
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
File: KJldaw3cIFs1lZMy0csdnYzwIoM.mft (raw, json)
Hash identifier: hKQHdzcN9GyJIEAN7FtEPRrAcGzrqOnRJQwpzGcxU+8=
Subject key identifier: 19:3C:C2:D3:EA:C8:3C:A5:06:17:97:A4:12:C8:BA:15:F7:B3:C2:8C
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial: 7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
Manifest number: 1229
Signing time: Sat 14 Nov 2026 19:15:07 +0000
Manifest this update: Sat 14 Nov 2026 19:15:07 +0000
Manifest next update: Mon 14 Dec 2026 19:15:07 +0000
Files and hashes: 1: H0bDZd1ZuUZncevIo2uS2Dnz4NA.roa (hash: 6mlf9wWWw+6maEoIyGe5xv4x5MjfK3Zx0qnCI2bIdUM=)
2: JBdCgQEBjYDf3YbAmT_NkcfJ890.roa (hash: 0ERdQklraGIF8tA3cR0xIgquvRa0TVQleVRotF9ZsHo=)
3: KJldaw3cIFs1lZMy0csdnYzwIoM.crl (hash: 0fNsxmDqpqmbu7ZS/RkcWtNTNQWMJvTNwvKTVwcC6Xg=)
4: Ova4PznjXTdwJWnYhwCn7O9H2hc.roa (hash: ymFXuBFk+GIeQf0q6ojUgvXQHj3iTbA+jsbjpRL+2pM=)
5: S9Ul_D5iB9rzhkLr6S--5zn0mPs.roa (hash: lyqwYRg0bXZPVYPBSyq+XKb8Cg5QegMWUS2a/3Ye1PU=)
6: kr70GHZ0ixusZ77bpLf8zVxFrO4.roa (hash: AF4Dd5ny70gb4kFw+QLnT+M0KGuIaON+g7Fas3QBDO0=)
7: soKUj5utSjKPindnDWuwnDyh6qY.roa (hash: suYiiscgG9zv6qrT7aGawFsQvXf+zLb3YM+g09hUG1o=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Validity
Not Before: Oct 15 01:36:14 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=193CC2D3EAC83CA5061797A412C8BA15F7B3C28C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f5:bc:29:a4:07:80:be:bb:cc:43:98:23:7b:
ab:9d:4c:c8:06:88:9b:b5:bd:e8:f9:ab:ad:8b:9f:
fb:1b:02:4a:7b:bc:f2:cf:24:75:69:b6:71:89:63:
a5:fc:5b:b5:bc:7d:9e:4b:89:1b:bd:ce:37:31:0d:
2e:60:2c:78:09:ea:02:a1:4f:d1:88:55:88:51:df:
b4:0a:ef:95:1b:e7:fe:10:32:7c:1d:99:4a:cc:0b:
10:b4:6c:7d:18:ea:5d:c8:db:19:c0:df:0b:fc:5c:
9e:c4:92:30:62:f2:ce:f4:d7:c6:d4:64:03:5e:c4:
ce:33:9c:13:ea:65:3c:e5:0a:df:69:42:42:a0:76:
1c:ef:e9:a7:99:f8:49:3d:7c:fa:46:14:d0:5b:d1:
c6:b1:51:d8:3f:f1:bc:4b:88:02:25:1c:8d:36:1d:
60:2a:5c:33:e8:17:e6:ad:f5:f1:39:49:ca:88:e0:
14:51:cb:30:a0:7e:11:ae:9d:53:ae:0c:8c:89:34:
97:66:c4:e7:78:5a:c1:36:df:b1:cf:71:1e:d6:91:
ba:3b:c3:a8:bf:f3:d1:58:fb:e0:3a:7d:84:a6:81:
4a:6c:0e:ff:c3:91:13:67:ea:48:9c:e3:1f:d2:a6:
50:ee:8a:e3:05:06:8e:f5:92:8c:b3:1e:58:53:f5:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3C:C2:D3:EA:C8:3C:A5:06:17:97:A4:12:C8:BA:15:F7:B3:C2:8C
X509v3 Authority Key Identifier:
keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:55:93:32:a0:03:08:01:6d:f0:77:97:46:e6:86:5c:25:c6:
40:11:b1:04:57:21:c7:72:15:62:05:fa:f7:cb:37:b8:a0:d1:
28:70:32:0e:b2:c7:9e:f6:3e:38:a6:96:f7:98:9f:f3:bc:61:
b0:f9:1d:4c:8f:8d:32:bd:71:0d:5e:22:a7:09:aa:e9:ba:6f:
d7:aa:c3:bf:ad:93:9d:15:be:c8:16:5d:77:0a:f3:55:89:6e:
d8:64:03:50:08:90:5d:7c:dc:d1:15:eb:c7:dc:a1:0b:e2:a9:
42:ea:45:a3:74:fb:dc:79:c8:f5:30:46:0e:d4:fa:c4:20:37:
1e:32:ea:c5:b2:ff:60:56:e3:bc:22:15:0d:c0:5a:d9:07:8e:
53:bc:03:7c:dc:f5:c1:3a:13:a4:b1:31:fe:13:53:db:fc:92:
88:39:6d:25:b4:e4:a4:60:b3:7f:14:a3:5e:56:1e:a5:8c:4f:
5a:3c:dc:5f:dc:6e:d6:a0:17:f6:da:16:07:66:5e:5b:10:4d:
6e:30:a9:ea:49:40:89:b8:0d:60:10:15:34:ed:5b:f4:97:70:
fc:68:8b:66:f1:a4:c9:ff:d3:6d:06:06:c9:45:fc:77:24:74:
2c:0a:16:21:0c:3b:c4:8a:5d:cd:63:02:f9:2c:35:0c:5d:de:
5e:3f:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:52:33 2026 by rpki-client