
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.mft
File: XFmEWo_N0m4cHM5k03sjRz73Pg4.mft (raw, json)
Hash identifier: 1GsTgDzKhwbOxYOAF0y/zEWll1bTgHgkLugEeVX0mIA=
Subject key identifier: 80:7E:07:2F:22:12:1C:5A:FC:6B:E2:00:45:B2:20:92:18:59:B1:CE
Authority key identifier: 5C:59:84:5A:8F:CD:D2:6E:1C:1C:CE:64:D3:7B:23:47:3E:F7:3E:0E
Certificate issuer: /CN=5C59845A8FCDD26E1C1CCE64D37B23473EF73E0E
Certificate serial: 07
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFmEWo_N0m4cHM5k03sjRz73Pg4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.mft
Manifest number: 8B
Signing time: Thu 23 Jul 2026 20:21:45 +0000
Manifest this update: Thu 23 Jul 2026 20:21:45 +0000
Manifest next update: Sat 22 Aug 2026 20:21:45 +0000
Files and hashes: 1: 2ydiUarU_nncipW1FgRUVPH0G18.roa (hash: LWvYCbddJJfxcGis5zYp53EsI4bl5yrkM3xEJwQ6J7M=)
2: NJX6hpIHVoGaz_6XG733Tq_L_2A.roa (hash: 8wAo5WNEfFXJDvXxYsutl6ePvQdY8e1PLYwmta/gyU4=)
3: VXN4ZBvxwkcHUODLu5g8P8s_BIk.roa (hash: WWOtTwZ28m00+c2SU7ZbkobH2P4IxsIxOMY6PHPinFQ=)
4: X3tiicPhE-TDcZK7wT4aL9yJCXM.roa (hash: cNcfzebqOzoabeE9wTLKWhNmz7t4fA5mUiaSiupOJBo=)
5: XFmEWo_N0m4cHM5k03sjRz73Pg4.crl (hash: 0KLUV1nZhfqRtGB3hkzM7TqbNa/IzegTS3ayf6Mlz4k=)
6: Y0j5ja888VfFALAtjlQKI7yoAy0.roa (hash: Nu1/4gg3bXm/vOnzNio05sHOJ4PlGFPWOAQ2vvOdQ04=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFmEWo_N0m4cHM5k03sjRz73Pg4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C59845A8FCDD26E1C1CCE64D37B23473EF73E0E
Validity
Not Before: Jul 15 01:31:30 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=807E072F22121C5AFC6BE20045B220921859B1CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:51:78:b7:b2:45:e5:43:37:c7:34:08:57:
74:d3:a2:3f:1f:7a:65:0c:c7:7b:00:1f:4c:47:f8:
bb:2a:8a:f0:6d:89:20:b7:1d:58:70:be:5c:3e:c4:
ba:42:d8:f7:a6:23:3b:5e:85:ba:d6:40:e0:cd:56:
15:1d:c2:d1:ee:cd:b8:0a:4c:83:1f:6f:b2:4f:24:
60:5a:02:74:87:4d:1d:b7:8c:d4:42:66:0c:01:5d:
56:74:a0:b1:7f:dd:e3:55:e7:ba:c9:3c:13:d4:85:
dc:c8:72:73:ce:5b:3f:49:10:e7:6b:ac:38:6e:61:
cf:a8:58:71:be:ae:8e:d6:ad:b5:e0:45:56:38:b3:
16:60:7e:ba:c7:f6:5a:be:24:2b:6e:28:16:40:20:
a0:f1:92:9e:18:67:b9:10:d5:38:20:ab:63:67:46:
48:a4:76:a3:c0:fa:db:6c:9d:c1:7f:f2:11:6e:85:
0c:69:1d:73:50:ee:44:45:1f:1b:9d:54:4c:06:a3:
b4:1e:76:8f:55:78:df:5c:b7:a6:1f:7f:ad:e1:2c:
57:93:63:1e:03:ba:95:24:53:7d:7a:94:94:ad:8c:
db:f2:28:af:ef:58:07:37:24:1d:72:b2:b4:ca:ec:
ed:88:59:43:74:b8:59:76:aa:87:5c:1f:7a:0f:a4:
ac:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7E:07:2F:22:12:1C:5A:FC:6B:E2:00:45:B2:20:92:18:59:B1:CE
X509v3 Authority Key Identifier:
keyid:5C:59:84:5A:8F:CD:D2:6E:1C:1C:CE:64:D3:7B:23:47:3E:F7:3E:0E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFmEWo_N0m4cHM5k03sjRz73Pg4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8e:2b:f7:d5:64:10:90:67:1a:5c:51:3b:b3:60:31:69:d5:
52:8f:5d:9c:1b:ff:2f:19:1f:96:f8:e8:1b:e8:81:e4:89:61:
2e:34:b9:66:34:06:72:2c:cd:dc:84:78:2a:60:1f:a4:36:94:
b5:2c:b4:a7:da:6e:f8:b0:5d:d2:6e:1d:ff:96:c9:b9:e1:f8:
cd:63:62:bf:42:5a:79:43:c1:c8:e0:ea:af:d2:fa:11:4b:46:
65:b6:5c:96:eb:3d:bc:ef:08:c8:61:46:c6:d0:7b:84:bb:f4:
37:1d:9d:73:f1:7d:a9:cd:20:30:31:e1:af:08:82:c7:26:e8:
4f:a2:19:94:b1:88:99:6b:ec:3f:fc:95:b9:9d:a8:65:f8:72:
49:86:20:f9:7a:7e:af:5a:7f:51:b4:0c:ce:5e:69:29:23:fc:
65:a0:44:59:69:24:39:b0:1f:aa:16:82:d6:4f:fe:ba:f7:12:
7c:79:24:25:73:38:81:00:c2:f1:8c:62:4e:3f:56:bb:77:8c:
08:a4:a9:f5:7c:f6:32:6d:8c:86:2f:1c:45:f7:af:f0:45:9a:
9f:d2:fe:c4:3c:a4:18:69:0a:cf:17:15:da:b0:88:08:65:f4:
a0:95:19:fb:82:38:d6:58:75:2a:3c:0a:f1:fd:32:a9:20:6b:
29:8c:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:32 2026 by rpki-client