
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
File: kmBXdWbkftoPWGbOD0cUqRmPpfU.mft (raw, json)
Hash identifier: C4dRjbhVmH+jhTcmyelOBq3Y+p+STAta/2TG4ncPtHg=
Subject key identifier: BB:8B:2A:44:B8:FB:B5:2F:23:BC:05:87:A0:BC:D3:9B:93:F9:CB:2B
Authority key identifier: 92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
Certificate issuer: /CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Certificate serial: 3F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
Manifest number: 1012
Signing time: Mon 21 Sep 2026 11:08:38 +0000
Manifest this update: Mon 21 Sep 2026 11:08:38 +0000
Manifest next update: Wed 21 Oct 2026 11:08:38 +0000
Files and hashes: 1: dS42qB91jiIR6Pq1rvuvQxk2AwQ.roa (hash: tvu8sZQ+OuBdu+AslRLvKnRBruSq9zS5v46IdRvgDfI=)
2: dWY5YRNqyvuy3R66D9d06P621Wk.roa (hash: vN1hSMKWK1kHKyA4qc9iJ49X1YUqlOrm+yUrO9Tno2M=)
3: iuuYmU0R6LfXbvYKgzZ503_im2k.roa (hash: WoKPi92YllE/8DZe4ek1PHc/2f+sxx5RD8P/OtmHp5U=)
4: kmBXdWbkftoPWGbOD0cUqRmPpfU.crl (hash: K4LpCNTKG8/9vSYqs+gcDYAmACAsmWBlEIisIRVyTtQ=)
5: nF_EZjWFW7Kq2FUGXRoFvBBa8HY.roa (hash: Inq30lo88PYzdvVxyuicz/5NZ4yE3CU5QoJz5/X8Ufw=)
6: q0J2XF0j-QrPbLMj1muWk-RCL4M.roa (hash: 4jcW2ioE518nQ0RKJsS9Q+Zh6ZifQxZUykU0Cy5ga1Q=)
7: zQKhl42SIDSYb6ShjAGYTgXN6Pw.roa (hash: mv+24F/QCPSHd6oyafGK9PD54YcgaXOo2JYuHDygqjs=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 13:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Validity
Not Before: Sep 15 01:34:05 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=BB8B2A44B8FBB52F23BC0587A0BCD39B93F9CB2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:93:e2:77:04:68:46:00:48:ee:71:15:3b:6b:
4f:0f:ad:49:84:db:3a:86:3b:23:91:03:36:0e:e9:
98:e8:cc:60:ce:37:47:4c:0a:57:b0:c6:f1:cd:48:
1e:02:23:c8:7b:10:72:aa:0b:f0:d2:c3:70:df:98:
96:2a:cf:ac:5a:e0:71:c2:40:fc:bb:c2:9a:d5:24:
f0:cf:0d:84:b5:44:86:58:6e:37:02:06:fd:dc:f9:
b4:07:21:70:c1:ef:c6:4c:fc:7a:67:8c:35:c7:01:
e3:53:04:9c:25:92:6c:f7:5a:80:b6:ad:b5:25:f1:
f3:09:a0:a8:7a:a8:59:f1:ac:8e:9d:d0:78:7d:75:
d8:5f:15:02:17:21:46:ef:e4:5f:7f:f3:81:4c:51:
34:76:03:93:9c:9e:38:2b:4a:b5:77:a2:39:63:31:
95:2e:2d:b4:c0:67:f3:20:99:29:2e:57:ec:4a:e0:
05:3b:d1:64:a5:82:98:ff:a1:7c:ce:34:d0:a3:4b:
93:4c:c7:11:a2:c8:77:8e:26:e4:06:52:5f:8f:23:
30:87:1f:1a:6c:01:fd:aa:be:45:6f:af:88:fa:6a:
c8:e2:8e:ff:0c:97:16:5f:31:fa:d0:78:e4:5f:6d:
ee:81:95:ff:92:b4:09:57:22:41:b8:b3:dd:bd:98:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8B:2A:44:B8:FB:B5:2F:23:BC:05:87:A0:BC:D3:9B:93:F9:CB:2B
X509v3 Authority Key Identifier:
keyid:92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:b1:7c:28:36:54:bc:dd:92:37:0b:33:bf:0a:eb:51:ed:42:
63:b7:a1:e1:6a:0b:ad:bf:91:3f:51:30:9e:15:70:99:0d:ce:
c3:c1:a9:38:8e:89:ff:a5:d0:60:ab:a0:a1:94:78:f7:ba:46:
63:1a:e3:1f:ee:a9:b8:bb:e2:5d:e5:d0:b9:7b:72:4a:30:ff:
1a:ba:15:53:80:f2:92:5f:5f:4b:c9:63:9a:a0:75:eb:3e:b2:
66:74:90:23:38:21:34:5f:18:e4:2b:f8:ff:44:24:d5:a9:a8:
f1:1a:7b:39:87:6c:05:df:a6:c2:21:8a:0c:7e:37:47:c7:02:
4a:75:8d:c3:91:79:5d:ba:2d:7e:7d:cf:7c:36:12:51:e4:85:
fa:67:56:e2:df:46:b2:07:a1:4e:3e:0e:04:ae:98:1b:bf:ba:
34:2f:26:ff:96:5b:19:34:c6:f1:eb:bc:d0:81:ac:f5:ad:10:
f3:49:46:07:5b:3a:3a:78:4e:6a:4b:84:fc:61:f5:76:bd:9c:
fd:00:02:6b:14:52:bb:d3:8b:37:fc:70:18:f8:83:55:65:8b:
09:18:2b:98:d3:9c:05:4d:9d:67:2b:e9:36:40:b6:a5:54:4c:
f0:ea:8e:13:58:cd:c5:c7:75:08:b3:2d:0a:cd:76:c4:7d:64:
f7:3e:89:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:29:34 2026 by rpki-client