
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft
File: Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft (raw, json)
Hash identifier: gFLGkoptkCUBLexl74H45BXr7DLB578kgdytCeU2xEs=
Subject key identifier: 03:F3:32:FA:7C:F9:DA:B4:A7:A4:54:AF:A8:0D:89:34:38:62:84:CD
Authority key identifier: 43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3
Certificate issuer: /CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3
Certificate serial: 31
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft
Manifest number: 0C0A
Signing time: Thu 26 Mar 2026 08:38:15 +0000
Manifest this update: Thu 26 Mar 2026 08:38:15 +0000
Manifest next update: Fri 10 Apr 2026 08:38:15 +0000
Files and hashes: 1: Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl (hash: S9gHZGB3+g5OXPh4XyIqNvXLqmkDd9Le3iahNIY5Xyc=)
2: ZIpyjKw3z5DtrVxV_mhR0H6pVYc.roa (hash: GIDoD9cB6PYXuKpp42n5VFXcjfLrjyj8M5JfAoIwkeQ=)
3: bVd_0O5UqYSQmFIBc3PVrT-Fl0Y.roa (hash: mOTPJsCUB4Q2O8b1lK/fn62SlHgUqtj2Sg8VtNG9NNc=)
4: j44SaUgC5TGIAV-dXEF7jTZIKtY.roa (hash: I339Qbi8Xj3daChH4Ki9FwKDmlyvJrMws4RzY+R5A4I=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 12:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3
Validity
Not Before: Mar 15 01:41:08 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=03F332FA7CF9DAB4A7A454AFA80D8934386284CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:39:45:bb:12:dd:2e:62:d5:3a:d3:f5:a5:29:
b1:62:81:a5:06:da:80:90:b7:9a:cd:bb:5f:0d:33:
15:f7:3f:22:d3:5d:4e:6f:df:d7:c2:38:d8:e9:2c:
a6:0d:0c:1f:37:26:6a:06:66:19:a6:db:38:75:15:
9d:68:5a:0f:70:0c:d9:7b:c4:14:8e:a1:86:b7:5d:
44:18:df:26:ae:79:a2:dc:7f:09:07:f0:01:a4:80:
0c:72:a1:15:83:8c:52:f9:3b:e8:60:b6:73:01:cc:
1b:df:14:b5:99:50:eb:9a:f3:08:20:85:30:8a:c4:
f6:61:9d:52:8f:b7:23:29:38:b8:6d:64:3d:bc:08:
0f:db:fb:d5:5d:37:c6:e1:aa:a2:26:3f:e1:98:97:
20:19:4f:a9:e8:6b:ca:09:34:f4:c2:54:e7:ec:d6:
02:79:e7:0c:44:db:63:bb:af:5a:c4:1e:6b:fc:b2:
b0:6e:e3:bd:51:ec:01:bd:02:31:dd:2e:a1:bb:31:
bc:d0:c9:c6:0c:23:a4:32:df:67:d4:00:6e:64:e6:
0b:d4:50:76:79:08:d0:72:00:e3:87:09:9f:19:35:
06:85:19:0e:1f:6e:10:92:89:11:91:32:05:37:8c:
dd:18:cb:53:8a:98:31:a1:28:cb:a5:6d:7d:3e:c6:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F3:32:FA:7C:F9:DA:B4:A7:A4:54:AF:A8:0D:89:34:38:62:84:CD
X509v3 Authority Key Identifier:
keyid:43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:9f:4f:ed:3e:d5:84:f5:8d:a3:72:f1:63:9b:dd:f1:57:f1:
5b:14:92:1c:d5:a5:f6:8b:54:04:bd:c5:6f:ce:49:24:5a:4a:
64:89:03:44:96:bc:43:7f:64:b3:72:f1:93:00:3f:70:88:be:
1a:f7:26:62:89:a7:ea:f7:b2:0b:61:51:4a:09:f3:96:d1:14:
22:56:ee:d7:8d:7e:72:81:36:03:37:53:62:01:c9:e9:07:a1:
1c:45:cc:ab:67:c1:11:0d:77:79:4f:00:bb:2b:05:75:e4:49:
85:53:1e:29:12:40:1c:64:d3:4a:86:db:c7:05:2d:d7:7e:ad:
1f:f5:c2:2d:5d:c9:57:ab:49:a9:9c:63:3a:6a:fb:14:f6:eb:
41:0b:38:c7:62:8f:17:fb:5c:0e:c5:2e:2e:9c:ab:21:00:6f:
be:53:a8:ec:f5:c0:7d:6d:4e:b4:96:ed:65:19:65:e2:c2:9e:
54:0b:e5:19:51:9c:8f:dd:07:ad:e9:1c:29:af:36:df:95:87:
f8:7d:86:63:a2:2d:63:44:e8:87:f5:cd:6d:c1:d2:7f:5b:e9:
17:d6:f4:d2:fd:88:cc:0d:ed:a5:05:c5:c8:d2:f2:a4:f7:7c:
8e:8d:bf:eb:eb:89:45:95:d1:ba:ca:b5:29:da:9f:a6:2d:f2:
7e:db:2b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:32 2026 by rpki-client