
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft
File: hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft (raw, json)
Hash identifier: AQ5fTLR1t5LBOBgBbQTCnJd0QSH/es7NLLHslfYL2dU=
Subject key identifier: E0:B1:1D:17:F0:B8:52:90:6E:67:A8:83:94:90:4A:04:7C:E4:2F:69
Authority key identifier: 85:3C:4F:1E:F3:7C:75:0A:48:33:95:69:E5:E6:7C:45:73:FB:AE:6E
Certificate issuer: /CN=853C4F1EF37C750A48339569E5E67C4573FBAE6E
Certificate serial: 01
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft
Manifest number: 2D
Signing time: Wed 01 Jul 2026 04:24:41 +0000
Manifest this update: Wed 01 Jul 2026 04:24:41 +0000
Manifest next update: Fri 31 Jul 2026 04:24:41 +0000
Files and hashes: 1: 3WVjC5G4YGChmiQH3qpb-MxuBz4.roa (hash: 9y53IEkAuPDEiLVpxJzHt/bCNBmCe4WSxmV/A/7JMpg=)
2: 3a2H1gtckhd2mV1Q0O6aWwzlZ_g.roa (hash: xmlBUkj1WkQ38JrI2CTSMsOGjO+J2bPkB6ORosKc0R8=)
3: SAl0_YjrbgEwVAktjuk8xJC_NFs.roa (hash: CZEaqPAg7RHIB2LbFj40HeMTYB9SCkw7LIMoMtzv974=)
4: hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl (hash: iIUxaogxI56O5tIzLLe8fEcRc/CvYJYcxW67R/rYyvo=)
5: j9NuYoBI0S0SKTvsdOB2ZI2ejV4.roa (hash: f/JtlBbuCRA/QXmyv5Vu0SpVKfxhhESGoZunkZVeF9I=)
6: zZe6jl3jLMpQsjj7S3ENak3In4E.roa (hash: ljhBnlQqdGzHrCLMEw0ocJrMDwswKriF/4s1DnWL0SM=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 05:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853C4F1EF37C750A48339569E5E67C4573FBAE6E
Validity
Not Before: Jun 24 01:19:07 2026 GMT
Not After : Jun 24 01:12:55 2027 GMT
Subject: CN=E0B11D17F0B852906E67A88394904A047CE42F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:2b:f9:b4:6e:c3:fb:7f:a9:93:77:fc:e1:
4e:20:9d:6c:05:f0:22:ee:91:75:c9:ad:3b:2a:53:
09:ec:3a:a7:68:24:97:23:6e:27:e8:3e:17:9d:bc:
64:23:17:a6:d5:ce:92:56:dc:e3:cb:2c:db:a5:25:
9a:c8:a6:ad:91:e9:9f:1f:48:bf:22:b2:c6:31:71:
8d:79:d2:05:7e:8e:ed:6b:4b:28:92:06:31:54:c5:
c8:ab:6f:d3:36:63:46:79:65:ab:2e:6c:8a:66:94:
74:6b:ae:f6:46:56:86:21:30:da:4e:67:d7:51:28:
b0:2e:75:3a:ea:ce:41:c1:29:c7:06:d0:52:8f:1d:
33:66:7c:46:28:04:7c:64:e0:26:6f:45:15:61:12:
7a:b0:db:eb:9b:95:eb:29:45:90:56:ec:a2:9f:23:
45:5a:eb:34:d9:0f:a8:74:55:ed:ab:b7:7c:96:a9:
8a:70:3c:2f:8d:4b:c0:a5:0b:fc:4f:cb:1e:0d:dc:
60:c8:5c:27:8c:b0:84:28:10:0e:c1:e7:7a:fb:15:
7a:0d:61:0a:82:2b:c6:a8:c9:e2:67:cb:59:c9:d2:
8d:04:7e:f8:d4:ee:7d:4e:52:0f:90:f7:8b:dd:c6:
28:c9:20:25:90:c7:69:cd:77:cd:55:8a:7f:58:7d:
90:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B1:1D:17:F0:B8:52:90:6E:67:A8:83:94:90:4A:04:7C:E4:2F:69
X509v3 Authority Key Identifier:
keyid:85:3C:4F:1E:F3:7C:75:0A:48:33:95:69:E5:E6:7C:45:73:FB:AE:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:38:ae:02:2e:75:c1:e9:73:2f:05:4f:bf:bc:ee:dc:6a:6a:
ad:24:14:59:9e:5b:c0:2c:23:0a:4e:50:ed:5c:2c:96:62:87:
e2:86:a6:fd:0e:38:49:a4:42:f5:4e:23:54:78:76:7b:df:66:
39:af:3b:31:d4:a8:d3:f3:4f:92:88:7e:63:d0:bc:cd:ea:24:
76:33:1b:56:7c:7b:f2:0f:cc:08:37:9a:15:0b:27:72:13:e4:
ef:46:8a:56:f0:53:96:78:f9:92:70:bc:03:ac:38:c6:c3:9c:
41:54:c1:ba:2f:4e:cc:82:2d:d9:fa:3e:9c:61:ce:d7:72:10:
9b:55:7f:cb:e2:23:24:e3:0e:1c:9f:f8:83:df:a6:35:91:ae:
fc:de:f6:e1:6f:dc:3f:e6:f9:1e:56:6e:45:04:c0:c9:30:f7:
cc:19:0a:9a:26:2d:1a:7e:32:d5:39:e8:94:48:a0:9d:36:16:
ce:f7:99:c1:f1:a9:e3:0e:43:5c:6d:34:33:5b:e7:b5:14:c3:
53:8c:6d:6c:dc:ca:14:19:62:aa:51:c2:73:ae:2f:af:4a:81:
f6:1e:35:f6:78:ef:fd:41:f6:65:43:26:0a:08:60:c2:b1:33:
e2:b2:a4:73:5d:9d:3b:16:b5:c8:20:33:e4:a1:48:bc:8d:49:
c7:98:18:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:25:46 2026 by rpki-client