
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft
File: habDacGpx6UsPjgFcnpf0xGFp3M.mft (raw, json)
Hash identifier: TUlqCWBwBR+tYu1R+1nFj2CtoxUz37CwXvhlbnyXQHo=
Subject key identifier: 05:42:90:B8:51:07:9E:AB:88:23:06:20:51:2F:ED:4F:D8:90:5C:91
Authority key identifier: 85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73
Certificate issuer: /CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773
Certificate serial: 26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft
Manifest number: 0BEA
Signing time: Wed 01 Apr 2026 08:54:46 +0000
Manifest this update: Wed 01 Apr 2026 08:54:46 +0000
Manifest next update: Thu 16 Apr 2026 08:54:46 +0000
Files and hashes: 1: VFyPFGluoJVgVQ0tESNOpeQZxRU.roa (hash: oU+75THyn5mTmFHrmrCJYuEqunCuuhWDxFNqHvWVg/E=)
2: habDacGpx6UsPjgFcnpf0xGFp3M.crl (hash: XQC4IRcsAuRVcDmIsT4YIRi5VhEmRx+qWu3T4G2tjXE=)
3: jU68Ewmh_jSybkuNT39rntLpFyo.roa (hash: 5VYeyTnBuw3xZLC8mXqSfKckjIAwvAZ6bvqjZ3Q4nIU=)
4: l55D1xujPjrHnP0YILrAcj6dopY.roa (hash: aaDxioLoXyy3WYWB91Y/DdxIDxhQunPbL+4llfB8YmI=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773
Validity
Not Before: Mar 31 08:43:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=054290B851079EAB88230620512FED4FD8905C91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3d:95:68:cd:40:73:40:db:56:0c:4c:f6:1a:
83:c2:88:0e:a9:95:f5:4f:1f:57:9b:87:85:f8:66:
9a:8f:56:12:08:7e:86:a5:45:a0:a2:a8:bb:23:7a:
e5:97:d3:b3:35:dd:63:b3:8c:71:76:a5:b8:fb:86:
b8:55:5c:b0:47:05:98:2a:c8:67:a3:7b:10:bf:14:
75:32:ff:f8:4f:6c:07:02:5b:82:28:c2:fa:63:d0:
cc:99:38:29:0a:7f:d6:3e:f9:04:d8:63:f6:51:37:
54:9f:39:42:b7:5d:ae:a6:7c:a0:a0:06:de:45:94:
74:43:72:86:27:c5:b4:f8:4a:01:e9:3e:8b:80:2f:
4f:b2:ba:fa:27:ef:c9:c3:bc:63:07:df:c1:2e:44:
2a:94:0c:e5:6e:ed:39:2d:3e:7e:96:ee:16:fa:6c:
d9:8e:57:bd:1b:5a:6f:1c:69:85:fd:04:7e:4a:8e:
01:e0:16:43:b1:44:ab:2b:b6:e2:b7:8a:f3:ee:29:
50:9f:b2:3c:0e:cc:2c:6f:9f:66:5f:82:90:62:23:
d8:f6:64:96:12:fa:e8:8f:d2:aa:38:0a:2b:4c:0d:
7d:69:a6:92:60:76:d5:4d:62:c3:d5:47:b6:23:9e:
ad:38:a8:16:3a:ae:0e:de:87:1e:8a:eb:29:38:d6:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:42:90:B8:51:07:9E:AB:88:23:06:20:51:2F:ED:4F:D8:90:5C:91
X509v3 Authority Key Identifier:
keyid:85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1b:ee:a9:b5:f5:fa:b8:7f:d1:36:81:25:d7:73:44:bd:70:
2d:58:94:58:30:8a:ee:fd:97:53:a5:d0:b4:8e:35:30:df:19:
09:e1:9b:b0:50:d7:bd:e6:e4:9f:63:a7:13:39:ff:19:e1:2d:
37:c2:0d:ea:82:d0:62:8f:a8:36:1a:9f:78:b0:72:5b:eb:97:
4a:11:c4:aa:35:ef:65:f6:f5:e9:3e:00:60:c2:b0:66:1a:56:
3f:b0:a9:5b:06:84:87:20:77:f0:08:cd:09:1c:8a:af:94:ab:
46:e0:bf:13:0e:46:5b:84:f2:10:c2:bd:bd:ae:9c:27:a4:31:
6e:87:48:03:87:25:07:6c:27:ba:72:e2:16:76:e8:c5:d1:09:
ed:03:22:df:c3:57:18:13:95:b3:4d:fd:40:9e:f9:71:89:ce:
9b:0e:4a:63:5c:bf:e9:01:c4:1c:fe:4f:19:4e:49:fb:a4:5d:
d2:13:74:c0:33:12:f0:f4:df:0e:14:82:63:95:d9:96:ed:11:
cd:69:9b:e3:f3:74:e0:6d:0f:1e:33:c2:92:a7:1c:88:40:16:
64:32:14:e7:1d:ee:af:c9:e3:e2:3d:b7:02:94:01:ba:2e:5f:
eb:b0:8f:61:67:f4:d7:6e:16:48:b8:b8:a2:b6:8b:72:ea:52:
7f:1d:27:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 12:54:46 2026 by rpki-client