
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft
File: X0aLMdsnWl3a56VJrAWNwg1_jJw.mft (raw, json)
Hash identifier: UHnY6Dxblg+lHsLTZFNI0kDMopB7Gfoa4TYphPMn13Y=
Subject key identifier: 52:D4:50:26:FC:A1:CE:95:7E:A5:1E:EB:5D:B3:1C:E2:A8:C9:7B:D7
Authority key identifier: 5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C
Certificate issuer: /CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
Certificate serial: 48
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft
Manifest number: 0E9F
Signing time: Tue 07 Jul 2026 07:52:00 +0000
Manifest this update: Tue 07 Jul 2026 07:52:00 +0000
Manifest next update: Thu 06 Aug 2026 07:52:00 +0000
Files and hashes: 1: NJ4RdvLsLlElQl-FMhmbA3xacHQ.roa (hash: n3AhZ+lK3mXMw1fn9SBGDnAxLvUb8MkFekVgOiw16MA=)
2: TpQ2zhYDJN-8eokKWan9fytNG0o.roa (hash: Fg3Umt30XSA4nwb1uP5OpR0DEZrgqDMoWkvPNrO6zoA=)
3: X0aLMdsnWl3a56VJrAWNwg1_jJw.crl (hash: uQUUDw3rpdpi+hJWbDu4hmkDyVU44+8kxzeLMrFoEuY=)
4: ffXcoJ-_4WhO_JgRspP4Uu4rmYU.roa (hash: W5rklEZk2vr3WK0qCRwY+boVHyhC6LnCVnjVW1AT7Sk=)
5: zlofQUpfioUOCYC7iGh5DPqeoGI.roa (hash: moLdCZBcpouWAIg0eq/OGXuIebBwBsS7sYyyhKBAKVQ=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
Validity
Not Before: Jun 15 01:34:07 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=52D45026FCA1CE957EA51EEB5DB31CE2A8C97BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:11:81:7a:07:eb:64:eb:63:5f:6e:cb:23:
62:20:83:cf:82:92:d6:87:48:c4:1e:31:d5:93:f3:
81:53:db:12:89:82:f6:29:de:0e:6d:a8:9c:16:9c:
ca:91:1f:75:98:5d:7f:82:ee:e5:46:43:18:4a:70:
f4:de:12:f2:df:7f:be:9c:f3:3a:11:27:74:ba:8e:
c9:8c:41:dc:e5:f9:48:c5:53:a5:eb:0e:e6:f5:5e:
38:7c:9b:3e:d0:5c:0a:4c:d2:7c:d7:6f:8e:47:5d:
83:00:7c:95:26:7e:76:f6:f3:d9:c7:3f:ba:93:a9:
81:52:7b:46:e0:a7:89:04:43:db:bc:a2:14:da:94:
8f:7c:ea:6d:ce:99:ea:0a:ad:46:4f:83:f1:fd:ee:
ab:d0:76:81:64:d2:f6:0e:57:66:35:ec:c3:1e:dc:
c6:04:2f:23:61:de:65:0e:46:7d:3b:42:e9:3e:0f:
b0:65:c8:67:2b:85:12:8b:20:11:58:49:49:ba:f3:
9c:12:f2:6c:66:04:34:97:a5:c8:5a:71:77:13:ae:
45:27:f8:48:e3:b2:73:42:98:9b:80:ab:65:71:fa:
02:3f:b4:ea:15:f4:b4:47:7c:0b:58:b4:04:e9:2d:
49:e4:5b:d9:47:0a:b3:ce:11:fe:9c:8a:87:2f:08:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D4:50:26:FC:A1:CE:95:7E:A5:1E:EB:5D:B3:1C:E2:A8:C9:7B:D7
X509v3 Authority Key Identifier:
keyid:5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:af:40:4a:41:4c:b7:bb:87:44:ef:d5:73:ed:e8:1f:67:d4:
bd:81:44:74:66:92:3c:f4:ed:14:4e:17:2a:9a:6c:3c:a4:05:
21:fc:cb:ca:67:40:24:14:7f:b0:8e:20:c3:06:96:72:2d:de:
42:64:76:23:e9:99:ae:55:e0:08:3b:40:f0:cd:61:17:e7:f1:
d1:a5:0d:57:20:fc:c1:02:9c:e7:b1:92:ea:fb:26:ee:87:3f:
03:e5:9d:8e:8d:88:c0:70:8e:c7:aa:23:66:98:0b:7e:de:fb:
5b:03:65:d1:21:7d:94:16:79:5e:dd:1c:95:30:6b:08:37:32:
1e:58:d1:e0:cd:c6:79:f5:55:82:36:fc:2b:01:24:53:d2:e4:
e8:64:39:4e:70:ac:12:d7:82:0d:82:fc:66:8d:c3:07:83:d7:
15:c9:f1:ef:57:ca:d5:70:73:1a:35:90:ff:c5:29:77:ef:5a:
4c:30:a3:79:99:f9:87:20:a7:3e:97:bf:1d:66:d9:cb:35:38:
73:84:e2:13:b7:0e:51:c3:32:26:6e:45:ed:82:b6:b7:56:73:
0e:b5:84:fa:8c:bf:3b:4b:21:0e:9b:4c:e8:75:4a:a0:df:d4:
e3:2e:67:3f:db:a9:4e:fd:26:09:ec:63:a1:c4:d6:6a:61:7e:
3a:2a:1c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 12:41:53 2026 by rpki-client