
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
File: KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft (raw, json)
Hash identifier: v7k3VHIVCUFyeC3dUCts9KsvSJoeGZix8C5XaCtagG4=
Subject key identifier: C9:89:E7:EA:9B:CF:0E:1F:C5:B6:BF:5C:D8:FE:A5:D2:5C:90:F5:D6
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Certificate issuer: /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial: 9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
Manifest number: 0F39
Signing time: Tue 07 Jul 2026 10:41:27 +0000
Manifest this update: Tue 07 Jul 2026 10:41:27 +0000
Manifest next update: Thu 06 Aug 2026 10:41:27 +0000
Files and hashes: 1: 0c0nmlw7d56o2deSZ81XsyiWZlk.roa (hash: pq0eYu1MKdTlgjZu6ot49dXudA4NI1e2cbGTWyo9QEE=)
2: 4QH08ZXn_YBwJwkkB3-w5RZRDSE.roa (hash: uSOXTdKP8SQy7+eFV6YsDlUa5GO3EP4y5JlKhKBzyeI=)
3: 4xbcPpBtziijTA5_jFpagzw3rrg.roa (hash: 23q5n4VvIfsFFvUaKE6Xl7j5wSYRaUjUhTmpLc90M1o=)
4: CSTnGfj-WRow27cT-kp3Qvc9sUo.roa (hash: NHjEqSvBJgQZvsjr/tLNWwx4QtK0eW9OBeG0RGwUc14=)
5: KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl (hash: yBuwIy/LgrZ4mlvL3hplA3r0GVR0oPcFbXA43LWpSW8=)
6: N8_hG9Lj_Qtc-rsqPmWK5kCuxuU.roa (hash: b2tzebuWqTLCHFVAa6gmLYgzAqg1ARvcky6hudpgToM=)
7: SEogcakFseouhatOmD9dgEIHnmU.roa (hash: ZyHe04/VAmY/hZcDqs0Jdd8J2BSAnHoU9InMfp2f65o=)
8: W_CBTQ6pPy7ctKb6EssjPUBs8t0.roa (hash: bwPjj1mk0rW4rNMBlArUpfXrBKowxO6kIZImNabc3/A=)
9: ja2XsEsO42l7b1-uQE2pwMdGKhk.roa (hash: V+TX4vlmlWAU+WJXIFa5pKqv4BJG9Wp/yYInT62UVQ8=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
Validity
Not Before: Jun 15 01:38:20 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=C989E7EA9BCF0E1FC5B6BF5CD8FEA5D25C90F5D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:fb:6c:bd:4d:3a:51:a6:62:c9:24:9a:64:
7f:1b:0f:1f:86:b7:98:6f:33:d2:3a:44:d9:92:89:
57:2f:13:18:2b:d1:b0:fc:d4:b5:75:85:56:c8:74:
12:b3:18:a1:1c:56:ec:3d:a6:4b:c3:66:ae:95:02:
df:51:cb:dd:65:6e:f8:31:44:25:2d:a6:e0:71:bb:
72:71:32:0b:3a:15:ba:6d:fe:8a:15:d6:23:11:e8:
0a:03:56:9b:51:d4:7a:77:88:2f:aa:4e:10:6f:16:
08:48:70:ee:df:6b:b1:ad:e5:25:91:5f:4a:c3:30:
d8:4d:24:6f:47:b8:9d:f7:6e:81:ba:2b:21:40:a8:
6a:2c:9b:4a:35:d4:52:65:5c:87:01:d8:51:1a:f1:
3f:62:cd:65:f0:d2:ba:e1:8e:1c:ac:55:d9:db:1c:
07:da:09:6b:3f:56:a0:52:ee:e7:c5:de:1e:68:5c:
f1:6e:9d:6b:63:58:e7:73:d1:a0:5d:8a:72:6a:f3:
6e:df:e5:85:d2:36:58:13:93:b6:16:aa:77:ba:ec:
f2:e1:95:1a:06:bd:fd:99:2f:87:1f:f1:7f:7b:db:
ee:6c:04:bf:62:0e:fd:3f:ee:ca:0d:28:6b:29:68:
f8:99:1c:1f:e8:9c:9d:d5:e1:ee:ca:6e:f7:af:4e:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:89:E7:EA:9B:CF:0E:1F:C5:B6:BF:5C:D8:FE:A5:D2:5C:90:F5:D6
