
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
File: Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft (raw, json)
Hash identifier: gow0KfMEWGCRz056aAEKSFQuw4ckn1IkVwK4IOepReQ=
Subject key identifier: C7:0D:F9:55:06:1E:0D:64:7C:29:B9:08:FE:0C:7C:C6:29:6B:D0:21
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial: 93
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
Manifest number: 1447
Signing time: Tue 07 Jul 2026 09:37:16 +0000
Manifest this update: Tue 07 Jul 2026 09:37:16 +0000
Manifest next update: Thu 06 Aug 2026 09:37:16 +0000
Files and hashes: 1: 7EWcrJp0poJ370gsi2ubRjErqjk.roa (hash: LkNJlKBoEs6uMIeesvsVD7oyZXLRmK3epwy72Uz30es=)
2: GCOAbGJnC1Efezgt2JzfwpE8gL4.roa (hash: z5UtJVrqKIAb8vJBOWfugcHSKZwHCPkPTAvpvSFrz3U=)
3: HcV9AcmocA1aP0n84pFsP8qz8Ic.roa (hash: +/d07VRtkPVysiN73N1Y+LMfQylkWZawGkauKeMiFFs=)
4: Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl (hash: sAwacn8nWtkn67SZSyY5Cpx781ZTwzR6j+aN7yaEShU=)
5: QJHFhuCiV4iS_84OYwjw_Skgtpw.roa (hash: 0TT7Kw4NvNs1lP57tfIjQxRHLKDWp6S3/sRf5uXFYkc=)
6: sf5fL2zWAEejkxxzEO2rDS9MPT8.roa (hash: fPTu6a9E9jk5wBo40t+GVclZdlUNFIxCPWyogvEzTTw=)
7: yHGBL_za0aWjwPhKhxeTbBPoGpU.roa (hash: nGDs9w4mscRBaybukZHE87GqbzyeAV1x0beugP15Ks0=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Validity
Not Before: Jun 15 01:31:58 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=C70DF955061E0D647C29B908FE0C7CC6296BD021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f7:90:79:e7:a5:b8:25:28:52:52:50:a9:7a:
9b:45:31:e9:23:d6:f8:ee:45:d6:4f:89:fa:6e:39:
1c:8e:f9:9f:ea:ae:6e:cc:00:f0:b7:4d:6f:1f:e0:
d2:88:86:04:79:9b:19:c0:d0:f0:24:d2:bd:f6:0b:
58:9b:04:ab:86:6c:80:55:fe:11:74:be:80:b7:5d:
a7:b7:5a:44:d2:46:63:7f:96:4f:b9:27:f9:74:d9:
0f:3f:8b:41:89:ed:d5:60:99:a5:5f:e2:4e:0c:12:
3e:15:f4:4e:a8:f4:60:f7:1d:de:6b:f8:ca:55:cb:
69:ab:31:a2:a3:d7:40:5f:3b:90:b8:19:e0:83:4f:
7f:a5:eb:fb:73:c5:14:f2:b0:f6:3c:af:8a:15:23:
b9:21:96:4c:5a:f5:ef:a8:bf:04:1d:0e:3d:7d:58:
82:76:87:ae:59:51:7a:53:c2:b6:ea:c1:ea:d5:ad:
b5:9a:09:d5:0b:92:75:77:47:b8:50:d2:3f:7c:65:
f6:46:76:7d:8c:b6:8f:95:e1:f2:df:fb:11:ba:eb:
76:1d:a6:c9:02:8f:eb:94:1e:86:92:36:c0:7a:30:
a1:cd:e5:00:8a:7e:48:2d:5f:b0:4a:ec:1d:17:06:
d6:f5:d8:9c:b4:6e:86:63:75:8c:ac:ad:c7:a0:40:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0D:F9:55:06:1E:0D:64:7C:29:B9:08:FE:0C:7C:C6:29:6B:D0:21
X509v3 Authority Key Identifier:
keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:00:2b:eb:6c:fc:39:54:84:55:3e:ce:f9:16:9d:9a:81:d7:
39:23:b5:64:c3:17:5f:d2:59:93:d5:07:63:13:c2:68:51:d5:
08:b9:e4:dd:7c:dc:9c:c1:96:c6:8d:7a:5d:a8:ba:7c:a8:2c:
19:d1:48:22:79:53:53:47:cd:a0:e0:e1:10:c5:7a:f7:89:f6:
c6:50:99:8e:9e:82:50:c3:e7:37:17:80:7b:88:c6:2a:e8:7a:
5f:c9:9b:2b:52:4b:9a:a2:51:b5:ce:aa:ed:ec:3e:db:81:7d:
1a:e8:0c:1f:cb:63:1d:47:72:75:00:d9:8f:9b:83:ca:12:0a:
f8:4c:ec:d5:3b:5f:ef:49:4b:05:99:5f:de:6f:99:38:f1:88:
6e:69:d5:08:5c:3b:8c:e7:7c:6b:c9:36:3d:0a:fb:9e:a0:cd:
b8:e2:08:97:d2:3a:0e:20:81:24:39:92:74:0c:47:0e:cb:a0:
b5:e3:90:6b:f8:51:81:8c:3f:1b:17:a7:72:04:27:49:b8:30:
e8:76:43:06:0d:f3:0d:d4:64:d8:96:fd:f8:4d:6a:fc:a8:0d:
38:25:f2:ec:27:d8:90:fe:18:09:8c:c4:6f:fa:02:b9:c1:ca:
cd:d6:45:ba:90:c0:4b:69:8e:c5:40:90:f3:c3:b6:70:55:5f:
6b:fb:60:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 12:43:42 2026 by rpki-client