
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20296/hEp-WViyqvIf0WIcye0a5lvXfrM.mft
File: hEp-WViyqvIf0WIcye0a5lvXfrM.mft (raw, json)
Hash identifier: /yGl/RBqvolD82698TKpjKaOg55JSjKH03M/zE7LQ6I=
Subject key identifier: CF:B3:3F:BA:47:0A:8C:D5:8A:0B:89:51:06:EB:A3:69:1D:B2:32:B3
Authority key identifier: 84:4A:7E:59:58:B2:AA:F2:1F:D1:62:1C:C9:ED:1A:E6:5B:D7:7E:B3
Certificate issuer: /CN=844A7E5958B2AAF21FD1621CC9ED1AE65BD77EB3
Certificate serial: 06
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hEp-WViyqvIf0WIcye0a5lvXfrM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20296/hEp-WViyqvIf0WIcye0a5lvXfrM.mft
Manifest number: 0280
Signing time: Mon 26 Oct 2026 16:51:26 +0000
Manifest this update: Mon 26 Oct 2026 16:51:26 +0000
Manifest next update: Wed 25 Nov 2026 16:51:26 +0000
Files and hashes: 1: VTQ5E0opemaL1HO8lyoMyZqjjGs.roa (hash: 5O+OFqhrExKrJQx/bwpBrzNJ/jrJdViffXPPQ1U9m0w=)
2: hEp-WViyqvIf0WIcye0a5lvXfrM.crl (hash: eKz1Xc9+n2s+SMfj2m9p03tuZCtZs322haFoWObNxPQ=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20296/hEp-WViyqvIf0WIcye0a5lvXfrM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20296/hEp-WViyqvIf0WIcye0a5lvXfrM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hEp-WViyqvIf0WIcye0a5lvXfrM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844A7E5958B2AAF21FD1621CC9ED1AE65BD77EB3
Validity
Not Before: Oct 15 01:35:19 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=CFB33FBA470A8CD58A0B895106EBA3691DB232B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9b:28:1f:66:50:80:0f:4f:0e:0d:26:45:01:
cd:94:97:bb:ba:10:64:d1:fd:36:e8:98:9a:90:fc:
36:e6:0f:bb:fb:1c:76:21:4d:59:24:ca:0d:44:5e:
6b:d3:d1:ee:81:bd:75:f7:47:6b:11:d2:23:59:8a:
d0:a4:4d:81:21:01:7f:96:51:a2:4c:de:4d:0d:34:
7e:a3:ec:2c:b9:1c:02:9e:dc:86:b9:9f:4b:59:01:
19:30:a7:6d:65:6a:0b:6e:d2:1f:e5:bc:2c:03:6e:
39:83:12:91:8f:c3:b2:23:0b:a0:0a:9c:df:88:78:
29:49:1f:9a:c9:ee:05:0e:fd:a5:1d:d9:a3:ab:a1:
13:d6:83:69:ed:66:fd:82:e8:3e:77:60:80:7b:eb:
f9:9c:bd:66:74:1d:58:5f:d8:3e:12:03:44:3e:5f:
00:af:7b:4f:09:2c:c0:d1:d8:bf:42:89:2f:1f:8e:
81:63:f2:bc:82:e3:04:00:5d:3c:a4:2c:df:ba:3f:
7b:1a:ea:3d:03:d5:ec:b5:a3:14:8d:7d:ba:9f:e3:
b1:24:46:df:94:18:d1:fe:d7:a4:bd:e4:5b:12:bf:
8a:4d:e6:6a:a3:77:b7:fb:ea:88:4e:46:a4:06:ef:
7e:6a:c9:1f:b0:15:04:71:9f:f7:54:b4:bf:0c:36:
04:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:3F:BA:47:0A:8C:D5:8A:0B:89:51:06:EB:A3:69:1D:B2:32:B3
X509v3 Authority Key Identifier:
keyid:84:4A:7E:59:58:B2:AA:F2:1F:D1:62:1C:C9:ED:1A:E6:5B:D7:7E:B3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20296/hEp-WViyqvIf0WIcye0a5lvXfrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hEp-WViyqvIf0WIcye0a5lvXfrM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20296/hEp-WViyqvIf0WIcye0a5lvXfrM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:e1:9c:50:9a:3d:40:dc:16:06:e9:cd:77:90:f3:c1:57:90:
4e:da:31:d7:91:38:92:c1:c4:b5:4d:f9:6d:c5:5f:8e:eb:39:
0c:59:38:cc:d4:dd:5e:da:67:d0:54:99:ba:e2:a4:85:3d:50:
57:99:fb:12:a6:96:4b:81:20:bb:59:9f:90:7d:ea:41:e5:6a:
03:4f:3e:99:07:0e:6a:d2:62:b2:b6:02:9e:17:06:7d:39:01:
c7:70:65:b1:ef:75:26:f5:3f:f2:cb:a6:3a:06:2a:f5:5a:5d:
97:52:1d:57:82:21:aa:d3:97:2c:3a:01:9c:c0:52:c5:4e:48:
81:43:7c:c4:22:05:70:30:14:52:73:37:55:b9:5e:3f:81:6e:
21:19:fc:8b:34:b4:81:2d:bf:91:2e:1d:81:c9:0f:68:e9:4f:
d4:e0:88:45:83:43:ac:0a:0f:8d:a4:6c:a3:03:01:52:55:40:
08:ee:34:72:2d:58:ff:56:1c:27:6c:81:d4:b3:82:9c:8e:09:
85:90:bc:1a:bd:1f:2a:1b:7b:76:e1:e1:03:f2:0f:ef:7a:50:
c6:9e:a9:4a:4e:e5:2e:45:d9:60:03:3c:88:69:17:b8:99:9b:
43:00:a6:6d:65:53:8c:5e:6a:19:6d:f4:c9:9f:70:bc:43:eb:
6e:fe:6e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:53:28 2026 by rpki-client