
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft
File: M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft (raw, json)
Hash identifier: kisS/MD0NutaNMsj+eSj1IxDhj8xvLcUqQbNOumIX+E=
Subject key identifier: C5:64:C2:A1:89:B5:BA:DA:04:C6:FD:6C:0A:63:F1:0A:96:22:65:E8
Authority key identifier: 33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5
Certificate issuer: /CN=33D2C2C8816F30E6B58262B93C717C85513505C5
Certificate serial: 31
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft
Manifest number: 10E7
Signing time: Wed 28 Oct 2026 13:17:48 +0000
Manifest this update: Wed 28 Oct 2026 13:17:48 +0000
Manifest next update: Fri 27 Nov 2026 13:17:48 +0000
Files and hashes: 1: 0ja_mgv6b0rNI7i8oGuL1b-nLvE.roa (hash: AIMk2de8WCmqYWfkZsiRQPPRgANT+RxivxWrWOy4i+0=)
2: M9LCyIFvMOa1gmK5PHF8hVE1BcU.crl (hash: RBS3GKdFB7MNrNvM0QELGcPYk3hAmFn6hL+aQ9PuMyA=)
3: _PGXPDMqwFgeeaPXOS5nWfANFKY.roa (hash: STEU67SZV1eDwg++mPgb0dShFQX31iRllGeCX7BJsvI=)
4: gIxEPxae3KIY9bwOD2qiIQ4Pv3U.roa (hash: /OE8woWMSZCfX2kvbUXVpMm5t4Mb7xuKEkfLxXPAzvU=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 15:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33D2C2C8816F30E6B58262B93C717C85513505C5
Validity
Not Before: Oct 15 01:39:39 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=C564C2A189B5BADA04C6FD6C0A63F10A962265E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ab:b4:31:f7:22:87:a5:20:e5:4e:f3:76:a5:
85:8f:8c:11:3a:7b:7c:b5:d5:59:4b:24:ef:25:30:
f9:e8:30:c4:dd:31:0c:75:43:a2:bb:08:e5:3e:a1:
d2:70:4e:7c:6c:72:3e:2a:e0:fa:5d:7c:2e:2d:6c:
32:df:61:72:c7:db:a5:22:48:b9:8f:fc:67:33:9b:
e3:9d:ce:35:98:97:1f:94:0a:8b:72:5f:62:6e:55:
a5:4e:50:a9:ca:b9:29:b3:22:7c:e2:94:fa:26:da:
3f:72:98:5e:18:4b:29:00:e7:56:1d:f3:05:ad:b8:
97:15:25:46:76:2f:7e:a7:33:23:e5:81:53:9d:43:
c4:6f:6e:e4:c5:ab:4d:15:a5:b2:67:f7:70:48:b4:
54:f3:e9:25:7d:75:be:cf:c1:d5:37:c3:99:d4:3f:
7f:d1:bc:8d:d6:5e:cb:a3:ce:a4:ad:df:78:84:b4:
16:72:18:4d:db:88:ed:fe:51:61:1c:a4:91:73:b9:
81:92:98:4b:8f:fd:d8:be:41:30:54:00:07:dc:c0:
f6:07:82:77:82:de:2e:ed:b3:c4:f2:27:73:50:81:
82:49:b8:94:ad:3f:aa:b9:1f:94:80:aa:59:b1:6e:
0e:98:1e:dd:cf:4c:fa:b3:72:87:f5:b0:a1:f9:01:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:64:C2:A1:89:B5:BA:DA:04:C6:FD:6C:0A:63:F1:0A:96:22:65:E8
X509v3 Authority Key Identifier:
keyid:33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:80:e3:6a:98:6b:3d:c2:ee:04:de:53:f6:ad:83:83:ef:71:
77:cc:3b:4e:63:c4:cc:db:93:3d:3e:66:18:e8:13:7a:44:1f:
96:3f:1f:02:cf:16:28:f9:b7:d6:de:78:f7:d2:61:f6:d4:29:
3b:6a:bf:22:82:95:c4:dc:d9:32:a1:60:72:73:6e:5b:6b:7b:
98:97:ef:55:29:84:f0:4c:97:81:eb:bd:14:7e:9e:37:ed:dc:
5e:d9:4a:a0:6b:a6:de:25:5a:fc:29:d4:43:88:67:1c:f2:5b:
26:de:de:22:a4:db:61:53:26:4f:6f:13:e8:b8:bb:eb:54:22:
7a:22:fa:56:b3:7b:a8:9f:d1:db:f7:c3:b5:71:3e:f0:1d:eb:
df:87:4a:ad:99:c1:3c:fb:d6:e1:0a:81:42:3a:64:de:79:bb:
1f:6f:ff:5e:e7:36:7e:97:ec:88:10:36:ea:8b:33:73:7e:ab:
53:16:be:92:f5:85:1e:be:eb:14:90:d4:c4:fc:7a:dc:25:32:
b8:f0:f8:20:10:df:4f:21:37:dd:79:7c:70:56:91:55:80:ee:
d3:d7:62:03:e0:15:71:f8:fc:10:3f:19:ae:09:a3:2e:5b:80:
9d:f0:66:2b:9b:fc:a7:1f:d4:bb:bc:57:b2:71:dc:cd:e7:37:
86:ec:ea:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:44:47 2026 by rpki-client