
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
File: jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft (raw, json)
Hash identifier: 5Q26jZ0TVIL+dKHno1CSheORDF2Nhuik4rGiINTwwIo=
Subject key identifier: EA:85:D2:40:B9:98:7E:4E:6E:D9:90:02:40:3F:FC:6C:AC:E5:C7:52
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial: 94
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
Manifest number: 1FAF
Signing time: Fri 22 May 2026 23:32:23 +0000
Manifest this update: Fri 22 May 2026 23:32:23 +0000
Manifest next update: Sat 06 Jun 2026 23:32:23 +0000
Files and hashes: 1: PRKOLBS6fheerd1Bn8Zw-X5fFyQ.roa (hash: 5AbtuT315gTMW3qyuDWwe4kJmoqdq1tQXn1/W8xqzKA=)
2: Sra8l9P9TXU4AHZTxkbkyrXYQi0.roa (hash: WZxWZhd2+jDe+1Nt4GiSrJnbQsJR9NzdBiHxJs04Egc=)
3: jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl (hash: 81j7Kkhlwzv1eNv3hPyg03vLha5iGqMFlZX4gAseBKw=)
4: oaJJcry2PaJK3Iofjvn3Uwyc60s.roa (hash: 5EsHPfzsFpcezJZG2nSr+t1AfDbQsClmPPK351ZLIE4=)
5: ptjjFWCdKZze-vcvw0suK9_Ir9c.roa (hash: 3pOm97oDXWno7uYEWdx23mJZ/6vaOQMmRzVO8ra4p48=)
6: t1AaKXuaFQqQhjNoK08FVHpix6w.roa (hash: V2ODOZMTPbAi9WcpVpWRXT7ZxFVIvvt2OPgDC+XRaBA=)
7: wCOi_NkXsuW2oUB9MeJk97uvLz8.roa (hash: TQAJysun5fxG3GigwYZjVsQ8ivpOX9IwyBx4+rrXIrY=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Validity
Not Before: May 15 01:38:15 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=EA85D240B9987E4E6ED99002403FFC6CACE5C752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:4a:85:38:d2:15:ce:e5:9b:91:7d:0b:e9:
0a:f3:d6:a1:10:b7:96:04:c1:af:fa:9d:cd:97:eb:
05:a0:99:49:ed:de:8b:c8:08:06:6d:f5:92:54:89:
7d:e7:6e:53:e7:5a:8e:bc:d5:4c:3b:ec:f4:b6:25:
54:85:03:f0:12:71:31:cf:f3:44:8c:e6:06:f2:9f:
62:a5:26:4e:bc:0e:6c:f0:94:a9:0d:4e:cf:c8:3e:
7c:e8:f9:4e:d0:94:11:1f:6c:7e:20:4f:7d:51:45:
d9:e2:3d:52:9a:31:08:19:3c:6f:99:ad:83:b6:3b:
c7:b6:cb:47:c6:99:6f:0c:84:3c:a3:77:9c:eb:54:
a3:28:5b:6b:6a:c8:5f:ba:49:09:ac:33:cc:ef:0c:
6c:01:e4:42:07:ec:0b:68:2e:cc:fd:27:44:af:4d:
2b:a6:7e:7a:da:4a:59:76:61:9e:72:ba:ef:6f:91:
41:40:fd:d3:f1:1b:10:53:25:d1:47:98:e5:79:dc:
9b:3d:72:0a:3d:1d:a6:d9:25:d2:7c:ba:17:78:03:
b2:2c:42:b0:fb:74:6d:f8:e7:6c:4a:a7:17:aa:ec:
ab:0d:bc:dd:20:b4:58:ba:4c:c2:9a:fb:62:c9:db:
61:09:95:da:74:93:f9:d6:32:14:eb:36:9c:97:a9:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:D2:40:B9:98:7E:4E:6E:D9:90:02:40:3F:FC:6C:AC:E5:C7:52
X509v3 Authority Key Identifier:
keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:c2:19:e4:5e:0f:14:21:8b:af:54:3f:d0:c4:75:47:14:5e:
4f:90:0e:8c:63:b3:6e:42:58:23:15:d5:08:d5:70:7a:28:69:
9b:ec:c8:7a:55:27:56:b8:9a:d5:d5:0d:6a:44:5f:92:e1:a8:
7a:be:80:24:5e:13:b7:55:c9:49:d4:4d:e4:24:63:ae:98:c2:
f2:5c:7e:59:85:43:ad:fa:cb:c3:53:53:c2:36:d9:73:3f:fe:
6a:22:52:74:64:7c:52:de:9e:37:b6:ad:9d:05:8a:b7:0d:95:
54:a8:39:99:dc:cb:65:ca:36:36:4b:98:e2:34:d5:6e:c4:e2:
9f:5d:ce:35:07:17:fb:fe:41:6c:63:da:3b:73:46:38:80:bc:
5d:ce:51:6f:94:86:20:72:e2:ca:53:14:7b:0b:de:a5:23:32:
a0:40:09:40:e1:5b:c0:92:16:d4:7b:5c:cc:27:85:71:f8:e6:
b0:ee:f1:ff:40:d9:4f:41:81:72:ca:70:f7:06:9f:71:32:7f:
7e:8c:ab:36:cf:50:e9:a6:d3:fc:d2:db:4f:40:b4:88:34:ab:
3e:1c:2b:7c:10:75:21:5d:03:5f:78:b9:5f:33:80:c4:e9:d3:
62:aa:d3:36:11:bc:ed:17:5e:33:f0:fb:fb:e7:7c:cd:eb:3d:
4e:07:69:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:10:14 2026 by rpki-client