
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
File: zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft (raw, json)
Hash identifier: LE+xL5iEh5O0zrr6J/Zx+A3N5VyZklju2HcvIhJXk4Q=
Subject key identifier: 3E:C6:28:3B:83:73:8D:00:99:4E:B3:D0:7F:61:89:B5:41:73:55:22
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial: 0105
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
Manifest number: 2128
Signing time: Fri 24 Jul 2026 15:04:23 +0000
Manifest this update: Fri 24 Jul 2026 15:04:23 +0000
Manifest next update: Sun 23 Aug 2026 15:04:23 +0000
Files and hashes: 1: 15ZNjrMxqF4avRnpoUtSuq8RbBI.roa (hash: 9zpKJqb+oYLZZG4dMt8sObzuDVlZZt6NcTo4z9jcQ1Q=)
2: 2drO1Z2SrgoLMqnncCcYIuySgJc.roa (hash: wiZHUkoUQcHGufxCfVqmxOKcby3563m71geiIH6b9CE=)
3: 8gKizuTlBC5aI6gtWXXUBVG8jPo.roa (hash: onXv+XbjW5XekEIZEQNt4hPXLBsBHa9IX9VIUtgWOx0=)
4: 8r9aPdxqevAQOQALCdOQEOufdd4.roa (hash: pwwu1/zKhgeiBbYPvqSMy01hqyD9L9zxhczQzDGhzYg=)
5: BuSW3lJNbwXMO8JofHHJNeG67Fc.roa (hash: czDMH6zXuJrRleoZGsrKRIiQzz4wvI/V+I83E9Z+yEA=)
6: IbJTF01oFKcrKDNjwXcyzhsHubY.roa (hash: na4PvuIaTHpJ5Pz3d1z0ZqJeMafNlo7LNksgK8eFQH8=)
7: PhmfQevVT8fJOneBUPbPW2RhrVc.roa (hash: XPIio0c1h9ossQ5YEOT4vjq0lRi8/O0DPW1ysk91Y6c=)
8: R6TF_jDMlQzSRIBXJNBf6ZWfPN4.roa (hash: 9n8lGrGOUcy4l01HLWb+xbUwvD9U5jbI/xviSqm5STs=)
9: RNbsb0qpu3SF3fs1XWjXAOEgPTs.roa (hash: tAL3bs2X+81SsJUKgKIHiu4qULoV70ZxQ1vvh2qMlho=)
10: SdB7JnvXjQrmw3jZJLDe4G3fq5w.roa (hash: 75BSh6+Cdov5JlV0eutT83syyf7GxpfxR0Pp3xCnR6Y=)
11: aEhG3cgrnFMzy2p1hiLStvbN6F8.roa (hash: dS4WJipaVruo9DFNdidgN8R9JbM80gtRiPQpOuy468U=)
12: b59fNcieMFQyMckohlK2zOadA_k.roa (hash: 29uTaxGLLxXpWbzs8w/k9Slb+iXgQHAKpCC0FW+s1Kk=)
13: e-XeVgp-oGkKvtTzfYFrgbBLFkM.roa (hash: V/eyD/EY5hAIX90SeRs0wZMUr24IKB71E54R1bWLF8s=)
14: yucz_63nIbTORoDSKpA7MK8UCSI.roa (hash: yF/8kRyUjoQfu7kyz59UwO2bjkYDLZfLDuHwh7pDmtU=)
15: zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl (hash: wj3fiyL/6obrKxaWSYXvpJkXhxEmKTB0K4XqHvuXDJ8=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Validity
Not Before: Jul 15 01:32:21 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=3EC6283B83738D00994EB3D07F6189B541735522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:50:92:66:6d:f6:f4:a6:de:a1:f7:77:d0:
33:45:20:47:cb:32:20:be:90:1a:41:34:f4:d0:28:
a8:44:73:5b:3f:ee:35:dc:ad:b8:6b:39:91:d0:a4:
77:4b:a0:ee:0c:36:e3:89:94:9d:e8:7a:f3:51:cf:
2d:26:3c:04:43:b7:27:e1:58:75:d4:7d:7f:be:38:
80:53:ce:aa:aa:1a:bf:13:4b:f1:d7:61:65:56:82:
34:25:b6:75:80:e3:bf:c4:69:da:d7:3f:d8:24:9d:
32:cc:cf:95:8a:5d:03:ff:13:6b:2e:8c:d2:6c:0c:
83:a7:b9:88:3a:31:3f:b5:4c:0e:2a:87:38:54:a0:
26:a2:97:3c:b0:37:5d:8b:70:5c:32:3a:cf:f5:67:
21:a5:92:da:0c:a2:50:58:ca:cd:4d:13:6c:56:e6:
86:2e:03:77:8e:5e:4d:e7:bf:50:59:34:57:eb:97:
f7:1d:a2:e0:ee:64:16:09:e0:cf:4a:31:45:57:73:
62:d4:a6:c3:d9:f2:d9:1c:94:67:04:42:47:a9:71:
51:16:fd:93:f9:15:c4:8d:21:19:bc:f5:a6:8f:8d:
15:d9:19:92:43:a1:74:b5:ac:8f:70:3e:40:70:0b:
d9:65:14:27:ca:15:71:a3:01:8d:3b:e3:a4:47:c4:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C6:28:3B:83:73:8D:00:99:4E:B3:D0:7F:61:89:B5:41:73:55:22
X509v3 Authority Key Identifier:
keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:03:1a:34:3e:b7:e4:23:6f:c5:ec:5e:31:a4:d4:05:92:8b:
37:35:5d:38:ba:e4:62:3f:a4:b7:8f:4d:f8:07:b3:80:95:02:
0d:d5:7d:ec:3c:79:90:43:36:ba:bf:be:dd:14:29:50:bb:56:
5f:ac:29:0b:a0:f7:70:5d:8f:9e:0f:45:9c:8d:1b:a4:66:3f:
6a:97:97:0d:3c:43:1b:fd:31:f3:1a:b0:a2:b6:18:d3:df:be:
d9:dc:1d:ba:66:76:f8:b4:37:27:40:8d:b1:3d:ba:d1:90:e2:
c4:9b:a5:70:b6:48:49:bb:09:58:13:d0:4f:db:41:be:4c:46:
4a:98:7f:13:15:dd:e9:e2:a1:59:0f:00:9e:5e:f3:58:a7:6b:
3d:03:5d:9c:c8:8b:51:c0:b3:14:d3:4e:6c:5f:15:91:f6:61:
b2:2f:7a:0a:ca:57:24:81:87:64:a7:53:4c:8d:e5:c7:7b:9d:
26:90:0f:62:76:a0:9c:08:08:23:c7:b4:68:17:12:92:a5:67:
c3:be:ab:f0:72:d8:55:06:54:4b:02:51:a2:27:5d:ce:70:b9:
f3:e2:49:2b:81:bc:7e:38:c0:31:e9:47:27:34:67:d1:7f:73:
8a:e3:88:db:88:2a:0d:8a:69:d8:6f:f0:7f:b4:2c:d2:f4:f1:
72:95:80:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:26:24 2026 by rpki-client