
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
File: if8a6GSr-fEmFOMHZAT1VtVv-oI.mft (raw, json)
Hash identifier: Zpj+PgT9qDQQwc6YDbgZbL87fZqZX7a9Lg9iSeTZsrc=
Subject key identifier: F1:90:9A:A8:7C:86:7B:21:FD:B4:D1:14:F2:2D:6D:F0:B3:2E:F5:17
Authority key identifier: 89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82
Certificate issuer: /CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
Certificate serial: 1E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
Manifest number: 0BCE
Signing time: Thu 26 Mar 2026 06:26:31 +0000
Manifest this update: Thu 26 Mar 2026 06:26:31 +0000
Manifest next update: Fri 10 Apr 2026 06:26:31 +0000
Files and hashes: 1: YyOOrkTLusz-eHJzEvqcBXB09wk.roa (hash: filSosAJRRvpchdGUyVX8fvm/0Va+8bzYmiKum5GlpA=)
2: if8a6GSr-fEmFOMHZAT1VtVv-oI.crl (hash: L1cAS5fipUeji0XzqOfoaa+Rx1uYdhiOf1dUi1vFX9Q=)
3: lc34sKmnuTaf1zwMLkP85-29nLo.roa (hash: /WIhfZI0ncbjU2jZLBVHY+eMeD/i+XMv5UxJY0iSQYY=)
4: n8eQBYjvsUifgiHUdBIk3JHJA2E.roa (hash: lgdTeUR2d4aveju6dE0o2ntWyi20B2bFNgnTeqmPTpM=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
Validity
Not Before: Mar 18 02:08:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F1909AA87C867B21FDB4D114F22D6DF0B32EF517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:e0:34:8b:f8:f6:49:bf:f9:7e:b7:2b:fe:
d8:d9:31:2c:93:47:7c:cb:15:ad:10:b8:16:94:05:
3d:fb:39:81:24:32:db:9f:20:5d:e4:b1:1d:77:47:
45:05:61:00:dc:b9:8d:b0:63:64:7f:a9:d6:22:c4:
93:cd:e5:8d:e7:c2:3c:d2:32:e1:4f:a4:50:36:42:
c9:f7:09:e2:1e:bb:f1:52:7e:c1:ca:4b:c4:29:6f:
40:9c:05:45:de:be:8f:cb:81:f0:6c:dd:f0:79:6f:
8a:f7:8a:03:a9:ec:c6:f9:8e:be:e9:ba:c6:3e:7e:
80:ff:cc:c3:39:76:72:ff:12:2e:f3:46:6e:2a:04:
ca:43:d7:8b:18:22:91:b0:77:3f:45:87:1b:f3:b7:
e1:94:31:1b:4f:40:6a:7b:1f:f4:10:24:e0:7b:df:
bc:ad:ef:52:63:d3:15:e6:50:c2:02:08:35:85:67:
64:0e:c6:db:61:9a:25:d4:c8:ff:ab:0b:b5:f1:9f:
43:20:95:aa:7e:d1:72:6a:77:10:fa:4b:8f:bc:3d:
03:eb:84:32:3a:e8:ca:6f:83:c3:b4:28:ac:b2:68:
89:2a:98:af:78:2e:bd:80:45:06:3c:54:ae:dd:36:
35:06:7f:a9:fa:98:3b:3d:87:fc:aa:55:2b:e0:15:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:90:9A:A8:7C:86:7B:21:FD:B4:D1:14:F2:2D:6D:F0:B3:2E:F5:17
X509v3 Authority Key Identifier:
keyid:89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:19:34:e6:0e:a4:c9:d4:9b:af:8e:6b:0d:71:28:a7:23:4d:
c5:5d:d9:4b:a0:09:79:78:cf:e6:a8:09:3e:4a:35:34:b7:16:
cb:b4:2e:55:11:bd:fa:01:18:e2:87:e2:03:33:aa:c9:17:bf:
b8:f1:48:2e:df:4b:a7:75:7e:06:91:ae:75:9a:56:ae:ad:e5:
f8:26:27:77:56:74:d9:62:7d:40:6d:8d:e9:7a:4a:77:61:1c:
07:c2:33:57:cb:f1:1d:d2:85:a5:45:76:0b:65:19:4e:41:4a:
79:47:14:30:0a:f7:46:97:a3:b1:c4:44:50:b5:12:28:60:1c:
e0:85:d0:6e:62:6a:ff:b9:0b:8f:da:d1:6b:19:0f:26:8f:ac:
c6:64:c9:5e:8a:eb:73:52:83:6a:b8:a4:04:c7:1c:82:79:53:
2c:e6:5e:1a:fc:96:b2:d9:64:43:c5:d2:72:dc:24:9a:8d:09:
bc:36:b3:a8:2b:15:24:6a:f7:e8:5e:5a:ae:22:4a:18:01:da:
52:4b:65:e6:73:c9:05:9b:fb:61:9d:0b:79:fd:fa:e8:b8:77:
5d:bb:cf:c1:a1:b8:a9:3e:00:58:e2:fc:04:64:3b:fb:9c:6a:
8f:62:27:83:c2:b4:75:c4:bd:93:e7:8e:f5:05:7e:af:38:a0:
10:3c:4f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:40 2026 by rpki-client