:
24:38:c9:db:27:a8:3e:89:4a:36:c7:27:1c:7a:a9:
db:b3:65:f4:b7:c5:0f:5c:9c:cd:36:38:85:99:e0:
21:bb:92:0e:ae:25:77:f4:52:86:6a:78:0a:49:10:
47:bf:81:5c:1c:7b:7f:df:3f:a6:9a:e6:6f:c5:8c:
f6:8b:9b:21:0c:6b:36:f6:f5:5d:f0:dd:ed:4e:19:
fc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:6D:4E:AC:22:60:03:DC:14:BA:44:BE:2D:A4:25:D2:EF:A4:85
X509v3 Authority Key Identifier:
keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:a5:ee:3a:cf:33:d0:b5:1f:cc:c5:e4:8f:f6:6e:82:79:94:
78:7f:15:d7:2d:90:85:cb:e5:82:8f:4a:ad:8a:d5:84:84:30:
9b:db:f7:6a:1f:b7:43:c1:28:1e:f9:f2:4e:f7:21:7d:14:ff:
5e:5e:93:bc:87:cd:4e:f6:ba:74:76:b5:46:3f:d4:98:49:e5:
8b:d9:06:35:a2:f1:62:f1:e9:b4:28:a9:bd:34:c0:a9:25:7e:
51:13:75:ad:dd:94:b5:a5:cb:5e:64:27:95:29:04:a1:a2:26:
6a:2e:94:e6:57:35:34:66:d3:a5:ef:db:bf:b8:2b:72:71:1d:
aa:ba:2e:0b:bd:b4:0e:26:75:86:d6:47:a6:a5:b2:05:08:88:
0b:33:d8:6a:37:01:0f:80:56:24:cf:95:86:13:32:c3:a6:27:
d7:0f:67:13:75:43:e4:23:6e:2d:b1:e3:73:1e:57:45:61:82:
21:d6:7f:21:69:3c:94:ec:d9:78:91:93:fe:ec:53:d1:55:65:
f0:29:f5:ec:87:7d:ad:42:8a:c1:1f:5f:d9:d3:25:67:29:17:
ae:7d:74:72:c5:ca:3e:c1:6d:0c:e2:98:37:18:9e:3c:6b:ba:
e7:f6:24:d8:10:b7:71:c6:54:df:44:6a:20:8b:c0:bf:8c:8a:
74:51:fd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:41:42 2026 by rpki-client