
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
File: XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft (raw, json)
Hash identifier: Ud3ZtSnM3lXVz2FNMqYcSXe+YPhesTqfsnUeLAu8F14=
Subject key identifier: 9F:5B:DC:1F:E1:F9:7B:C1:56:56:EE:97:EB:5A:C1:72:17:AC:B3:93
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Certificate issuer: /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial: 5D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
Manifest number: 0EBC
Signing time: Tue 07 Jul 2026 08:21:47 +0000
Manifest this update: Tue 07 Jul 2026 08:21:47 +0000
Manifest next update: Thu 06 Aug 2026 08:21:47 +0000
Files and hashes: 1: 1SJo71igaHLgUqK0qv65e1UZLaA.roa (hash: l7Nh6G5bM0ySyDxtiFLXl+6/Zslh+YuV/9NkG0Ajr2k=)
2: 2ZWoc0vfItRUHT-iHawd5xJ1AH0.roa (hash: 5oro9FPwuLX2h0lv/azTT6JOS1sD5Q97Gh46q0esP3A=)
3: 30tPl69056traOGJH4Ob9nl2keE.roa (hash: rkXWLnzAgLJSxPXU0KwalcIuXV74TRLnNkXNl16LCEM=)
4: EgzvxQs5umd5MzIZcXRFKSLH4zc.roa (hash: W9nkE5BInFbpftywAx7OKzY7tLZ4LMAlmi3gmDUkOB8=)
5: IZJHJaKXOKSaDlFNwUiMHoBonSc.roa (hash: OKViRoTiEJKyqFHuIOm3gRHfzqFnST+ckLsmtoQf3DI=)
6: XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl (hash: mC0aJSvutZFLuzRbBmNYeWKZQNGO/+ltt7OsZvsJ+OA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Validity
Not Before: Jun 15 01:32:58 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=9F5BDC1FE1F97BC15656EE97EB5AC17217ACB393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:70:0e:27:27:3c:99:7d:2d:b0:38:59:ef:52:
a6:10:7e:87:c0:50:8e:cf:53:16:52:9f:32:5c:af:
46:e5:a6:d8:3b:40:89:28:e3:cf:96:4c:cd:ad:a4:
a3:5d:aa:34:d5:1a:f0:35:ee:21:fa:5a:64:41:a2:
40:de:3b:17:5f:7f:81:6f:c6:ff:44:64:78:08:22:
fd:3c:fe:76:0d:6f:54:dc:ca:6b:b6:aa:3e:a2:22:
3b:c1:0d:6d:37:18:52:a8:92:e6:fb:59:dc:dd:aa:
21:15:eb:67:5c:0b:f0:f4:f6:07:33:d8:aa:63:e1:
67:ca:07:e8:56:ee:a6:6c:95:02:60:46:fd:9a:8f:
49:3c:da:d0:e7:eb:13:85:be:fa:2b:f0:79:10:50:
4e:ff:75:c9:d8:2e:9f:50:17:e5:c6:ad:f9:09:22:
9f:24:75:c6:56:84:29:ac:7a:52:ce:55:9a:a8:33:
70:41:7d:2a:49:63:35:4a:45:4a:e2:61:6e:d3:c3:
5c:fc:6d:c0:62:73:20:c5:96:67:03:c3:db:d8:9d:
fd:89:c4:80:7d:94:6b:a3:59:88:c6:a9:25:80:0c:
6b:80:6b:af:bc:64:70:04:55:32:2c:8d:6c:d4:a2:
0d:d9:74:02:87:04:cc:8c:b3:b0:3e:fc:fe:e1:24:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5B:DC:1F:E1:F9:7B:C1:56:56:EE:97:EB:5A:C1:72:17:AC:B3:93
X509v3 Authority Key Identifier:
keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c6:8a:ba:59:94:54:07:c4:32:61:be:d6:b8:65:bc:06:ca:
85:a6:33:fd:08:39:cf:74:28:84:07:d3:5c:b9:f9:48:76:08:
0e:1e:4d:67:e1:7d:df:23:fa:1c:47:26:d2:2f:6a:1c:67:27:
21:e4:f4:0a:25:36:91:78:23:85:75:87:3b:2e:35:83:d7:d3:
ed:9a:8b:86:d3:e2:35:ed:f6:70:b2:20:d8:c4:3d:0d:53:6d:
8c:0a:33:72:94:f9:17:46:b8:d6:25:c7:8d:61:e5:8f:85:88:
f8:c1:b6:26:52:14:47:2f:82:c5:89:35:2f:e4:e9:00:d9:6f:
02:f7:1a:72:a9:89:0b:42:f3:93:da:4a:fd:79:bd:4a:76:4f:
e8:a1:78:da:1c:f6:88:08:62:d1:1e:c2:e9:a5:bc:e8:71:20:
f1:ae:ae:4d:d6:c1:d3:5c:25:c3:e8:72:ec:12:fa:f4:2d:99:
5a:0e:2f:58:8a:7f:8b:cf:8b:ce:37:9e:93:d8:61:fb:11:23:
ca:3b:64:97:80:be:2d:95:c5:7c:a9:d6:59:1b:3a:cb:c9:16:
8a:ac:e2:11:9c:8f:62:5d:0a:c8:4f:57:84:83:47:46:b1:43:
8a:e9:9f:74:66:49:c6:68:f0:96:bb:05:87:a0:51:e9:75:43:
4c:f4:44:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 12:43:41 2026 by rpki-client