
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft
File: Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft (raw, json)
Hash identifier: 9Nu6feGT8yayCwVcwVxX/tQeMqJlo6G/J/VZ3q3ETIQ=
Subject key identifier: 2C:0E:A5:B8:AB:E9:CF:D2:6F:6F:EA:5E:1A:E0:5E:18:D6:DB:A0:DF
Authority key identifier: 63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04
Certificate issuer: /CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
Certificate serial: 0A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft
Manifest number: 8A
Signing time: Thu 23 Jul 2026 20:21:46 +0000
Manifest this update: Thu 23 Jul 2026 20:21:46 +0000
Manifest next update: Sat 22 Aug 2026 20:21:46 +0000
Files and hashes: 1: 5uIdyRLYURqddQNi29AEUF5SVn0.roa (hash: Q6XPtvSjKiOoCbmeXcwJUJZD2I/CE1cY4Xwxj47ZwBQ=)
2: 7HttUotbaLZGr4lCTOZZwyqq_c8.roa (hash: psDF9utMejJTNoECbkDpinqsb0kI6PVdgBU6zvkLvi8=)
3: D31Y23wpkGD7OzABTWev6dAYwgs.roa (hash: +M4p7bmf/YLM41kno0X0kuLr9kLJZ/ieVYsL/NlUPPg=)
4: LptQFbRW2qiLUo7EAy8BIl7fiks.roa (hash: R5TuzKbmha4gmJjd+vZ3C81Bc/6zf52ihReP9d8KdOY=)
5: SjK9DguM-GKksd87Fu2EaF94SLc.roa (hash: vOt5Bsp4f5xe9WQsds8d7pCmmsyD+M0/OQl8DAUxqDc=)
6: Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl (hash: LI47cByt0jbPk+at0wXegdQ6Z4BrSMNBsYMupsv0JIQ=)
7: nndTEL2nUXmBs4wno9f7IOeOzZw.roa (hash: 28cJ3Rx/9n1QXng+O3K1Qa61n0nnEPP6lrZmirOoSQc=)
8: ve8hLnyPibLrJZ0Nj3qWOq1CsEI.roa (hash: gp6w3fEgXiiJVCyyuQvpuGziIVbO61TMDR/eZKDzrFo=)
9: vv7LMN0V7Y589q2NzMOil1-KJs4.roa (hash: qRTzLuqNNeZ6K2xuHgA2yzZHekaLVUvGypzxIlsUgTg=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
Validity
Not Before: Jul 15 01:31:31 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=2C0EA5B8ABE9CFD26F6FEA5E1AE05E18D6DBA0DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:aa:e2:53:eb:ac:a6:20:b1:6e:2e:d3:c8:
ae:d5:a6:0b:76:1b:51:aa:38:46:8a:57:77:01:15:
9c:ef:56:a0:2e:9f:06:0d:e1:f9:86:c7:e5:68:1e:
a0:59:24:2c:80:3c:cc:1a:15:16:6f:ea:85:65:45:
03:06:b9:2b:5f:0d:b8:44:f7:e0:27:bc:89:9f:13:
1a:41:07:82:25:3c:49:1a:31:9d:2e:01:1f:74:02:
49:db:f5:06:e7:bf:82:1f:96:e0:89:30:78:93:01:
64:fd:a7:d2:62:63:7d:6a:55:d4:ef:e2:5c:0e:d9:
45:ec:a6:a6:19:72:7e:79:cf:64:a1:40:81:74:73:
f7:52:a9:83:3e:62:f3:74:1b:69:dc:25:03:50:7f:
53:b9:45:c7:24:c4:21:e4:52:d4:80:57:e9:49:3e:
30:5d:6f:62:fd:0e:f0:be:50:44:2d:1b:d3:02:06:
ca:06:60:fb:11:6f:ae:cf:82:2c:0c:51:d4:57:78:
6d:78:be:0e:64:48:46:08:9d:c2:a8:d3:35:ff:e3:
72:ca:6a:f6:65:ff:69:28:82:3a:24:b0:b7:3f:00:
d5:5d:fd:bc:a8:2b:a0:2d:d1:58:24:d4:58:64:ad:
