
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
File: jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft (raw, json)
Hash identifier: b5tfcaJazyDK4VhwjdOJxNvIILMUrb78YWM9ZsDxNQo=
Subject key identifier: EA:85:D2:40:B9:98:7E:4E:6E:D9:90:02:40:3F:FC:6C:AC:E5:C7:52
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial: 93
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
Manifest number: 1ED9
Signing time: Fri 17 Apr 2026 02:22:13 +0000
Manifest this update: Fri 17 Apr 2026 02:22:13 +0000
Manifest next update: Sat 02 May 2026 02:22:13 +0000
Files and hashes: 1: PRKOLBS6fheerd1Bn8Zw-X5fFyQ.roa (hash: 5AbtuT315gTMW3qyuDWwe4kJmoqdq1tQXn1/W8xqzKA=)
2: Sra8l9P9TXU4AHZTxkbkyrXYQi0.roa (hash: WZxWZhd2+jDe+1Nt4GiSrJnbQsJR9NzdBiHxJs04Egc=)
3: jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl (hash: mfyBNNiL1vAhdM1PxMv1Q/K9W/pwH8XmW7xOof06MAI=)
4: oaJJcry2PaJK3Iofjvn3Uwyc60s.roa (hash: 5EsHPfzsFpcezJZG2nSr+t1AfDbQsClmPPK351ZLIE4=)
5: ptjjFWCdKZze-vcvw0suK9_Ir9c.roa (hash: 3pOm97oDXWno7uYEWdx23mJZ/6vaOQMmRzVO8ra4p48=)
6: t1AaKXuaFQqQhjNoK08FVHpix6w.roa (hash: V2ODOZMTPbAi9WcpVpWRXT7ZxFVIvvt2OPgDC+XRaBA=)
7: wCOi_NkXsuW2oUB9MeJk97uvLz8.roa (hash: TQAJysun5fxG3GigwYZjVsQ8ivpOX9IwyBx4+rrXIrY=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Validity
Not Before: Apr 15 01:41:17 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=EA85D240B9987E4E6ED99002403FFC6CACE5C752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:4a:85:38:d2:15:ce:e5:9b:91:7d:0b:e9:
0a:f3:d6:a1:10:b7:96:04:c1:af:fa:9d:cd:97:eb:
05:a0:99:49:ed:de:8b:c8:08:06:6d:f5:92:54:89:
7d:e7:6e:53:e7:5a:8e:bc:d5:4c:3b:ec:f4:b6:25:
54:85:03:f0:12:71:31:cf:f3:44:8c:e6:06:f2:9f:
62:a5:26:4e:bc:0e:6c:f0:94:a9:0d:4e:cf:c8:3e:
7c:e8:f9:4e:d0:94:11:1f:6c:7e:20:4f:7d:51:45:
d9:e2:3d:52:9a:31:08:19:3c:6f:99:ad:83:b6:3b:
c7:b6:cb:47:c6:99:6f:0c:84:3c:a3:77:9c:eb:54:
a3:28:5b:6b:6a:c8:5f:ba:49:09:ac:33:cc:ef:0c:
6c:01:e4:42:07:ec:0b:68:2e:cc:fd:27:44:af:4d:
2b:a6:7e:7a:da:4a:59:76:61:9e:72:ba:ef:6f:91:
41:40:fd:d3:f1:1b:10:53:25:d1:47:98:e5:79:dc:
9b:3d:72:0a:3d:1d:a6:d9:25:d2:7c:ba:17:78:03:
b2:2c:42:b0:fb:74:6d:f8:e7:6c:4a:a7:17:aa:ec:
ab:0d:bc:dd:20:b4:58:ba:4c:c2:9a:fb:62:c9:db:
61:09:95:da:74:93:f9:d6:32:14:eb:36:9c:97:a9:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:D2:40:B9:98:7E:4E:6E:D9:90:02:40:3F:FC:6C:AC:E5:C7:52
X509v3 Authority Key Identifier:
keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4e:26:9c:66:33:38:00:e5:36:aa:32:55:b1:72:c8:97:3f:
9a:e6:51:3d:7e:b0:88:ed:f6:a4:49:5c:26:c9:de:3c:c9:dc:
f8:ed:04:02:85:32:89:fb:32:74:c8:89:45:d1:a1:f7:d1:2e:
66:f9:71:55:d7:04:2e:41:73:f8:3b:ad:a5:27:59:06:ac:8d:
c7:d8:54:3f:d6:bb:7d:aa:61:e8:cc:e9:f2:48:ba:5a:cd:f4:
94:69:1d:ee:93:81:f2:84:42:06:99:09:e8:f3:9a:3a:b0:e5:
4e:5f:88:9a:48:8a:2b:b3:41:4f:49:32:4c:94:a8:48:c2:e0:
31:ae:ef:b8:2c:b3:90:e7:fa:a9:77:82:ff:2b:21:33:0e:ea:
d8:da:d1:f6:35:58:cf:2e:69:7a:f0:9a:5b:c3:fb:dd:11:75:
f5:68:9c:29:f9:93:85:c9:76:e6:c8:2b:76:5f:e2:f3:00:20:
b2:91:e5:b4:51:e3:bc:92:f8:88:9a:ef:6c:23:b8:fe:26:10:
ec:18:6f:88:61:4b:02:54:6c:03:21:f0:12:50:c8:c5:a6:01:
47:63:ae:9d:44:b6:5c:04:ac:79:2c:3d:98:cd:36:a0:16:5f:
8c:db:d2:6f:cf:33:4d:5c:b3:b7:0d:18:7c:40:9a:91:be:b6:
7b:3f:44:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:10:49 2026 by rpki-client