
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
File: nbu4hcPSk50dl7JOrYvQZxca0rI.mft (raw, json)
Hash identifier: u1C0O9dzzosJmexAvErFhraI1Z40WgZ1FatOIKzCnRo=
Subject key identifier: 02:CB:8E:F5:05:D8:5E:0E:F9:40:88:5D:95:CF:48:81:84:1F:9F:C1
Authority key identifier: 9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2
Certificate issuer: /CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2
Certificate serial: 0E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
Manifest number: 0414
Signing time: Tue 07 Jul 2026 08:06:48 +0000
Manifest this update: Tue 07 Jul 2026 08:06:48 +0000
Manifest next update: Thu 06 Aug 2026 08:06:48 +0000
Files and hashes: 1: 52jYiT46Msq_m5cR8Ve3SehuOTQ.roa (hash: MMkNAe7NQK36MTfTk4ETiff+VkRl++ePeNg00PTwgNk=)
2: nbu4hcPSk50dl7JOrYvQZxca0rI.crl (hash: wnNvuz8k3bUNX83aYlJD7oFLNjONJkNIv91wHrRPiBg=)
3: xiKin-JHEy6ydknOgmZerLEf0I4.roa (hash: v7hxP03+AjnvHQdhGNPQDY2xke6fzzz52ykfo1chUKk=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2
Validity
Not Before: Jun 15 01:42:23 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=02CB8EF505D85E0EF940885D95CF4881841F9FC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:86:64:f9:9a:40:28:48:49:95:a8:2a:74:
19:94:a6:d4:7a:da:23:fa:c5:01:54:58:26:e6:5a:
ee:bf:2d:57:fe:b9:04:06:fb:8c:ff:ac:30:3a:14:
2e:2d:90:bb:60:b3:d7:ed:f5:f9:02:a9:6e:91:96:
d9:70:33:bd:45:ab:87:45:6f:36:50:40:f5:6f:1a:
da:6c:6b:14:27:81:13:f1:aa:2f:18:6e:11:d2:50:
79:8e:c5:74:6c:a1:5e:52:c4:f6:3a:52:0f:32:51:
9f:3b:d8:cc:b5:e4:68:3d:ce:d5:1e:3a:91:62:c2:
4c:28:75:02:97:92:67:82:f7:b8:52:ea:98:08:c7:
97:30:97:f4:de:eb:f3:23:b5:75:1c:2b:d9:fb:79:
65:0f:75:d7:98:d7:bc:08:57:71:68:59:22:62:4e:
b9:8f:fc:66:3e:13:65:51:fa:2d:b0:fc:62:9c:53:
39:5f:08:01:cb:b0:c5:a5:2a:af:9c:a3:6f:a6:29:
78:e7:e6:02:0b:6a:a4:85:25:d4:4f:76:46:2b:ba:
fd:b2:84:a4:30:92:4d:18:56:27:b9:aa:1c:e9:9f:
a3:3d:fd:ad:df:f4:47:e0:cc:a4:cc:1f:46:eb:a1:
f8:08:fc:cb:af:a2:98:3d:3d:45:53:e3:b7:41:b9:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CB:8E:F5:05:D8:5E:0E:F9:40:88:5D:95:CF:48:81:84:1F:9F:C1
X509v3 Authority Key Identifier:
keyid:9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d0:22:2e:dd:c9:c9:2c:d8:10:62:41:7f:54:b7:01:06:27:
10:ba:c7:59:aa:8c:ba:d5:d9:8e:d3:88:1b:22:39:37:b8:66:
c7:f3:c8:c1:2b:fa:ed:e2:1f:d1:af:96:df:02:44:be:7e:58:
ec:df:b8:6f:d2:d1:0b:7d:cc:23:43:8b:98:30:da:48:c5:c9:
cb:4f:10:89:f8:90:55:88:5d:07:21:0f:76:43:e5:12:80:97:
e0:f0:2e:32:8b:6a:0a:e0:2a:89:21:79:10:d1:ab:73:95:19:
fb:58:6b:f4:b2:be:93:8a:86:c0:85:aa:af:d5:2e:4d:94:c8:
17:3e:fd:d4:a8:d7:1c:9c:bb:28:e3:62:eb:76:fc:62:48:c4:
31:4f:b2:b6:07:e1:9d:9b:21:d4:63:de:e1:b5:53:19:f1:ef:
12:8e:72:81:2f:86:c0:8c:b0:28:01:50:9f:f2:44:97:69:31:
63:55:65:57:9a:82:36:3e:80:45:38:d4:e3:a2:0d:f8:d5:f2:
ff:38:e4:32:5b:98:ef:a0:a4:56:c0:4a:e5:3e:0f:62:f3:85:
48:65:e4:a3:77:23:e0:82:cf:d0:24:27:3d:3f:74:1c:3c:c2:
fd:ef:2d:62:37:0e:08:a9:44:15:eb:09:0d:55:03:6b:11:9b:
b3:d2:8f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 12:43:44 2026 by rpki-client