
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
File: S-pr2KnHhIgpFBmZoBagydGZEq8.mft (raw, json)
Hash identifier: V9JHh808D66ITyhQ5Nl0fiQW6EtzIiF5Lb/JPFYgLq8=
Subject key identifier: 88:05:D1:97:AF:6A:98:C2:B2:54:25:D0:95:A1:4A:95:E2:AE:DF:46
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Certificate issuer: /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial: 88
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
Manifest number: 154B
Signing time: Sun 15 Nov 2026 09:37:08 +0000
Manifest this update: Sun 15 Nov 2026 09:37:08 +0000
Manifest next update: Tue 15 Dec 2026 09:37:08 +0000
Files and hashes: 1: -3No4v_sIPA2CX1SnoZwvf9TCq0.roa (hash: KrnP6wiaBVTeitELkMzlpsiiZQLsaL2MzvCN6UklLgA=)
2: -Jcx8rP0Gv20W-OXaTXFw_ELBLw.roa (hash: R8iODMDANf6tIiDP2ObSlIHJbhSAidG9P+QF0RtNIG4=)
3: 3ss85Gu5j6X25mKzb1Zg13Na2pA.roa (hash: ygnTXKejh0gRDeFkUQQJceOE12PkPeDTHLWRVBfNsu0=)
4: 8DbqdOJF-kDXjCliosjSNYL-zls.roa (hash: v+V2pfs4YmMN5+il920VSUBBJv2eDXjn04zeDB0YO7Q=)
5: BfImgGL5NZoLBYiO53pvdTPFhzI.roa (hash: CfgvmUmlD5dJgN4QMCztIQ3WvqNtkhY8yzHEFa4/cJA=)
6: C30Mf9gppmRn4G6qXaU1ckP5-SY.roa (hash: t/M+Z/hQhjlj2c6d9+JfUeTHzs2RTn9qIe/juNTrHdA=)
7: Pk8M5tg7OAadwCsYk_7blX9PDMU.roa (hash: fjmEeHvq6Dp/TzAtAbE9ne/oRvkikgn1nx2Mc9CVX3U=)
8: RxiN8h_pCN_rrs-_Nn9QZuXidUA.roa (hash: dH+Y/x6ELostYuMejTzsZsr0zbDF4lJpW1+RlbGhtjQ=)
9: S-pr2KnHhIgpFBmZoBagydGZEq8.crl (hash: E+wTkj2wm61OrF7MLDgaBz6o2zEBXQAi6YqPxux9fWA=)
10: XbZ7gxvwHh6lkBw4GScee8uCVA0.roa (hash: PvA+LKuu609JFX7K0r/27WjL7f2zzNUFPPPAXXAhG0w=)
11: YdI_y697mtsK46UmBUFWB2uU1es.roa (hash: Muv5gj7+5YOY1uK+RgOATOnaDNYVhx3/T/Tq9mQYi2A=)
12: YwZsn7l0NSstMfvr8ntD_lc2trY.roa (hash: kn9+O0+gGpT+6HUpSLxjiSyUy0S3fz+avNssTbHTGQA=)
13: aizhGDmoT4jEJ3jFJVr8R-NpeeE.roa (hash: e49wC5CwEuNtcv9E2pDRUSK730KqAJCIMgNlJNojnY8=)
14: mt_PBO4wAbnfFgzTYMs_YptBovg.roa (hash: nKwcG/HcZlHLIRdOX2/zWUoVI0aSNb7B0uZcv+4N5Sc=)
15: vS0jEecLj5_4NoTq_4NMJocIWOo.roa (hash: QvogR3RjyFcoJpq7o9LoMuW5wDOnX6X1acMOTllDaxA=)
16: xaRiZZ-GBlbzPEAhz-fW20hNKt4.roa (hash: B16KSdNJDoQ5rMNrFEQtmzrM7Y4F61cmgSMlHy92X5o=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 08:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Validity
