
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
File: xQNPu84HmaDyhoO9O6M5qb1kW9w.mft (raw, json)
Hash identifier: 9gcFzbUMe/qvRgoUYajcHxkgx59o6eMzSDtgj8TjaeQ=
Subject key identifier: CA:A7:0E:7D:45:32:DE:4A:4F:54:AD:A3:61:E5:B0:F7:19:B3:41:45
Authority key identifier: C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
Certificate issuer: /CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
Certificate serial: 3B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
Manifest number: 0D3F
Signing time: Sat 23 May 2026 00:12:53 +0000
Manifest this update: Sat 23 May 2026 00:12:53 +0000
Manifest next update: Sun 07 Jun 2026 00:12:53 +0000
Files and hashes: 1: 6R8BHJb3CDd-Ybp68MFV5KXq6Ig.roa (hash: OmRuBzf9aFEjRhBm/V1u+sYD57/gQ/z3hB066FMGVR4=)
2: LAvNa7ToR38szCpBLXmYDrNbY54.roa (hash: V5QWf30eIgOuRgIdZUY2iXovhu43DQaJG+ZXUOpJZDY=)
3: _B74v9HDBOq9K09xAW7EaYSRdjA.roa (hash: F9UMz7kJ5UVqv0Hnp3DEqDTnLpu7TT4BHn1A5frF9HI=)
4: biDidwj7_Bn2_uBbGFo_fJj6jmE.roa (hash: N/bb+PQHFucTglpab1UqOBcpZitJKqG7mpWQOP0Qxts=)
5: jXlIhylAHxT9wsqyl458DdhF3wY.roa (hash: qQkHrDhKpCsrHJqXuzY47d5LjJNia8x+oweXKlXj7NU=)
6: nIA4Xyz-ZGRxm5Z0M_vp-c64RC0.roa (hash: PdZ2tnr8EivMXJG8bT0AAxwCwGoG36gc71gmvMtV7mk=)
7: xQNPu84HmaDyhoO9O6M5qb1kW9w.crl (hash: QVNbPraPYe4TEI38lViiHzdVW9q2OLVAvWPT+TF8xlg=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
Validity
Not Before: May 15 01:42:04 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=CAA70E7D4532DE4A4F54ADA361E5B0F719B34145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:d5:14:37:de:21:01:03:7c:94:b5:d8:bd:
45:fd:ab:36:dd:96:2f:c9:bf:3f:1b:2a:1d:f1:8e:
bf:d6:a7:76:c2:93:52:18:b7:77:b2:58:12:ce:d9:
23:61:cd:41:8f:10:a8:fd:c3:b8:bc:54:68:92:26:
2e:02:05:72:99:a3:39:b9:c4:a9:dd:01:d9:b6:b0:
70:c3:75:9a:8d:0b:bb:fb:22:e6:5a:20:9a:92:d8:
66:5e:f7:9f:ca:77:fb:8a:65:4b:a9:ac:5b:45:3c:
f1:46:b7:d9:fc:34:99:c5:a6:4a:6d:eb:eb:f3:dd:
9c:70:d5:38:86:6e:4b:8e:18:5e:1e:82:58:e5:15:
50:91:e0:2f:04:37:e5:51:63:03:a8:99:05:e4:02:
a5:e0:1f:7f:d5:17:df:7d:2c:76:80:6b:cd:83:4d:
70:8a:e1:59:85:0f:30:86:7c:d6:54:01:eb:4a:88:
34:6f:f7:45:3e:ee:5b:f5:45:f8:41:ba:e3:9d:c3:
aa:fb:6a:63:87:08:a5:e4:bf:8e:8f:a1:86:74:02:
ab:7e:3a:ac:89:5b:42:8b:28:04:6c:66:b3:1d:70:
dc:e0:48:8f:dd:3f:27:c5:f0:12:70:f9:92:60:c8:
87:05:e8:ce:77:ba:01:28:c9:0b:a0:1a:2b:b0:69:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A7:0E:7D:45:32:DE:4A:4F:54:AD:A3:61:E5:B0:F7:19:B3:41:45
X509v3 Authority Key Identifier:
keyid:C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:e2:9d:b7:c5:32:5b:a9:5f:05:9b:6b:62:d1:7a:bd:24:06:
13:de:e8:9b:7e:13:e2:81:1f:cf:a4:53:46:32:46:52:1b:46:
6b:05:66:85:90:53:b1:3b:13:d3:8e:bc:19:78:70:5f:92:3a:
1b:2b:19:e7:19:e4:2e:e5:fc:e3:3f:3d:f1:d2:77:81:2e:32:
7b:25:b5:38:ec:7f:9a:3b:2a:04:08:54:bf:57:9f:f5:2a:d3:
95:1f:cb:e3:70:cc:69:96:6e:53:8f:c5:fd:d8:9e:e1:a9:92:
f0:7e:ee:90:49:a5:74:98:f4:91:74:a0:d0:a2:da:d3:2c:29:
c5:98:82:a5:ad:cf:43:86:ff:51:50:39:62:a2:ee:8c:63:21:
16:94:c5:37:5e:f5:38:c9:e0:58:c1:ca:2e:2c:0e:8b:ac:bd:
ab:c0:34:95:45:bd:8b:4d:0a:c2:e6:64:b4:df:13:22:c0:e2:
70:e2:39:19:25:76:3c:cf:f7:38:97:0c:09:3e:a7:1a:18:65:
f9:8d:e6:f4:ce:59:02:88:0e:b5:b9:0d:af:8a:2e:36:7c:d6:
eb:e6:94:95:34:62:45:1a:30:9a:c4:5a:15:d3:c1:b3:b2:72:
91:70:21:89:87:46:48:0b:c4:bf:4b:ec:6c:18:d6:37:67:dc:
fe:6b:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:10:31 2026 by rpki-client