
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
File: zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft (raw, json)
Hash identifier: p0lQV88+QCGuDQryCHwOMVRBdHUXDJw/7qBCGuFQUNs=
Subject key identifier: 3E:C6:28:3B:83:73:8D:00:99:4E:B3:D0:7F:61:89:B5:41:73:55:22
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial: F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
Manifest number: 1E5B
Signing time: Thu 26 Mar 2026 15:41:06 +0000
Manifest this update: Thu 26 Mar 2026 15:41:06 +0000
Manifest next update: Fri 10 Apr 2026 15:41:06 +0000
Files and hashes: 1: 2E4aIAcqkQR8TMd71iuK8G2ez68.roa (hash: zCXSw/wpjrCtu7LegiPel6dhSN+ZSjiE8zR5csjWamE=)
2: FGXb5UFgQasbuvPoFc9j7I8-8bM.roa (hash: iGuR8IUh7lTCVH3uiBGDursiYk0YzXcBV7mIRXD/17U=)
3: J0jiYJBkPXFDWYtm5Ahd4qZMQAI.roa (hash: wSK4x36Yq23e98Xl97hKF/KvNoOTCC4Ho7pSqxhin9o=)
4: REB_S1dMsdMUlbyxBR9EczHffvA.roa (hash: vLOkdcnFinK7UcemyrUxOZx0XXc8Qzm53Z+TP2Y2mjE=)
5: Sosv1-HebcqatSsDHrzbyeT2TI0.roa (hash: klAGLJzO5u+x+VqcT/t+vwS+fcTYWOEO4Q1yTf22o/E=)
6: _e3jgBm0uaHLPl8oLSQTAQj5Hvw.roa (hash: 7TJ7GER8imQiYyGKjrbKC6jumqWGW9cFBZs2Y0oyo78=)
7: bkOOpOf-0J43uoS5Bt61ZZZaVQ0.roa (hash: QSTnT7bg8h+2o70qB6i/72TCA+rJZgUEL39mJxK+ZyE=)
8: gplTkwTrYeNXPKL7ZUrMT4ThcTw.roa (hash: cV1chGyXibXDXb1io3DvdPnkxrJfnwZ4UnMmkUIx56I=)
9: jhh_jSFkCm45_NS2lKm4Y3S4TbU.roa (hash: wOj81VSmWY63HO0GQpe9ks+IbgqvDqSZkCkLy3xEPfA=)
10: jpY6RIqGYOvxtjVVFZ1w23Lrsm4.roa (hash: OztdDEucCKIpIVOB8NNpBx3UHO16q+WlsR1URPv16U4=)
11: l70ZhLxaPTgksEIBI-fcHjMV-Ps.roa (hash: 3oeZuipPM4jsNG/h2dn2CHZznXCy+CMGLjg06YtQMuA=)
12: s9BpOjKelE9oGnr9RITH34iRceQ.roa (hash: LfzR/aQyVKnC7BEEn1I2SXv4wm12v44CnO7tjSDemwI=)
13: w-0dt6LJZLs74tN3VRfZWxZ0E5M.roa (hash: uOKsNkDG0Ih9AU+jzh0qmasyGN4qRKYE0O9HmXtVDH4=)
14: yMppmJ0ePcCwV7jdLeFoJtTzti0.roa (hash: uVYzqGJSAvIxYWg/IYHGMRlpBWDvYdbvrkejQ/7v4A0=)
15: zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl (hash: 2QxpaHzwn2hoVzR3IZX6XVNS/z0HElD0kPHa1nUb0rE=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Validity
Not Before: Mar 15 01:31:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3EC6283B83738D00994EB3D07F6189B541735522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:50:92:66:6d:f6:f4:a6:de:a1:f7:77:d0:
33:45:20:47:cb:32:20:be:90:1a:41:34:f4:d0:28:
a8:44:73:5b:3f:ee:35:dc:ad:b8:6b:39:91:d0:a4:
77:4b:a0:ee:0c:36:e3:89:94:9d:e8:7a:f3:51:cf:
2d:26:3c:04:43:b7:27:e1:58:75:d4:7d:7f:be:38:
80:53:ce:aa:aa:1a:bf:13:4b:f1:d7:61:65:56:82:
34:25:b6:75:80:e3:bf:c4:69:da:d7:3f:d8:24:9d:
32:cc:cf:95:8a:5d:03:ff:13:6b:2e:8c:d2:6c:0c:
83:a7:b9:88:3a:31:3f:b5:4c:0e:2a:87:38:54:a0:
26:a2:97:3c:b0:37:5d:8b:70:5c:32:3a:cf:f5:67:
21:a5:92:da:0c:a2:50:58:ca:cd:4d:13:6c:56:e6:
86:2e:03:77:8e:5e:4d:e7:bf:50:59:34:57:eb:97:
f7:1d:a2:e0:ee:64:16:09:e0:cf:4a:31:45:57:73:
62:d4:a6:c3:d9:f2:d9:1c:94:67:04:42:47:a9:71:
51:16:fd:93:f9:15:c4:8d:21:19:bc:f5:a6:8f:8d:
15:d9:19:92:43:a1:74:b5:ac:8f:70:3e:40:70:0b:
d9:65:14:27:ca:15:71:a3:01:8d:3b:e3:a4:47:c4:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C6:28:3B:83:73:8D:00:99:4E:B3:D0:7F:61:89:B5:41:73:55:22
X509v3 Authority Key Identifier:
keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:33:e8:d5:ca:b0:2b:da:98:0a:34:cf:6b:6a:b7:56:36:16:
8e:0e:5e:2f:ef:55:be:87:ec:4c:a7:fa:93:9d:80:ec:07:6c:
3f:bc:53:e5:39:f0:d0:b0:9f:7c:41:e1:0b:d8:59:a7:bd:5e:
1f:f9:d6:ce:d3:d1:97:d1:63:d5:c3:ad:44:93:64:2d:21:67:
47:be:15:87:4c:47:fc:d4:e6:d6:b0:a1:de:3c:57:d5:bd:bf:
bb:ba:86:c0:d5:82:2b:3e:a1:67:d6:e9:1c:b5:45:f1:eb:d0:
f1:f1:81:f5:3d:ee:97:d9:6f:1b:55:78:6e:28:6f:09:c4:8c:
ff:db:bb:38:8a:02:2e:54:75:1b:d8:18:31:34:71:89:9a:91:
58:e3:e4:57:e5:bf:28:12:a4:92:cf:92:e6:a6:24:f2:18:69:
b8:7e:8c:c8:c0:39:d5:85:d2:2a:6b:64:c2:85:8c:29:31:a1:
1f:9c:5e:40:0f:73:3f:bd:ee:cc:b3:45:39:86:63:6a:7c:bb:
46:1b:82:e4:d2:43:c2:84:0d:a2:bf:6c:96:bc:9c:62:a3:8e:
88:85:8c:37:23:1c:9a:52:14:b2:8b:54:f6:68:50:6c:47:94:
7f:88:6f:37:b0:85:04:7b:83:a2:b6:d0:f1:e2:ee:3f:7b:97:
8d:e0:5e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:18:52 2026 by rpki-client