
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
File: cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft (raw, json)
Hash identifier: /7ZX6h0SSswk/2DpEzJMA0gt/OSYTiTI14SKP4702fY=
Subject key identifier: B1:72:A9:09:F7:D4:0F:11:B7:C5:1F:4D:66:4C:B8:BD:18:64:D3:94
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Certificate issuer: /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial: 58
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
Manifest number: 0ECC
Signing time: Fri 24 Jul 2026 00:23:22 +0000
Manifest this update: Fri 24 Jul 2026 00:23:22 +0000
Manifest next update: Sun 23 Aug 2026 00:23:22 +0000
Files and hashes: 1: 2hA5K4sh9UpLIq2H0yg7QPD4npc.roa (hash: 1V+f+Tbxs1C63TXAIvAa8p2ROxUOEPShu+dzO24zk7g=)
2: 6Rnz1jyzfDVazKS0JF-HcZ_6ggM.roa (hash: NfmZ7vtLCE/uYifXqKCt/ONtIsuFmxXV4aAEcifYy9o=)
3: Leq3qzTmfKxpJZEVT5tQeP77FGg.roa (hash: MEZHWGjqP9CfxzVFafRjSpNv8PL9TBUeTHAkKYP9FaY=)
4: ONdoSXlG4Wp-M5L3lrdpyIkel0o.roa (hash: eNsj8erSGljiZvP+C4gSHFjeBmhNyvZKx9kiWyI6rDI=)
5: T3j5pyeKxTRD-2k7Yzzc-FIf2mg.roa (hash: IMhH2Y0KCp5OIf74qlFIRRzzBQOtH1DCGPdOgBPHkxk=)
6: cY9qpC0nuEkTS1Zp0MPNYE9xJaY.roa (hash: i1uZqKh6wUfyjzaWGn1GNaJWC3Tnb5FbMg/qviqUBdY=)
7: cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl (hash: AgwdZHZjIo+rn4ODzJJJE74eQYGL1vg7xZno4MDaAJg=)
8: e5Uay7UCO9m09XlhRrBK0OnYADM.roa (hash: /ifLE7avOBb+tpjuNOaZFuHVWo+mwhZqycyTD9W5wLc=)
9: kVQIQucxwyrHqdTDOJU2qI-prV4.roa (hash: ++aHXAF+8jANtFPwXwA5iR/f7syNVgV3V/t5vpAOGHs=)
10: lFC0FAHYTF7WMWG2n8PWTy0NL60.roa (hash: +/uHBxjYZ5AKQQpppocYxXhu92EjamE/XCPrWsM1ijs=)
11: lP9aTwXCumd-jqk0sYFuGTg6omg.roa (hash: 5ZrFAB54EJX4ozxAhRgZjdgTw0+j3h+CU+cDUPf1OkQ=)
12: m7yJtUrmIKB9x59dPZFrN__S7oE.roa (hash: BQliGqClgd5fDpFmb8xqn8NwL8HA9xYhWWsj5BIx7u8=)
13: tkeR6JM00Lqh98xZXqHS886b0Uo.roa (hash: z13LprPr3yQYc0L/8Z77QvOZmIj9sKapEzyentnOX0A=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Validity
Not Before: Jul 15 01:41:57 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=B172A909F7D40F11B7C51F4D664CB8BD1864D394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:e3:98:cd:63:26:9f:84:fb:0e:e5:94:09:
fe:4f:f8:ce:20:98:6f:e2:fe:23:ff:d0:f8:71:d6:
1e:36:fd:50:1f:37:47:9e:c9:2d:f4:6a:a6:49:fe:
f2:cb:cd:8c:6d:dc:7a:6f:d8:e4:dc:cf:bc:f0:18:
30:81:1b:3d:79:a4:3e:38:a6:ef:07:c1:f6:d6:12:
2e:4f:3b:e9:a2:e2:96:26:26:4a:b8:ae:73:59:89:
9d:3c:83:0a:2d:69:bd:18:c8:ca:6e:5e:16:92:30:
32:2d:f6:99:2c:b1:4a:13:7f:dc:5c:28:4c:62:4c:
ba:9d:87:f2:2e:03:b2:d0:db:f1:e4:75:46:fc:85:
3a:58:dd:dc:24:00:93:0c:89:0c:83:9d:f3:2f:a3:
0e:08:14:28:d0:3c:4e:b4:d3:dc:36:c0:fc:d3:a0:
a7:a7:b5:0e:59:7e:19:86:9c:5c:13:78:85:5d:f2:
bf:48:94:33:cf:ba:97:0e:81:ec:49:b3:bd:ae:78:
b5:3d:fa:33:01:3a:c4:57:fe:b1:b0:97:3e:69:d2:
35:f1:49:5e:0e:c8:70:c6:9a:5e:66:57:cc:79:d2:
7d:42:ac:a9:38:50:c5:37:3d:dd:c4:c7:6f:64:5a:
f5:94:0b:c0:c0:4a:e5:eb:0c:cc:9a:ce:9e:c8:c0:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:72:A9:09:F7:D4:0F:11:B7:C5:1F:4D:66:4C:B8:BD:18:64:D3:94
X509v3 Authority Key Identifier:
keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:e0:28:7c:61:15:39:75:68:71:36:b6:63:63:c6:94:9c:74:
2d:7f:1b:8b:a0:8b:74:08:9e:dc:3f:f1:5e:d1:07:13:9d:02:
99:c5:2f:d9:58:1e:35:0c:38:b0:13:bc:cd:3e:aa:4f:c1:93:
b2:d5:9b:bb:d8:54:c1:52:71:f6:9d:9f:57:c6:c6:0e:6d:01:
8b:bc:11:85:fa:a5:9e:53:cc:8b:d8:25:ce:e5:6a:da:16:04:
be:c5:d9:a0:27:d1:dc:8b:40:54:ed:d1:35:44:73:d6:e5:c2:
80:23:bd:74:81:70:cd:1a:c7:e0:e1:ed:69:48:42:aa:69:ec:
85:23:ff:9c:e4:e7:96:dd:c5:4b:bd:41:30:f5:3d:e6:78:15:
77:1e:fa:68:e6:d5:21:81:a3:89:40:0f:49:f0:54:7e:8e:8c:
db:93:ae:15:eb:bb:17:61:97:95:88:52:a8:f3:c3:4a:83:10:
4c:07:ff:1e:8a:39:48:f7:24:1e:59:82:d4:28:fb:20:c9:f1:
c1:ea:ba:32:55:34:01:3f:ec:79:62:ca:2d:f8:9b:90:47:62:
01:a9:99:89:6a:9f:d5:fc:ca:1f:bb:95:42:97:d6:94:be:14:
23:46:20:b2:ca:86:cb:f3:85:1b:2a:66:86:93:16:f2:73:01:
3b:cf:48:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:51 2026 by rpki-client