
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft
File: jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft (raw, json)
Hash identifier: 9Oa24nOVDkdv9FIwMoYcc/fYoXl9lRSsRI0R/gOpiPI=
Subject key identifier: DF:54:FC:4B:3D:55:66:90:F2:54:D8:30:34:C0:5D:0A:5A:F7:F5:4D
Authority key identifier: 8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04
Certificate issuer: /CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04
Certificate serial: 32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft
Manifest number: 0B85
Signing time: Mon 02 Mar 2026 05:14:26 +0000
Manifest this update: Mon 02 Mar 2026 05:14:26 +0000
Manifest next update: Tue 17 Mar 2026 05:14:26 +0000
Files and hashes: 1: 593z62S30HDpehk1iiCt7z5vTH0.roa (hash: Xjs13ngxQ/Xb7X15iecIBaioEklqx/dohQ6AOqLuwhU=)
2: HHAeZaoVv1YZ20HmOu442O8tfsA.roa (hash: r6qCIwT82CZmX2qIMBS+M2bQLOoXL32Kc6h9rmQ1I9k=)
3: jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl (hash: HgdVv5F+0Fm4vtOmEkwrDtiNo4FtnEG4ycrDHKLB1L0=)
4: poNz5vp0u6Y1qdBidYfyQ8OeyJg.roa (hash: 0k4FJyMy/n+VDzQIccgEMzQU50GCmx1DVQaJA+LmfNU=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04
Validity
Not Before: Feb 15 01:34:26 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=DF54FC4B3D556690F254D83034C05D0A5AF7F54D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:9d:bc:98:dd:3d:37:ff:33:09:bd:d5:e8:
d2:5a:aa:90:b6:01:6b:3d:35:90:e2:87:e3:d5:16:
e4:93:0a:a4:04:7b:ec:4f:fa:fb:d4:3f:6c:65:f1:
27:a6:9a:7c:73:55:a6:47:d5:1b:5e:9d:2a:ef:9a:
9a:c2:9a:51:27:21:be:81:e6:92:74:58:a9:fd:de:
d3:57:9e:4c:dc:ca:8b:b8:0c:de:f8:93:14:71:8b:
03:3c:02:3f:c5:4f:7e:d6:fb:8d:91:07:8e:66:12:
fd:e8:fb:85:4f:ef:c9:c8:6d:50:88:1c:4a:82:d1:
a2:a8:f2:a0:61:6d:b0:5e:31:1f:58:87:ca:63:a1:
e4:71:bf:8e:08:3c:e3:34:8d:74:d1:57:53:2c:ce:
74:fe:ad:08:ff:cb:d1:29:50:8e:be:df:c9:65:4a:
58:37:f2:26:0d:3a:41:e8:84:e4:f5:8e:bb:4d:ac:
c8:d2:4e:af:79:c4:e5:b2:df:0e:03:df:2b:72:64:
91:5d:58:39:49:15:16:a9:ff:a9:2d:03:0a:e8:fe:
52:9f:4e:76:20:cb:d4:3a:be:1c:24:14:ac:f7:f2:
aa:dd:e0:bc:92:fe:a3:4c:98:51:70:d4:ec:23:2f:
60:ba:5e:e1:27:b2:6f:2d:12:c2:3f:ba:bd:77:f0:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:54:FC:4B:3D:55:66:90:F2:54:D8:30:34:C0:5D:0A:5A:F7:F5:4D
X509v3 Authority Key Identifier:
keyid:8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:55:2f:cc:e7:1d:70:fb:aa:b3:fb:13:c7:85:24:7a:42:26:
db:f5:89:e5:0b:93:7d:3d:08:1f:4a:96:82:5f:46:f0:a8:d2:
70:8d:0c:f1:4b:36:b8:40:2a:1e:f0:fb:72:ef:b1:d4:28:be:
34:be:f9:86:84:59:0d:b4:b0:8b:58:c8:02:d0:ed:b7:de:c5:
0c:b4:96:f0:87:ef:c2:63:86:ed:a8:23:d5:d8:16:b1:42:d3:
40:23:58:63:34:cf:60:2f:5c:2e:c5:97:78:5c:1f:53:6e:9f:
49:2e:79:e5:5d:8a:27:5d:b5:97:2c:98:ba:fa:91:66:1c:40:
b8:76:23:64:84:78:9a:cc:78:fb:55:28:5f:f9:eb:f5:5b:99:
be:d8:83:39:e7:b9:31:c9:a5:3b:8d:ca:67:d8:fc:c5:68:fc:
c2:90:e0:1f:c7:32:57:7b:c8:d8:27:b1:f8:77:d7:de:97:ec:
a5:cf:91:af:e9:23:0a:9c:d1:88:52:43:c0:eb:0e:6d:2c:6f:
dc:d8:34:a6:0b:4e:e1:f8:b2:53:f7:2d:55:ec:8e:5a:a5:c7:
3e:b4:9b:5c:94:e2:85:1c:62:91:07:4c:05:bc:82:85:e4:8d:
55:a2:23:5a:f9:07:b6:de:8c:7e:8a:ba:d3:5c:da:4a:11:f3:
90:8a:5f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:17 2026 by rpki-client