ca:54:3a:db:1f:95:c7:12:1c:19:14:19:96:ed:e2:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0E:A5:B8:AB:E9:CF:D2:6F:6F:EA:5E:1A:E0:5E:18:D6:DB:A0:DF
X509v3 Authority Key Identifier:
keyid:63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:59:4c:72:56:42:5d:9e:bb:53:2c:2f:fd:fc:56:49:4b:73:
ca:56:e4:83:60:2a:16:81:33:90:a1:e8:e3:cf:e6:cc:bc:d4:
93:4f:44:6e:fd:7b:82:7b:7a:2f:70:24:bd:4a:a0:81:01:0e:
20:90:4c:0d:75:07:0b:30:38:e7:40:d3:c9:f0:b9:6c:5c:a9:
44:26:31:c5:98:9c:08:08:24:8f:4a:01:0d:e9:6e:b2:ce:83:
d6:29:ec:c2:58:08:52:e6:b1:a3:c2:a7:67:4a:b3:13:e8:b2:
17:d1:d2:95:6c:6d:d4:b7:ff:89:7c:a0:f3:f8:15:4e:4a:a6:
5c:f6:d9:ae:3c:49:cb:4b:50:2c:8e:ee:2a:2d:54:02:46:42:
01:58:ae:2a:88:1b:ea:13:9c:3c:fd:aa:3f:c0:62:79:f6:e6:
80:74:f6:d5:90:f4:51:e9:7c:07:0f:80:97:bf:2b:48:80:41:
9d:5d:2d:35:8b:a0:b8:99:f1:1c:e2:65:1e:26:ef:1a:c3:f7:
62:eb:79:89:ca:74:ad:0c:3a:43:ae:f1:4b:bc:cf:4e:39:00:
fe:97:b7:88:75:c5:b0:7f:05:d4:60:6a:87:6d:de:ff:74:ad:
88:f5:cb:a1:68:ea:ac:fe:90:b1:26:26:2a:e5:d2:e8:f9:97:
3f:5c:4e:50
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MzFE
QUFFMjIzQUM3NURBNkExNjM1MDUxQjg3QUFENDJDMzMxRDA0MB4XDTI2MDcxNTAx
MzEzMVoXDTI3MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMkMwRUE1QjhBQkU5Q0ZE
MjZGNkZFQTVFMUFFMDVFMThENkRCQTBERjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMP3quJT66ymILFuLtPIrtWmC3YbUao4RopXdwEVnO9WoC6fBg3h
+YbH5WgeoFkkLIA8zBoVFm/qhWVFAwa5K18NuET34Ce8iZ8TGkEHgiU8SRoxnS4B
H3QCSdv1Bue/gh+W4IkweJMBZP2n0mJjfWpV1O/iXA7ZReymphlyfnnPZKFAgXRz
91Kpgz5i83QbadwlA1B/U7lFxyTEIeRS1IBX6Uk+MF1vYv0O8L5QRC0b0wIGygZg
+xFvrs+CLAxR1Fd4bXi+DmRIRgidwqjTNf/jcspq9mX/aSiCOiSwtz8A1V39vKgr
oC3RWCTUWGStylQ62x+VxxIcGRQZlu3ihzUCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBQsDqW4q+nP0m9v6l4a4F4Y1tug3zAfBgNVHSMEGDAWgBRjHariI6x12moWNQUb
h6rULDMdBDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0NjEvWXgycTRpT3NkZHBxRmpVRkc0ZXExQ3d6SFFRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWXgycTRpT3NkZHBxRmpVRkc0ZXEx
Q3d6SFFRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwNDYxL1l4MnE0aU9zZGRwcUZqVUZHNGVxMUN3ekhRUS5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDXWUxyVkJdnrtTLC/9/FZJS3PK
VuSDYCoWgTOQoejjz+bMvNSTT0Ru/XuCe3ovcCS9SqCBAQ4gkEwNdQcLMDjnQNPJ
8LlsXKlEJjHFmJwICCSPSgEN6W6yzoPWKezCWAhS5rGjwqdnSrMT6LIX0dKVbG3U
t/+JfKDz+BVOSqZc9tmuPEnLS1Asju4qLVQCRkIBWK4qiBvqE5w8/ao/wGJ59uaA
dPbVkPRR6XwHD4CXvytIgEGdXS01i6C4mfEc4mUeJu8aw/di63mJynStDDpDrvFL
vM9OOQD+l7eIdcWwfwXUYGqHbd7/dK2I9cuhaOqs/pCxJiYq5dLo+Zc/XE5Q
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:22 2026 by rpki-client