
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
File: 0imUh5wlgSP_oJfoTgU3X2ClkaU.mft (raw, json)
Hash identifier: MgLXVllneaSqeimnI754qJTdaXBET+mWvUsMGaslrx4=
Subject key identifier: 39:D1:00:CF:01:51:78:F8:85:34:72:CD:78:62:6D:69:6B:55:E2:13
Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
Certificate issuer: /CN=D22994879C258123FFA097E84E05375F60A591A5
Certificate serial: 2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
Manifest number: 0ABC
Signing time: Fri 22 May 2026 23:23:07 +0000
Manifest this update: Fri 22 May 2026 23:23:07 +0000
Manifest next update: Sat 06 Jun 2026 23:23:07 +0000
Files and hashes: 1: 0imUh5wlgSP_oJfoTgU3X2ClkaU.crl (hash: 00W1dgj0ST+org5zsAbt3TAEMlbrgnhQyx+urzMnFu8=)
2: YO0xHd0WS0PiUxFddFoZ0bxIo90.roa (hash: jED7La9Jt98TVPWecLsuEbyNxPeRKMtOsahKYCuPTMI=)
3: lKFnuHw1nis7qcjeNjFeOFss30Q.roa (hash: rtz4Wl62XuoGei2UY3Rt4pg7hFgtcMQiUpAUAkrOrwc=)
4: mPyd-BKvCKEzonmg7GB1BPLsMl8.roa (hash: z7bjLYUTfBJYDXpCq+qqVwRKGrnVohpkyKUmqAvacPI=)
5: qRzK3cPR2YhBjwmypwbOxnqV4zs.roa (hash: 2qWfdVawYsSMd7ClXuMFksHB+kMjlzBZKKLKeuaiF5E=)
6: rO_73jM4JzO0qmtCbCzui48rcyU.roa (hash: m+r+XumAyZSI9MWujUVx+p9FnZ0CVnYRHSBroVYdWSQ=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5
Validity
Not Before: May 15 01:30:27 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=39D100CF015178F8853472CD78626D696B55E213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:36:3d:e5:15:06:be:94:60:db:06:fd:e0:
f8:3f:60:b4:9d:5f:68:f0:00:74:28:20:55:f9:b0:
cc:08:3a:24:ac:e2:54:da:21:dc:9e:e3:5d:25:fb:
ac:5c:d0:cb:1e:a3:59:f5:f8:20:df:21:f7:36:03:
73:26:0e:10:6b:2a:a8:20:0b:1e:be:1e:b4:e0:d9:
da:d9:81:8a:c5:91:b5:2f:06:e2:71:ef:80:52:22:
36:b8:15:42:3a:f4:36:35:bc:db:6a:3d:34:77:af:
a2:35:fd:5c:38:7e:96:74:3f:dd:e8:5e:4d:54:5f:
86:a5:82:8e:27:d4:98:64:2b:80:bd:77:40:e9:3b:
90:fc:f1:fb:f5:c4:16:5f:7a:a8:f0:53:f1:1e:2d:
b3:3a:fd:0e:66:49:dc:a6:67:8c:19:55:59:84:06:
6d:98:a2:36:e0:f4:de:ff:b4:17:51:f0:3a:59:7b:
98:78:80:9d:f2:93:1e:7b:cc:fd:92:ba:37:99:fb:
c1:d1:8f:2e:91:5d:1b:cd:c5:91:e5:fb:f9:4a:89:
42:82:59:03:a3:0d:16:5d:a8:17:dc:a5:69:58:7d:
68:c3:b2:ed:3f:6a:3d:2b:a2:18:0b:55:d2:a7:e3:
ef:f4:d7:6e:bb:d0:ed:17:54:b1:46:61:af:f7:b0:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D1:00:CF:01:51:78:F8:85:34:72:CD:78:62:6D:69:6B:55:E2:13
X509v3 Authority Key Identifier:
keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:52:61:d4:af:68:33:66:37:94:a3:0c:e3:b6:11:2c:e4:0b:
e7:49:85:57:20:f4:80:fe:16:6c:45:82:85:e6:64:8e:5a:da:
3e:60:b2:2e:25:2f:3e:b7:15:60:cf:c0:34:53:7a:5d:32:90:
30:72:c0:b7:98:02:67:2a:79:39:54:0b:5a:52:4e:05:96:c7:
0a:ed:b9:cf:f1:58:47:1b:c3:6c:77:2a:08:9e:4e:3d:06:48:
31:96:8e:91:f3:c2:c9:b2:07:1f:71:2c:8a:f6:36:0b:83:ab:
2a:c4:f1:cf:38:fe:3b:ee:d3:63:b6:88:68:73:01:3e:2a:c8:
b9:15:d4:18:dc:fa:1d:11:5e:d0:17:cb:62:a6:96:41:22:06:
4f:19:26:e6:46:6c:14:db:84:ea:d1:4d:88:46:19:00:60:76:
9e:23:fa:89:24:6c:ea:4b:99:91:a9:66:cd:05:2e:f5:0c:d4:
05:d5:c7:06:ac:2b:6c:e9:da:67:2b:ca:b3:47:31:0a:d6:41:
d1:0d:76:8c:35:b0:4c:3b:fd:48:0b:42:07:07:a1:44:ee:20:
c2:62:33:83:7c:5b:08:04:10:3c:03:57:a5:b4:a4:f3:55:82:
e4:7a:6c:75:52:11:62:38:d2:29:90:0e:12:a3:d4:c5:f4:49:
35:e2:22:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:10:13 2026 by rpki-client