
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
File: kmBXdWbkftoPWGbOD0cUqRmPpfU.mft (raw, json)
Hash identifier: AJSW8Q5NExrZ7KYzd6YCEX/95UY+r9icaEy51T6Oid0=
Subject key identifier: BB:8B:2A:44:B8:FB:B5:2F:23:BC:05:87:A0:BC:D3:9B:93:F9:CB:2B
Authority key identifier: 92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
Certificate issuer: /CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Certificate serial: 40
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
Manifest number: 113A
Signing time: Tue 10 Nov 2026 04:07:19 +0000
Manifest this update: Tue 10 Nov 2026 04:07:19 +0000
Manifest next update: Thu 10 Dec 2026 04:07:19 +0000
Files and hashes: 1: dS42qB91jiIR6Pq1rvuvQxk2AwQ.roa (hash: tvu8sZQ+OuBdu+AslRLvKnRBruSq9zS5v46IdRvgDfI=)
2: dWY5YRNqyvuy3R66D9d06P621Wk.roa (hash: vN1hSMKWK1kHKyA4qc9iJ49X1YUqlOrm+yUrO9Tno2M=)
3: iuuYmU0R6LfXbvYKgzZ503_im2k.roa (hash: WoKPi92YllE/8DZe4ek1PHc/2f+sxx5RD8P/OtmHp5U=)
4: kmBXdWbkftoPWGbOD0cUqRmPpfU.crl (hash: 7CxozWlDuFvUECjuVsxMrR9WZLVrtDvqyrc95o/mlBI=)
5: nF_EZjWFW7Kq2FUGXRoFvBBa8HY.roa (hash: Inq30lo88PYzdvVxyuicz/5NZ4yE3CU5QoJz5/X8Ufw=)
6: q0J2XF0j-QrPbLMj1muWk-RCL4M.roa (hash: 4jcW2ioE518nQ0RKJsS9Q+Zh6ZifQxZUykU0Cy5ga1Q=)
7: zQKhl42SIDSYb6ShjAGYTgXN6Pw.roa (hash: mv+24F/QCPSHd6oyafGK9PD54YcgaXOo2JYuHDygqjs=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Nov 2026 07:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Validity
Not Before: Oct 15 01:34:00 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=BB8B2A44B8FBB52F23BC0587A0BCD39B93F9CB2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:93:e2:77:04:68:46:00:48:ee:71:15:3b:6b:
4f:0f:ad:49:84:db:3a:86:3b:23:91:03:36:0e:e9:
98:e8:cc:60:ce:37:47:4c:0a:57:b0:c6:f1:cd:48:
1e:02:23:c8:7b:10:72:aa:0b:f0:d2:c3:70:df:98:
96:2a:cf:ac:5a:e0:71:c2:40:fc:bb:c2:9a:d5:24:
f0:cf:0d:84:b5:44:86:58:6e:37:02:06:fd:dc:f9:
b4:07:21:70:c1:ef:c6:4c:fc:7a:67:8c:35:c7:01:
e3:53:04:9c:25:92:6c:f7:5a:80:b6:ad:b5:25:f1:
f3:09:a0:a8:7a:a8:59:f1:ac:8e:9d:d0:78:7d:75:
d8:5f:15:02:17:21:46:ef:e4:5f:7f:f3:81:4c:51:
34:76:03:93:9c:9e:38:2b:4a:b5:77:a2:39:63:31:
95:2e:2d:b4:c0:67:f3:20:99:29:2e:57:ec:4a:e0:
05:3b:d1:64:a5:82:98:ff:a1:7c:ce:34:d0:a3:4b:
93:4c:c7:11:a2:c8:77:8e:26:e4:06:52:5f:8f:23:
30:87:1f:1a:6c:01:fd:aa:be:45:6f:af:88:fa:6a:
c8:e2:8e:ff:0c:97:16:5f:31:fa:d0:78:e4:5f:6d:
ee:81:95:ff:92:b4:09:57:22:41:b8:b3:dd:bd:98:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8B:2A:44:B8:FB:B5:2F:23:BC:05:87:A0:BC:D3:9B:93:F9:CB:2B
X509v3 Authority Key Identifier:
keyid:92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:38:ce:22:e7:19:07:2f:48:bd:77:13:65:ad:1a:d5:90:dd:
4d:05:ac:ad:95:e7:57:72:8b:8c:d8:35:2e:48:7e:3d:c4:3d:
12:e0:6d:1c:ad:bc:e3:06:ed:86:51:d7:51:4a:30:59:1c:06:
c8:9e:12:f7:fb:c1:a7:bb:be:c4:cc:21:34:e6:e8:7e:64:08:
93:f7:ce:d1:95:03:cc:9a:e8:c2:60:b3:f2:aa:e4:2a:47:0b:
1e:6d:73:8b:a1:57:02:3c:d2:0a:30:74:03:20:8e:15:9e:fb:
fa:17:a4:11:8f:1b:52:ef:37:d4:f4:1f:b0:b4:1d:30:ee:d4:
98:60:ba:8e:37:0f:14:c0:58:32:10:d2:5e:c1:72:78:cb:d7:
22:79:de:cc:8b:2f:d2:80:31:36:40:be:1a:e5:11:50:a9:4c:
9a:f1:22:b9:2e:5e:59:d4:16:8a:df:a8:9f:b2:1a:87:b4:8f:
8e:71:16:1c:f3:cc:a6:1f:f8:ac:01:0c:0f:e2:b8:07:58:51:
c3:e0:e5:dc:a3:f9:bf:06:fc:bd:df:38:f1:5a:f1:60:29:ba:
74:ad:c3:98:7a:af:af:6c:94:b9:ff:13:fc:8f:fb:7b:01:a6:
8b:37:5e:36:ab:c9:27:e9:a7:28:88:b4:55:e4:15:0f:3e:91:
49:64:11:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 10:12:16 2026 by rpki-client