
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
File: 4FbQUB1DDOD88NsGdbr8kLBdm_U.mft (raw, json)
Hash identifier: eGiGCjrksdxeat4aYxFpAy7zpl0XvuEpb/QYns5dJ6M=
Subject key identifier: 12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial: 8B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
Manifest number: 18E1
Signing time: Wed 25 Mar 2026 23:52:41 +0000
Manifest this update: Wed 25 Mar 2026 23:52:41 +0000
Manifest next update: Thu 09 Apr 2026 23:52:41 +0000
Files and hashes: 1: 4FbQUB1DDOD88NsGdbr8kLBdm_U.crl (hash: w/7Ntg6nlSfjCQfCqf3Du0dh0j2xatv6a1GjdASlDr0=)
2: 834Hu5N9g_Kdz_DRyh_ZRCbLXiY.roa (hash: jVUh/X17WdSZMy3rSIxGEQgI99dUcWi/FEtOTwXQJUI=)
3: ZR4Y4HPAR_fC3P3HOd0M217rHkw.roa (hash: JYop1SDDWdE/9K9+/rHqhBPy1A3w5cZpcmUsZZnvYuc=)
4: hZI9czfGbSOIMKmrW4FdW-zKOgs.roa (hash: E2OX+I/aYksjiDNZEHMn+b2QE9FOcz6SmQyk6JlCYUk=)
5: lGzCcob-qrXbElVy98bRcvEmqQE.roa (hash: hZsY5D57ulhaw32ygVBWiJGXAQneUhS14O5R72HvzGw=)
6: pmkYG8eaYE3fBWlWR9Fi6HmRBdQ.roa (hash: DMZcgYI5xXBRi3fUghQtdrpnvqVlUNYdC6a5g1BdG+M=)
7: y_OfQN7z4FqSyLFG01Ypkpdo-xc.roa (hash: DeQsxZix+dBR/m7pqLXraneTN7vc0w231RdhNi/TyFE=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Validity
Not Before: Mar 15 01:38:06 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1237FA2C47A961C2F966F3B20BB09D2477AEF307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:1c:dd:e1:32:ba:b9:74:3f:c7:64:44:c7:
56:ee:be:36:7a:80:45:63:f4:2b:18:6d:35:9b:1b:
62:c6:04:b5:ce:f8:53:1b:26:fc:cd:ac:1f:6c:05:
53:4d:b4:c4:57:10:0c:0c:f6:b4:c1:69:6d:69:3e:
2b:3d:f2:d8:ae:1b:c5:85:1b:3d:29:da:19:da:f7:
08:60:29:81:db:3c:a4:92:82:9c:f1:2e:19:ce:0c:
71:ab:07:60:dd:f5:84:93:95:1d:c3:72:ab:c0:0b:
bd:49:06:9b:06:cd:f2:2e:3f:12:da:33:54:97:ac:
57:d9:a1:d5:59:27:2c:88:b4:f9:04:17:3d:4e:8b:
ee:29:6a:43:59:a1:1b:34:84:1c:0b:ab:f8:2d:be:
a0:42:6b:4c:50:f7:95:7c:dc:05:12:64:12:17:c4:
97:a9:b2:1f:ee:f6:e8:89:81:8c:a1:44:2e:d2:a5:
83:b1:af:ba:3e:c2:3b:61:10:be:87:9c:e0:66:a3:
0a:c1:61:d3:84:79:19:f7:7c:82:bc:ed:5a:9e:63:
9e:81:d9:8e:b5:10:e0:b2:c9:e5:14:a8:a8:ed:ca:
1d:71:41:be:7d:97:a2:c2:3a:7a:36:e5:ff:87:71:
2f:46:1b:39:39:72:81:3d:01:18:af:40:4e:cd:dc:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07
X509v3 Authority Key Identifier:
keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:ad:93:50:65:fd:be:1b:39:5e:21:80:67:25:7d:3d:ea:c5:
c7:14:76:75:e5:11:b8:a6:02:20:57:40:d8:15:2f:5f:ad:3a:
04:46:4a:88:4a:68:eb:c7:6c:aa:9a:10:c3:db:2c:14:30:31:
a8:b0:d4:8a:e1:26:92:06:03:52:f2:7c:b0:f3:58:44:1a:6b:
cb:34:e6:33:0f:04:38:bc:98:bc:63:bd:e3:22:70:7f:dd:46:
92:6b:56:e2:ed:7b:3c:94:9e:85:2c:1d:fd:7d:9f:f6:1d:00:
3e:77:1e:b2:45:47:47:7a:86:4a:7c:3d:80:cf:b9:48:13:7b:
b6:fa:ca:5a:5d:1c:6a:6a:97:7e:2d:d1:a9:bc:b8:3c:a7:18:
31:0e:01:f4:1a:9d:93:81:60:73:10:6e:38:8f:ff:d6:74:53:
38:38:67:e0:7d:b6:5e:78:d9:89:41:68:56:55:38:37:62:06:
a4:92:02:9a:0c:a7:13:cc:92:11:74:5c:fa:13:59:10:61:89:
4c:a2:70:92:31:58:c2:74:65:e5:4e:ef:82:75:b0:53:a8:18:
99:b5:ae:6d:eb:86:e8:15:b6:47:19:b6:51:1b:62:16:b9:06:
8d:93:c1:cb:75:be:f0:17:8f:d0:c8:0e:55:9a:cc:d6:5c:93:
ad:aa:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:34:02 2026 by rpki-client