
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft
File: s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft (raw, json)
Hash identifier: l4Xxi+pa7VyuXsncNB87zB8cCKvY057Mv9yHFqHDKlU=
Subject key identifier: B4:1B:49:F7:B8:94:A6:63:AC:74:E0:BB:78:BE:E3:B6:9C:A9:3D:90
Authority key identifier: B3:DF:98:D4:8F:44:8B:48:A4:71:1C:87:6C:CD:27:BA:8B:71:85:27
Certificate issuer: /CN=B3DF98D48F448B48A4711C876CCD27BA8B718527
Certificate serial: 09
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft
Manifest number: 03ED
Signing time: Thu 26 Mar 2026 08:30:17 +0000
Manifest this update: Thu 26 Mar 2026 08:30:17 +0000
Manifest next update: Fri 10 Apr 2026 08:30:17 +0000
Files and hashes: 1: PKZOGuSM1daMWe_atD4yLJjyIWY.roa (hash: mYCW9R+3RDvom53E61DhCGSZB8pUKkwxRAcw0FVo9Vw=)
2: ouB_bdr1K5eIOYjTEwNp8GHgyMw.roa (hash: u6I9NueSvmkR8yp/TFNjqx+RV8o/wcsfLdAlSlZSVc0=)
3: s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl (hash: hrIzMC5NwB440qZ2rjrSzwg0VW1P6SXX9P6kqk6nBK0=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 12:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3DF98D48F448B48A4711C876CCD27BA8B718527
Validity
Not Before: Mar 15 01:31:17 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B41B49F7B894A663AC74E0BB78BEE3B69CA93D90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:40:3c:fb:8a:24:71:be:b8:c5:f4:60:8b:92:
8a:7f:53:ea:cc:5b:61:7a:7d:f3:30:aa:4b:ff:ea:
40:7f:ed:54:63:ee:a3:29:e9:49:a5:90:82:0c:48:
b4:66:e7:55:37:93:cf:19:f9:3e:0f:7c:e1:92:cb:
63:bc:9c:75:a5:32:4b:a6:62:fd:72:46:1f:38:ac:
13:f5:9c:0c:9b:f2:8a:8b:43:25:3d:9c:89:13:52:
5d:ad:06:03:bf:50:b7:43:fc:15:64:7d:8c:17:20:
23:d9:4f:90:02:c7:44:e9:db:ad:03:ab:ed:5a:bf:
f1:d3:f7:eb:5b:29:3e:61:7f:ce:22:fc:10:bb:41:
d0:09:15:44:e8:1d:f4:fd:3b:79:50:81:e6:78:85:
e6:bf:b5:32:7b:7b:f0:72:a2:69:95:c1:87:a8:72:
fe:74:aa:93:c9:12:c9:c4:26:4f:7b:28:bb:8e:fe:
45:e6:3e:16:bd:bd:04:04:d8:03:04:eb:34:81:7c:
6a:5c:25:0b:0d:b7:a1:7b:bf:72:fc:fd:97:c8:d8:
44:19:7c:3c:f2:a6:3e:5a:3e:1e:d0:90:83:6b:00:
d3:66:55:b2:01:b7:30:22:6a:47:4d:7c:d7:04:9d:
16:9b:fa:b8:40:2e:40:47:f6:8f:0e:14:cf:6b:75:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1B:49:F7:B8:94:A6:63:AC:74:E0:BB:78:BE:E3:B6:9C:A9:3D:90
X509v3 Authority Key Identifier:
keyid:B3:DF:98:D4:8F:44:8B:48:A4:71:1C:87:6C:CD:27:BA:8B:71:85:27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:10:80:46:4c:8a:49:f5:2a:85:8c:cc:21:ef:da:8a:f5:aa:
d2:23:22:23:03:d1:4f:66:56:cf:1f:67:1a:0b:e1:27:10:ef:
0c:a6:21:fb:29:56:df:e6:77:1f:fd:f1:41:4d:c2:f0:c8:ba:
16:e3:53:1e:dd:50:b4:06:3b:1d:06:a6:2b:34:bc:d6:21:68:
60:c1:e7:99:c0:a6:a0:f2:7f:2f:50:26:b1:fa:79:cb:b5:bb:
4b:1b:cb:85:45:70:30:41:ae:60:14:79:2d:f1:3c:c9:2f:81:
de:43:f8:81:86:4a:fa:95:1c:c4:ef:b4:7d:09:1e:a0:ce:e3:
49:8e:a3:6a:51:d4:c7:b2:ac:ed:f0:e3:de:49:dc:e4:cd:92:
f9:71:79:42:bc:49:89:ca:72:6f:0c:9e:8b:35:a8:a2:51:69:
8c:8a:af:79:2e:40:2c:1f:2a:4f:31:12:ba:95:b4:cb:89:6b:
19:3a:c0:2e:3d:06:14:9e:91:0d:c3:30:6e:b2:5f:5d:dd:12:
f2:82:af:54:d3:87:2f:cd:be:64:6d:e1:8d:f0:00:c2:55:9c:
e3:2c:e1:be:8a:dd:10:44:0f:ed:50:91:ca:03:d5:fc:5d:e1:
71:97:95:aa:3f:ba:5f:5f:6c:be:c6:20:22:5c:5c:e7:c5:76:
7c:a3:8e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:38 2026 by rpki-client