
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
File: Fnjda2HLZzukQjyBv2OmHdck6EA.mft (raw, json)
Hash identifier: z/CpQrTus8yBKTOXUb8zt2f/CNhNMDOgtWL48ap7zfw=
Subject key identifier: F1:91:1C:5A:97:2A:DE:0E:BF:5F:AE:90:03:38:45:05:B7:84:D9:8C
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Certificate issuer: /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial: 5E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
Manifest number: 11AC
Signing time: Tue 10 Nov 2026 14:30:50 +0000
Manifest this update: Tue 10 Nov 2026 14:30:50 +0000
Manifest next update: Thu 10 Dec 2026 14:30:50 +0000
Files and hashes: 1: EYGfNhrpED03SCDA3j04KPCoMHU.roa (hash: Omc3MK8n7Cl+W8czNWOZZCvOzhUbS1bZZhk/PXyZLWk=)
2: Fnjda2HLZzukQjyBv2OmHdck6EA.crl (hash: rEGAj6EjYUmyNIpkrBgovYMp9AGDhMJyydo8RUAUDSQ=)
3: P_RnxjN2rfn-xttBbuWMR30-CTE.roa (hash: KfACiYYqNlTfpO+M/ehKiZfzp56Rx2AN1NTG2QmFVRw=)
4: VPIwXYyEuZnwgAgi_Jf5W-z3t20.roa (hash: dswvtH5ttQq47S/fVFuu7otlyCqbrUoWEQgwqjJfu0E=)
5: WGv-uKhFJlRebGlq0Qwn_W0J1aQ.roa (hash: YphHPqiid+k/RPeBn0bohgNBu2/+SguTxtkx85q2B9w=)
6: WjoTDc1nsKFbk4T0xxpvccbUvd0.roa (hash: aqhHTxWOGvCblxEpW82QA7iAnPOn78AXSfx8AS6z0ZE=)
7: griUgKsW0cpbDJDqjQ8Fy62Asqk.roa (hash: GrP1wyvQl/omvQcDuEjme6Vu+utdglqgINYr35ojKZc=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Validity
Not Before: Oct 15 01:32:37 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=F1911C5A972ADE0EBF5FAE9003384505B784D98C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:7b:0e:5d:92:62:b5:5a:c0:d5:df:9d:e4:
2a:c5:84:55:0b:eb:0f:23:ad:2f:1e:b2:28:cf:f8:
40:3c:d9:db:a2:8f:9b:06:71:17:12:16:ac:cd:c5:
52:50:b3:21:e1:05:6b:87:74:07:1b:b9:07:d4:91:
ce:9b:6a:15:e5:47:ea:07:4f:aa:6d:d4:76:8a:38:
5f:92:e5:15:64:7a:96:1f:f5:e4:c4:a7:49:b4:21:
33:84:1e:c4:18:d3:a8:24:85:d9:25:f0:67:0a:96:
cb:e9:99:42:c3:86:0c:38:af:48:67:34:2c:37:49:
a8:b0:a8:8d:4a:76:d2:81:fc:cc:9d:57:16:87:13:
9b:90:51:32:22:a2:41:90:d3:74:5f:27:13:6b:ac:
8a:e1:e6:53:24:4a:07:c7:59:63:ff:bc:c1:59:0c:
ff:20:7c:7c:98:d1:29:7b:92:ea:a8:86:0d:9d:5b:
ab:24:78:bd:0d:03:0d:60:56:88:05:e4:d0:82:64:
34:d4:78:0b:e8:da:40:14:ac:5c:5c:ae:53:3c:c9:
5e:99:b9:4d:a2:eb:1a:18:19:75:97:d1:91:52:18:
df:7f:cd:a1:3f:7d:96:66:4a:e3:01:57:c6:5c:3a:
f3:b3:d6:23:df:97:c4:a0:50:74:38:73:cc:23:11:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:91:1C:5A:97:2A:DE:0E:BF:5F:AE:90:03:38:45:05:B7:84:D9:8C
X509v3 Authority Key Identifier:
keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2d:7b:94:ae:ff:78:0c:73:90:87:fd:75:98:cd:ec:b3:d8:
96:ec:a4:f5:75:98:1d:fe:8b:eb:54:a4:d5:d1:56:d5:75:7b:
a0:32:0b:bb:45:d4:9b:59:60:e6:2c:27:ee:02:95:a6:cf:fe:
7f:90:79:c0:3f:cb:69:22:ac:14:a9:66:41:01:72:c8:74:85:
f1:53:69:57:22:52:01:53:e8:48:65:07:fd:4d:0a:c1:ef:99:
7a:10:ae:e7:68:42:f4:81:05:7b:4f:ad:35:54:12:28:6b:3d:
a2:19:9c:fe:82:cc:22:91:1b:38:ea:1c:15:c8:8b:42:67:e6:
15:46:d1:f2:e5:26:e6:26:dc:5b:2b:08:6f:d7:1b:54:cc:1d:
3b:3e:7e:2b:4f:71:10:21:72:b4:f4:fc:4a:19:71:39:1b:48:
eb:ad:f8:ca:db:ee:b6:cc:5c:a8:f6:1a:39:2b:b0:2d:fa:c8:
a4:16:dc:83:c3:4e:31:01:25:cc:1a:0d:f5:d3:07:d0:08:38:
74:e0:8a:c3:05:84:56:e3:9a:ea:41:bf:ed:b7:8d:2b:cf:16:
7c:bc:4d:0a:86:c8:01:e6:ce:07:e2:aa:6e:25:ea:2f:60:43:
d1:0d:55:f6:5e:f6:9f:03:74:57:86:89:03:d7:35:fa:37:15:
ad:03:49:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 20:50:24 2026 by rpki-client