
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
File: Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft (raw, json)
Hash identifier: dCuZKd3uZi7DzjkGn2BgvZotn1YdMKK7u/SF6ezN4cg=
Subject key identifier: C7:0D:F9:55:06:1E:0D:64:7C:29:B9:08:FE:0C:7C:C6:29:6B:D0:21
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial: 92
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
Manifest number: 1338
Signing time: Fri 22 May 2026 23:29:06 +0000
Manifest this update: Fri 22 May 2026 23:29:06 +0000
Manifest next update: Sat 06 Jun 2026 23:29:06 +0000
Files and hashes: 1: 7EWcrJp0poJ370gsi2ubRjErqjk.roa (hash: LkNJlKBoEs6uMIeesvsVD7oyZXLRmK3epwy72Uz30es=)
2: GCOAbGJnC1Efezgt2JzfwpE8gL4.roa (hash: z5UtJVrqKIAb8vJBOWfugcHSKZwHCPkPTAvpvSFrz3U=)
3: HcV9AcmocA1aP0n84pFsP8qz8Ic.roa (hash: +/d07VRtkPVysiN73N1Y+LMfQylkWZawGkauKeMiFFs=)
4: Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl (hash: G38zzzC/xQm0j66txWLZ6s5oF5tOUFi3zkzjvOjWAe4=)
5: QJHFhuCiV4iS_84OYwjw_Skgtpw.roa (hash: 0TT7Kw4NvNs1lP57tfIjQxRHLKDWp6S3/sRf5uXFYkc=)
6: sf5fL2zWAEejkxxzEO2rDS9MPT8.roa (hash: fPTu6a9E9jk5wBo40t+GVclZdlUNFIxCPWyogvEzTTw=)
7: yHGBL_za0aWjwPhKhxeTbBPoGpU.roa (hash: nGDs9w4mscRBaybukZHE87GqbzyeAV1x0beugP15Ks0=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Validity
Not Before: May 15 01:39:10 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=C70DF955061E0D647C29B908FE0C7CC6296BD021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f7:90:79:e7:a5:b8:25:28:52:52:50:a9:7a:
9b:45:31:e9:23:d6:f8:ee:45:d6:4f:89:fa:6e:39:
1c:8e:f9:9f:ea:ae:6e:cc:00:f0:b7:4d:6f:1f:e0:
d2:88:86:04:79:9b:19:c0:d0:f0:24:d2:bd:f6:0b:
58:9b:04:ab:86:6c:80:55:fe:11:74:be:80:b7:5d:
a7:b7:5a:44:d2:46:63:7f:96:4f:b9:27:f9:74:d9:
0f:3f:8b:41:89:ed:d5:60:99:a5:5f:e2:4e:0c:12:
3e:15:f4:4e:a8:f4:60:f7:1d:de:6b:f8:ca:55:cb:
69:ab:31:a2:a3:d7:40:5f:3b:90:b8:19:e0:83:4f:
7f:a5:eb:fb:73:c5:14:f2:b0:f6:3c:af:8a:15:23:
b9:21:96:4c:5a:f5:ef:a8:bf:04:1d:0e:3d:7d:58:
82:76:87:ae:59:51:7a:53:c2:b6:ea:c1:ea:d5:ad:
b5:9a:09:d5:0b:92:75:77:47:b8:50:d2:3f:7c:65:
f6:46:76:7d:8c:b6:8f:95:e1:f2:df:fb:11:ba:eb:
76:1d:a6:c9:02:8f:eb:94:1e:86:92:36:c0:7a:30:
a1:cd:e5:00:8a:7e:48:2d:5f:b0:4a:ec:1d:17:06:
d6:f5:d8:9c:b4:6e:86:63:75:8c:ac:ad:c7:a0:40:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0D:F9:55:06:1E:0D:64:7C:29:B9:08:FE:0C:7C:C6:29:6B:D0:21
X509v3 Authority Key Identifier:
keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a3:e0:79:4d:bb:66:3e:8e:d5:6d:cc:e9:68:72:d9:2b:0d:
4e:b1:b4:a8:8a:ba:52:59:65:40:39:62:db:fd:1e:0d:77:47:
38:74:c2:44:f1:92:dd:7c:0d:dc:48:09:2b:21:f9:cd:5d:44:
c1:a0:51:00:c6:8c:b7:e0:ab:03:b0:b4:56:a5:e4:48:23:84:
2e:54:34:41:99:8b:23:3e:1f:4c:2f:0f:fc:17:b5:e6:7b:d7:
59:ad:5f:16:93:3c:d0:47:ed:a0:84:79:b9:32:02:2c:0f:3c:
c5:18:70:f5:80:5f:e2:83:9a:90:52:53:84:bb:40:fd:50:9f:
49:78:2f:1b:53:b2:c7:88:73:2d:c1:d8:23:0a:ec:69:71:1b:
7d:46:a6:be:a9:23:2c:cd:91:6c:28:bb:4b:76:db:9f:05:9f:
70:aa:a6:3a:72:2a:eb:d1:4b:c5:cb:af:65:00:7e:c5:66:3f:
87:71:10:17:aa:e2:24:b1:bc:65:56:cc:88:77:36:67:92:11:
02:5d:7f:9e:48:1d:00:0c:ea:51:2f:13:c4:d1:4d:2d:0b:d4:
2d:6a:4d:c9:67:07:e0:dc:77:d1:de:3e:78:c6:68:00:dc:c5:
34:b1:14:eb:54:c1:c1:12:ed:46:c1:59:30:c6:8f:cd:68:e4:
08:5a:61:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:10:34 2026 by rpki-client