
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
File: EGsfPWSeWiWqE0DBi9anwkzzavY.mft (raw, json)
Hash identifier: ykQqOO/WUy0bW4OaiHsMDgHpoUGB86zp7GNxSu5ZgyM=
Subject key identifier: 9F:43:94:A1:74:51:28:07:29:79:62:39:15:2E:4F:FC:37:A6:46:D7
Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
Certificate issuer: /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Certificate serial: 83
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
Manifest number: 1E68
Signing time: Thu 26 Mar 2026 03:18:16 +0000
Manifest this update: Thu 26 Mar 2026 03:18:16 +0000
Manifest next update: Fri 10 Apr 2026 03:18:16 +0000
Files and hashes: 1: EGsfPWSeWiWqE0DBi9anwkzzavY.crl (hash: a8Qx84BOBhjPX8+J8zJAwiUHtEoJXnq9M3POHE14q6s=)
2: O2laLk9xmgMMk9tar5WlPyTyuRA.roa (hash: GdABjnBnx9cj6ynTwDkoOA9QT/5VwIhAD1YA92syZAU=)
3: YWd22z7LkVnQ86yvKuf6YaTPKaY.roa (hash: MqEa+DXNOZq+Xq84zBDHoPCWVp4C0Z78MnsOFgSiseQ=)
4: yi4SZ1tm2kyicQrYGj3wDznRMzg.roa (hash: BnVqRLbuzInCNkeTTMDnTo4Dcaa1Et7JdOMqmTpy6gA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Validity
Not Before: Mar 15 01:38:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9F4394A17451280729796239152E4FFC37A646D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ff:8a:3d:4c:8f:7c:33:f5:32:0e:54:25:b7:
62:b1:9c:7b:f5:e0:99:fb:4b:b7:43:0c:6b:5f:9c:
3a:4f:fb:ed:39:aa:01:c6:96:1a:a6:9f:69:6b:04:
2c:6c:fb:3d:08:05:bb:4f:9b:df:b3:f6:26:fa:f0:
f2:a4:00:bf:a6:e5:2c:f3:73:13:3a:ce:25:27:3b:
39:67:64:71:bb:7d:86:36:77:79:ed:09:49:b0:e3:
1e:d7:58:49:d5:18:d1:13:1a:95:b0:ef:86:ef:e5:
42:8f:41:29:23:44:ad:64:21:29:7f:12:8a:35:5f:
f8:be:f1:1d:92:7e:83:40:6f:ad:13:7c:d5:c6:43:
b3:df:03:5b:70:58:9b:fb:b8:62:95:2f:6d:0b:41:
6f:5f:09:10:23:aa:9c:f7:0a:1c:37:a6:b5:72:99:
53:54:3f:97:f9:79:8b:d0:17:b1:dd:f8:f1:a0:e3:
cf:c3:9d:d9:d4:92:50:f4:fe:96:89:a3:6d:bd:9f:
35:55:f0:4c:df:74:1d:13:10:9a:b1:ee:d0:f4:40:
2d:6b:19:14:78:a9:39:57:3a:5d:2d:62:a5:d4:34:
88:f0:da:db:48:5f:aa:6e:d1:ec:a8:8c:48:26:b2:
c8:f5:d5:1f:66:d3:81:56:24:55:69:65:67:8d:46:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:43:94:A1:74:51:28:07:29:79:62:39:15:2E:4F:FC:37:A6:46:D7
X509v3 Authority Key Identifier:
keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:58:98:54:f7:13:e3:70:db:6e:42:f8:93:4c:e2:f9:ce:14:
38:32:29:b7:4e:64:4d:61:e3:4c:eb:7b:64:6f:90:2b:23:a2:
33:8d:17:2d:59:ac:8c:7f:26:83:74:2c:ff:53:d3:9d:c9:ac:
73:2c:a1:ad:f8:78:a8:95:03:80:01:c7:e0:a8:f4:c2:1f:8e:
0e:73:b1:a2:e3:f2:90:05:ca:53:ad:cf:2f:6b:fa:30:1e:f9:
e1:d5:8e:ef:8e:fa:ab:80:9e:4a:73:2a:df:2b:60:f7:f4:c1:
7c:01:64:17:10:1d:52:f1:5d:a1:63:5c:e3:1d:f8:52:aa:42:
c5:bf:8e:6d:2f:3f:3a:42:27:57:2c:51:d2:9d:a9:d0:49:61:
82:57:33:f0:31:57:ca:8f:71:25:7c:d1:cf:76:a4:27:b5:d5:
b0:ff:62:2c:e8:f7:6f:53:8d:0e:48:50:a2:11:07:f9:84:ed:
72:b7:6a:5e:91:00:a9:44:1b:8f:db:b7:cb:37:c8:58:a5:6a:
7d:b2:02:19:f2:15:ab:e9:6e:48:bd:f8:41:5e:da:f3:38:ec:
71:86:3c:54:bd:3b:6a:7e:b0:e2:63:e5:e7:4f:f5:a4:1c:e3:
e9:72:05:4e:8e:60:80:4d:c7:1b:6e:bc:39:ed:16:0b:91:04:
b4:8a:84:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:55 2026 by rpki-client