
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
File: HLYLQKmK6uBUyu5MCct9murePp0.mft (raw, json)
Hash identifier: HFHvu2xcLpukgIlhmXA/uYMCmJl55fpAM9cWBUULMe4=
Subject key identifier: F1:54:AA:E4:79:00:D4:E8:D8:99:B4:0C:52:54:DB:C4:1E:C5:D5:97
Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
Certificate issuer: /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Certificate serial: 44
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
Manifest number: 1188
Signing time: Sun 15 Nov 2026 05:36:56 +0000
Manifest this update: Sun 15 Nov 2026 05:36:56 +0000
Manifest next update: Tue 15 Dec 2026 05:36:56 +0000
Files and hashes: 1: HLYLQKmK6uBUyu5MCct9murePp0.crl (hash: NyIExvKXaW5dwUO4oMG30NgUCBfkOsds+ZBKOK8akfQ=)
2: Q2D72OEspLej90kPioqwltOO3Sw.roa (hash: z4fX9DCiz50jnXGKhAWT6utim1bheJi3L2a01SJceMg=)
3: nNSQ2J4lfJUhfqECRPJo4BNnpbo.roa (hash: x5OFaCl4Ku3iTTx0HpDh8mTs4ijrOmumX83mV/x91iU=)
4: v6Vd6jVF7i7U9BEbkU0nqBkNkxo.roa (hash: EkYO+I+2OTSHvYniA3VM+tQKToVHdWbJDwPqdy3tY3w=)
5: zlkiWlpFEgtMxjfn2bRv8m9a8l4.roa (hash: a+dIJCwT/4Uvu+2ayZ4vJzxd6tevHc4s7XS1t410DPQ=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 06:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Validity
Not Before: Nov 15 01:33:59 2026 GMT
Not After : Nov 15 01:30:02 2027 GMT
Subject: CN=F154AAE47900D4E8D899B40C5254DBC41EC5D597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:53:94:51:04:9a:58:11:5b:0f:c0:6b:65:
fd:8d:99:d7:37:08:89:14:c7:02:a3:9c:db:e2:f9:
7c:37:37:d0:7f:1d:d1:d8:f8:b6:20:0c:c5:02:ec:
f6:33:5e:4d:51:eb:f5:60:f2:ca:9e:11:3a:5b:d0:
48:a0:86:c5:4a:56:d0:55:df:78:44:a3:7a:0e:d8:
a5:99:08:39:a9:bb:77:fc:54:10:79:09:66:e0:f4:
1f:9c:bf:77:e6:99:91:cd:06:e7:61:6b:bc:6b:de:
f9:17:f1:5c:7f:ed:3a:9a:8d:41:f0:a6:83:16:18:
48:a8:84:39:94:ed:60:9e:a6:01:a8:b7:6f:d8:94:
d7:28:a9:41:b4:f1:99:dc:38:b2:5e:0a:0a:96:7c:
51:f5:bf:ab:03:8d:fa:3f:2a:b6:b9:2b:81:2e:90:
ad:44:eb:03:41:af:e6:9a:65:eb:44:12:8d:e4:c7:
0f:b1:68:1a:10:73:7f:97:b1:95:6f:a2:9a:fe:0f:
50:5f:49:c6:03:13:9f:7c:e0:90:b6:88:fc:84:35:
2c:aa:fa:00:59:da:d6:98:f1:a2:a4:90:8d:45:65:
2a:10:03:69:82:97:d4:1a:0c:be:8e:f7:35:c9:b9:
0b:16:9f:8a:7a:71:ef:f9:e7:1a:f6:6f:3a:f2:41:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:54:AA:E4:79:00:D4:E8:D8:99:B4:0C:52:54:DB:C4:1E:C5:D5:97
X509v3 Authority Key Identifier:
keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:2c:c3:d5:b5:81:66:21:a4:e8:99:60:e4:66:b9:77:9c:ea:
e3:26:21:a3:77:43:8e:8d:f5:04:40:64:f9:e9:46:db:f5:53:
a5:0a:f7:27:02:77:f5:50:52:2d:cd:c6:8e:34:2f:cf:6c:3a:
b4:ff:ec:71:86:31:94:af:ac:13:19:23:ed:2a:f6:17:9d:81:
13:d8:6f:19:a8:65:03:f0:a9:a4:e7:d7:d0:ba:56:73:c9:63:
bd:04:18:73:23:38:07:d1:ca:86:65:75:c5:76:f0:88:fb:90:
42:66:bb:83:c4:e8:1d:78:aa:fa:3c:62:88:86:bc:74:6e:0f:
e7:4d:e6:5e:ca:b0:52:1e:87:ad:c3:20:89:e9:7d:1f:32:ee:
02:ab:3c:7b:5f:49:4c:aa:21:59:38:21:71:a3:ea:7e:02:cc:
9a:ab:bc:4c:a2:80:2f:d3:b5:b8:7b:ac:83:10:21:05:36:9c:
cf:f0:75:4a:b6:52:cc:82:78:a4:a5:b8:f2:b2:40:8b:f6:fe:
45:f2:eb:2a:68:55:b8:bb:74:2c:3a:5f:ea:84:f4:c3:ff:35:
e0:35:34:2c:bf:66:59:91:f3:47:49:04:fc:a3:ae:4a:09:92:
77:64:f3:34:f0:46:64:e2:a8:de:aa:cf:c5:99:c5:7d:43:4c:
75:b1:2d:0b
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQ0I2
MEI0MEE5OEFFQUUwNTRDQUVFNEMwOUNCN0Q5QUVBREUzRTlEMB4XDTI2MTExNTAx
MzM1OVoXDTI3MTExNTAxMzAwMlowMzExMC8GA1UEAxMoRjE1NEFBRTQ3OTAwRDRF
OEQ4OTlCNDBDNTI1NERCQzQxRUM1RDU5NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL+KU5RRBJpYEVsPwGtl/Y2Z1zcIiRTHAqOc2+L5fDc30H8d0dj4
tiAMxQLs9jNeTVHr9WDyyp4ROlvQSKCGxUpW0FXfeESjeg7YpZkIOam7d/xUEHkJ
ZuD0H5y/d+aZkc0G52FrvGve+RfxXH/tOpqNQfCmgxYYSKiEOZTtYJ6mAai3b9iU
1yipQbTxmdw4sl4KCpZ8UfW/qwON+j8qtrkrgS6QrUTrA0Gv5ppl60QSjeTHD7Fo
GhBzf5exlW+imv4PUF9JxgMTn3zgkLaI/IQ1LKr6AFna1pjxoqSQjUVlKhADaYKX
1BoMvo73Ncm5Cxafinpx7/nnGvZvOvJBNHECAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBTxVKrkeQDU6NiZtAxSVNvEHsXVlzAfBgNVHSMEGDAWgBQctgtAqYrq4FTK7kwJ
y32a6t4+nTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyOTEvSExZTFFLbUs2dUJVeXU1TUNjdDltdXJlUHAwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSExZTFFLbUs2dUJVeXU1TUNjdDlt
dXJlUHAwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMjkxL0hMWUxRS21LNnVCVXl1NU1DY3Q5bXVyZVBwMC5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBELMPVtYFmIaTomWDkZrl3nOrj
JiGjd0OOjfUEQGT56Ubb9VOlCvcnAnf1UFItzcaONC/PbDq0/+xxhjGUr6wTGSPt
KvYXnYET2G8ZqGUD8Kmk59fQulZzyWO9BBhzIzgH0cqGZXXFdvCI+5BCZruDxOgd
eKr6PGKIhrx0bg/nTeZeyrBSHoetwyCJ6X0fMu4Cqzx7X0lMqiFZOCFxo+p+Asya
q7xMooAv07W4e6yDECEFNpzP8HVKtlLMgnikpbjyskCL9v5F8usqaFW4u3QsOl/q
hPTD/zXgNTQsv2ZZkfNHSQT8o65KCZJ3ZPM08EZk4qjeqs/FmcV9Q0x1sS0L
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:39:52 2026 by rpki-client