
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
File: BJs1qsogtjD0rVLLWY-VElD_B_0.mft (raw, json)
Hash identifier: mUOohH4pM3sId4EsQviYOQIUCyhH2tvmIz5wssKw3eM=
Subject key identifier: 10:84:B2:BE:25:28:4F:DA:54:9C:11:17:70:94:86:6D:67:9B:70:37
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Certificate issuer: /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial: 30
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
Manifest number: 0BCF
Signing time: Thu 26 Mar 2026 04:22:16 +0000
Manifest this update: Thu 26 Mar 2026 04:22:16 +0000
Manifest next update: Fri 10 Apr 2026 04:22:16 +0000
Files and hashes: 1: 4znREq7D5k0w0RDwluECdN2JilU.roa (hash: POXv4BHelk1HejXTLcxTf+ofcwBGam+59mgNmS3GXWg=)
2: 6VKA0cykRGIzy67xykbwyb8Ob6g.roa (hash: eRKd1c0wxAQK7aeW5Fga4J7g02yHZ06X5RxGA0vvH3c=)
3: BJs1qsogtjD0rVLLWY-VElD_B_0.crl (hash: BSg631OxzEUbyNvWHpm6NIPN7CkG68Kqbf2SOdEAvxQ=)
4: Jmgiz8zxapY0JjAWgJDJ-sHBH5A.roa (hash: sXcDI1i6Nmc33Iy3iuNmc35iviVP3klGXaH5Hyt74tE=)
5: LTegBBlKD13xVQf6lh1EjLFcSnM.roa (hash: HnN9oKpAZAYpKVNJjdW91GCXaNrBUWGkS25grdQA52w=)
6: SibO_2HJly231M1tdd9LP0QrXeQ.roa (hash: S8Y+WhEZkX8D/p4f4TBvUUKvTgpZ0QHH186X5sie72I=)
7: TK1xx9HnGSY9pjPboWWC3u5Y6bE.roa (hash: K1yyweKVCbg1WMLdLCxCiqvmtmZVjsrj7W/QjbMf6io=)
8: emynnMUiAm2jel8kr_rAaG01eIE.roa (hash: hJiM/AVq19IRRHNwifUnCbTxDkYX04QiyFExofg+KaM=)
9: fqyxmHXo47E9TRmMt7fKM6NsbZ4.roa (hash: hLqbnVY18S7K6nsuszBgqvHXLe1Avfrrbg87x5rGXZA=)
10: jrrZDXsCg8WovfoM1ClAIodjvV8.roa (hash: U+fle04U7ODwsVwI3GVfM6wiTYosX+tcjOrqEL485ws=)
11: knr2cb2wOIHXNnhOuzN5BFbzONY.roa (hash: s66OkWuKr/2yOU9okRGOxqIqDKT5T47hBWgMtrAoOOQ=)
12: lQe2st9dkByxmd0TZuDmS3yNrkc.roa (hash: p97e66a8NvpBVdYguR8ByQTztnPtbqg0LwCCBvo54ys=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 04:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Validity
Not Before: Mar 15 01:37:05 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1084B2BE25284FDA549C11177094866D679B7037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:ff:90:c4:97:1b:28:db:a0:a5:02:fb:ce:
f6:4e:b1:4f:1f:90:8f:5d:62:f2:65:33:9c:5d:4a:
85:e8:0b:fd:da:0b:c0:0b:af:3a:4b:85:2c:7f:26:
05:45:9e:9b:a5:0b:d8:72:70:46:2e:75:4d:76:95:
98:f3:d3:08:5c:60:f9:5e:87:59:fa:c4:69:24:6a:
82:d2:4c:23:cd:09:c2:e4:ac:f5:e0:50:93:41:f8:
4f:32:38:5d:bc:fe:76:67:7d:cd:f9:1b:0d:2b:2a:
9d:55:d2:8f:30:c3:fa:36:e1:db:e1:8f:59:06:c7:
ca:94:1e:78:0e:65:42:f1:99:7c:2f:77:f7:81:ed:
02:33:38:f4:43:a6:19:44:43:a3:e6:da:08:61:1c:
48:6f:13:bb:18:8a:67:64:7c:11:01:69:75:0e:30:
8e:55:84:4e:ab:d7:5f:6e:c9:18:e2:25:35:9d:64:
89:1f:a5:04:54:04:b1:2a:91:9e:35:eb:e9:08:e7:
84:0a:18:28:eb:5b:61:d0:6d:73:e2:2e:63:ff:17:
17:58:25:5b:32:d2:a7:54:d7:ad:2e:ff:d4:17:05:
c6:68:ba:59:64:7d:16:90:a9:ca:5a:e5:a4:27:71:
fd:26:46:61:c7:06:0c:1c:a2:79:4f:a8:0c:e7:59:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:84:B2:BE:25:28:4F:DA:54:9C:11:17:70:94:86:6D:67:9B:70:37
X509v3 Authority Key Identifier:
keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:e4:b7:7f:e9:c4:97:fd:50:42:dd:bf:cb:df:f5:4a:f9:40:
27:18:8b:fb:99:c7:99:c4:bb:18:e3:23:06:b5:94:e8:dd:d1:
06:85:e5:7f:c4:63:b5:52:32:79:98:65:aa:7e:d9:6f:ab:82:
3a:87:fe:b9:85:f7:65:e1:ec:10:eb:12:07:79:a1:cc:f5:a7:
ee:32:21:51:27:8b:fb:e0:1b:aa:56:b3:e6:24:9b:e6:51:b2:
cf:05:b2:d0:b3:53:2b:50:8b:f8:4f:8f:1f:5d:50:df:0d:38:
2b:6b:cc:05:ae:f4:99:39:44:7b:70:a0:35:68:6d:d2:d6:6e:
8a:0e:3d:ea:56:2b:3d:66:c2:0d:f2:6f:bc:2c:c9:57:66:8d:
c7:34:31:40:92:e6:9d:0b:3d:62:e8:65:83:b2:2a:22:4f:6b:
e2:30:9e:f6:94:39:12:29:b5:bd:a4:2a:dc:84:a3:14:b6:5f:
c3:aa:aa:d7:ad:94:bc:f3:a8:a1:58:61:6c:34:ef:12:ed:b9:
6a:50:bb:90:ea:5b:8c:1d:14:2d:19:ae:1a:9b:c1:09:38:ab:
7e:a1:7d:4d:05:38:e5:a3:b0:62:58:31:bc:e9:45:35:b6:41:
39:b9:0b:c0:c8:59:8e:b8:41:2d:34:81:ce:54:63:b6:c7:1e:
74:ff:53:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:54 2026 by rpki-client