X509v3 Authority Key Identifier:
keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e2:0f:59:e0:3b:ad:ae:76:e9:be:2e:1d:d0:bf:fe:12:ee:
7e:4c:12:95:08:d7:d0:8b:69:b1:a2:fd:85:ae:4d:fa:e9:86:
52:3b:6f:57:7f:30:5e:ae:c0:ee:7a:ab:5c:5b:70:ce:bf:57:
ea:56:39:f1:ba:ce:f2:40:b3:a2:2d:48:b3:a3:90:2d:41:45:
d8:cb:0b:b7:80:b7:b3:c3:3c:4d:aa:7a:83:12:34:ae:f5:fe:
58:93:be:8e:07:e8:1b:9e:95:24:1a:42:94:12:ea:ff:65:9e:
1a:9b:12:cd:89:f9:9d:67:23:35:0f:de:9f:ec:91:c6:d9:be:
84:8a:80:46:21:c0:ad:86:a4:2f:80:ee:3e:fc:79:98:72:05:
65:e3:e9:f2:c6:68:aa:02:c1:ed:34:e1:e0:db:92:a9:c6:5c:
5d:71:9f:15:cb:8d:8a:17:ff:15:b5:a3:df:b4:27:47:e8:c9:
23:a4:2d:46:b6:fe:dc:55:4d:7b:9b:aa:19:f0:d6:23:c5:fb:
1c:36:5e:35:79:a5:85:c6:6b:d0:49:9b:94:86:7a:06:7f:7c:
ff:35:44:aa:8d:35:99:1c:70:f9:9d:6a:e8:be:ef:65:40:1a:
87:5e:b8:01:8d:8e:5a:10:ed:d4:3d:a6:8c:b4:ef:b3:8c:3b:
96:c7:56:33
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjgz
OTNGQUUxMjlCNTAxODI0Njk2QkFFMjRCNjQ3MzRBMjAzQzM3NjAeFw0yNjA2MTUw
MTM4MjBaFw0yNzA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM5ODlFN0VBOUJDRjBF
MUZDNUI2QkY1Q0Q4RkVBNUQyNUM5MEY1RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChCPtsvU06UaZiySSaZH8bDx+Gt5hvM9I6RNmSiVcvExgr0bD8
1LV1hVbIdBKzGKEcVuw9pkvDZq6VAt9Ry91lbvgxRCUtpuBxu3JxMgs6Fbpt/ooV
1iMR6AoDVptR1Hp3iC+qThBvFghIcO7fa7Gt5SWRX0rDMNhNJG9HuJ33boG6KyFA
qGosm0o11FJlXIcB2FEa8T9izWXw0rrhjhysVdnbHAfaCWs/VqBS7ufF3h5oXPFu
nWtjWOdz0aBdinJq827f5YXSNlgTk7YWqne67PLhlRoGvf2ZL4cf8X972+5sBL9i
Dv0/7soNKGspaPiZHB/onJ3V4e7KbvevTs0zAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUyYnn6pvPDh/Ftr9c2P6l0lyQ9dYwHwYDVR0jBBgwFoAUKDk/rhKbUBgkaWuu
JLZHNKIDw3YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwNzYyL0tEa19yaEtiVUJna2FXdXVKTFpITktJRHczWS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0tEa19yaEtiVUJna2FXdXVKTFpI
TktJRHczWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDc2Mi9LRGtfcmhLYlVCZ2thV3V1SkxaSE5LSUR3M1kubWZ0
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB
BQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+IPWeA7ra526b4uHdC//hLu
fkwSlQjX0ItpsaL9ha5N+umGUjtvV38wXq7A7nqrXFtwzr9X6lY58brO8kCzoi1I
s6OQLUFF2MsLt4C3s8M8Tap6gxI0rvX+WJO+jgfoG56VJBpClBLq/2WeGpsSzYn5
nWcjNQ/en+yRxtm+hIqARiHArYakL4DuPvx5mHIFZePp8sZoqgLB7TTh4NuSqcZc
XXGfFcuNihf/FbWj37QnR+jJI6QtRrb+3FVNe5uqGfDWI8X7HDZeNXmlhcZr0Emb
lIZ6Bn98/zVEqo01mRxw+Z1q6L7vZUAah164AY2OWhDt1D2mjLTvs4w7lsdWMw==
-----END CERTIFICATE-----
Generated at Tue Jul 7 12:43:29 2026 by rpki-client