Not Before: Nov 15 01:32:17 2026 GMT
Not After : Nov 15 01:30:02 2027 GMT
Subject: CN=8805D197AF6A98C2B25425D095A14A95E2AEDF46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:34:67:74:e1:d8:9c:9f:ce:87:c4:34:1f:25:
b1:d9:4c:fb:85:a8:18:bf:28:ad:7f:24:9d:56:ba:
37:a4:e2:2f:34:1a:48:e2:99:e7:56:78:d7:e2:23:
09:f4:b1:ae:35:a2:d2:19:11:fb:87:54:8a:0d:69:
e4:d4:c1:8c:f2:53:c6:6d:91:4f:3a:5a:a4:cc:ad:
5c:16:76:0d:9e:17:f1:95:fd:bd:48:b3:b0:f3:8f:
e4:7d:25:3b:b1:3b:89:12:02:b9:0a:4d:da:f0:5a:
38:b5:ae:44:9c:53:fb:a7:58:e3:39:14:b1:2e:e5:
9e:e1:c6:5d:98:1b:6b:b7:02:3c:0c:ce:f6:55:4b:
38:36:7f:36:d3:4d:25:47:c7:65:c1:c6:bb:b5:6f:
ba:5e:36:9b:23:07:1a:f5:36:46:12:97:e8:a9:1e:
05:e8:c7:f7:02:62:53:fa:ca:18:c4:06:fa:0a:1e:
d5:5f:98:f5:9f:d9:f8:c9:ca:f0:13:8a:10:f3:e9:
65:12:a7:9f:e3:fc:0a:17:25:14:7c:1d:cb:8b:65:
2d:6f:95:4e:1a:a5:8d:5d:59:8a:9c:36:d6:b0:3b:
dd:1a:bc:9e:be:ea:aa:70:bf:3c:96:ec:29:ed:66:
45:92:44:08:d5:a2:9c:e6:5e:cc:7c:51:b1:d1:cd:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:05:D1:97:AF:6A:98:C2:B2:54:25:D0:95:A1:4A:95:E2:AE:DF:46
X509v3 Authority Key Identifier:
keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:60:04:59:9f:e4:8a:ab:2b:ef:ef:4d:99:bf:11:aa:8f:3f:
61:f3:ba:03:63:b5:73:75:7a:1d:77:e8:34:95:74:91:5b:a4:
2c:e9:49:15:e5:ab:43:7b:46:27:5b:95:32:48:b8:58:e9:89:
b9:76:55:ed:c5:79:21:b7:02:ee:2c:c7:44:b0:e4:5f:c7:19:
38:23:98:ba:94:bc:03:7e:f4:ee:c3:1b:a2:d9:96:17:88:66:
98:c8:a1:1d:74:09:48:be:7b:15:33:9b:0d:3f:23:27:11:15:
b7:99:67:5c:66:c7:42:11:7e:2f:e4:0a:5d:f1:b3:ae:12:2d:
6e:3f:b5:fb:d9:0d:0b:4b:f4:f7:c8:13:33:b2:57:6e:f4:b7:
3f:26:5d:28:67:cb:40:2e:68:ac:cb:63:ae:28:d6:81:c4:cd:
bf:7a:2a:3c:aa:2a:13:37:4d:93:47:31:a1:6d:1f:62:b7:87:
e9:01:a1:63:b9:88:48:49:22:e3:58:72:d6:ef:cc:0a:64:fe:
c5:2f:0f:05:a3:ca:98:4f:8d:f2:af:95:81:aa:a2:7f:ff:2b:
dc:b9:f6:31:18:db:9d:20:00:f9:4d:9d:67:25:29:f3:48:fb:
47:45:2e:6e:0f:61:e9:bb:97:cb:ea:78:a8:e0:58:b2:eb:38:
3d:24:0f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:10:18 2026 by rpki-client