
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
File: sO8BlKUNHPsce5lL7-S-faasGWg.mft (raw, json)
Hash identifier: Kz4bOtu4SwaDZ0Loqv4N4dbD3BqED8vQB0F2YNMt+kY=
Subject key identifier: 43:57:90:D5:43:86:5E:8A:1D:68:31:C3:51:22:4F:21:6D:16:DD:E9
Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
Certificate issuer: /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Certificate serial: 28
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
Manifest number: 0D09
Signing time: Wed 01 Jul 2026 05:16:07 +0000
Manifest this update: Wed 01 Jul 2026 05:16:07 +0000
Manifest next update: Fri 31 Jul 2026 05:16:07 +0000
Files and hashes: 1: 6zBWFbMSLn7CY8g7XFwQXgg3lJU.roa (hash: FW8FqgVVpR9pwps8b8SMf4uJ9IIZY9NPyf3C7BWhbr0=)
2: AsXQFFllWUs7Lx2gWcQEskwiv3M.roa (hash: lThvz2n55kabVdspT8zJME044hEWcB8DRsCwosHk/i8=)
3: RWcI3c3D2cb2pHayV2z9hsZxDRM.roa (hash: YkOhmc5aWYuRefd/k0j0WFFOaMpfwF671o326eyB4xA=)
4: Zn2SJ1TMU0zx6u0I_qaUFfPce6g.roa (hash: M5/iOfI4wipf8npqmomSntwBh10RaC8oCYOzbM4GaIM=)
5: sO8BlKUNHPsce5lL7-S-faasGWg.crl (hash: 0nVqPAyF2c9mxgqLXNVd0rdkrw+tqDEvuyxjzct1aec=)
6: vjb4PZQeOkns3j5c6qwyjWaClQQ.roa (hash: jDCMkZhT1mQMLwJ9v5kMXBiE2mTT0xCnvHrFAr9Egqg=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 05:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Validity
Not Before: Jun 15 01:30:21 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=435790D543865E8A1D6831C351224F216D16DDE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:d9:8f:ad:0c:fe:b0:a3:86:8d:06:42:b8:
ce:71:47:42:ff:fe:1e:c2:bb:21:31:2d:82:99:a9:
9a:26:76:5c:98:7f:d9:8e:33:dd:03:38:75:79:44:
a0:38:1c:60:34:29:af:00:46:be:c3:c0:7b:d7:08:
cd:5e:df:60:11:62:0a:99:08:e6:15:1c:02:07:70:
a3:1d:91:09:16:8f:c5:b2:81:ce:5a:c5:fd:8f:76:
37:48:e3:b9:da:35:48:18:7e:53:38:b9:71:f6:d3:
fc:d4:c0:b6:85:78:df:90:73:06:5c:69:1a:07:b5:
4a:1f:96:5c:61:92:27:38:19:b9:f9:f6:b8:c7:c3:
fa:98:3c:d8:75:03:6a:64:29:60:89:da:e0:09:74:
21:bf:27:2b:69:a6:6a:a6:47:7b:ef:b9:9c:39:09:
06:26:66:27:4c:66:d4:63:60:aa:f8:0f:2c:a4:8a:
aa:db:85:36:5d:f9:6c:aa:6b:38:8b:a6:06:5a:ee:
e4:44:15:6a:80:da:86:4b:82:5b:88:e9:19:34:78:
b7:3b:41:e4:a6:1d:8f:e6:27:e9:fb:8a:5a:f6:60:
ff:bc:bf:62:35:da:1b:91:5c:20:9b:7f:51:b3:5b:
25:f6:8f:c9:8b:a5:ea:2b:f1:f6:40:ed:f9:97:ac:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:57:90:D5:43:86:5E:8A:1D:68:31:C3:51:22:4F:21:6D:16:DD:E9
X509v3 Authority Key Identifier:
keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:d7:2b:e4:42:db:0b:bc:80:91:8d:9c:15:f5:be:f0:8c:13:
c4:30:d1:e0:e7:77:3f:c9:82:40:f8:91:6a:a0:fd:a8:99:29:
3e:f0:68:2b:fe:c9:02:1e:9b:4e:a1:ea:d1:01:67:f5:41:db:
25:1d:7a:24:ce:02:fd:78:51:47:ff:c1:3d:4a:8d:95:30:82:
5d:0a:f5:54:83:5f:42:cc:9c:88:70:27:0c:91:ee:bc:bf:78:
fe:62:62:06:5d:8f:93:8f:e4:c8:ed:fb:3a:f0:1a:c8:e4:9d:
63:19:fe:11:50:59:6f:2b:35:a3:0d:eb:c0:21:ae:34:e9:b1:
b0:cc:69:76:65:91:8b:eb:47:4d:d6:d6:19:a0:fa:6b:39:e0:
dc:77:bd:c0:b7:4f:04:eb:61:c3:59:ba:f4:79:fb:f9:85:72:
7e:64:26:82:75:b6:32:23:50:a9:86:56:f1:20:3a:b4:15:c6:
13:29:97:59:3e:cd:f7:5f:ad:43:0e:b9:7e:45:39:b1:63:47:
39:3d:6b:88:58:90:cf:2b:90:0d:8d:24:28:0f:e3:38:43:a2:
86:eb:12:0c:bd:6f:30:1c:da:5a:e9:3c:f7:d8:35:43:ad:89:
7c:76:4b:60:80:3e:2a:4b:11:55:a8:9b:03:26:33:58:1b:1b:
40:df:07:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:25:55 2026 by rpki-client