
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.mft
File: -4x40gJfNl4LbrpByLI1HYEWwqU.mft (raw, json)
Hash identifier: UF3WqrOmWMV8iMjFlPOIYWKAiCOlK4GHMF9JQRUvB0o=
Subject key identifier: 8A:07:28:A6:B3:9D:EC:13:15:44:F5:B0:B6:82:44:83:10:5D:EA:51
Authority key identifier: FB:8C:78:D2:02:5F:36:5E:0B:6E:BA:41:C8:B2:35:1D:81:16:C2:A5
Certificate issuer: /CN=FB8C78D2025F365E0B6EBA41C8B2351D8116C2A5
Certificate serial: 2C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.mft
Manifest number: 0C02
Signing time: Thu 26 Mar 2026 04:35:41 +0000
Manifest this update: Thu 26 Mar 2026 04:35:41 +0000
Manifest next update: Fri 10 Apr 2026 04:35:41 +0000
Files and hashes: 1: -4x40gJfNl4LbrpByLI1HYEWwqU.crl (hash: bMIbrkcJvFxYLLHN4va7D/zDJJmj12W9ZLQbyIEsJGY=)
2: ri8VhbbnxaXjqhOdD4ZjdgUO9sY.roa (hash: hVGTg+OmLKO+0GYTlNSpq8jXb9vUgjgHPlvila2/JxQ=)
3: tD6QqXNxf_ErZe1DKWfe0rHus7k.roa (hash: OO/Et/kprxJ7mkcUAdMb56CHpYWzgeAZLWn7j5QZK6E=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB8C78D2025F365E0B6EBA41C8B2351D8116C2A5
Validity
Not Before: Mar 15 01:41:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8A0728A6B39DEC131544F5B0B6824483105DEA51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dd:85:f4:d3:73:eb:73:d5:9f:90:a5:23:76:
a9:05:75:26:d3:07:ee:fc:58:6c:8c:91:3f:0e:a3:
5c:91:9c:84:44:a9:28:a4:98:a4:4a:e0:f7:89:5d:
12:0e:20:dd:96:ca:2c:13:13:20:4d:cb:4b:60:ec:
bc:86:0d:b3:87:c8:fd:77:db:68:76:f0:f7:14:4f:
c3:90:21:88:4f:84:f4:a6:85:d6:9a:8f:66:19:44:
82:c7:db:ba:e4:c3:d4:46:bf:13:89:fd:cc:72:a5:
46:b9:53:3c:36:cd:11:d5:3c:06:81:3e:ad:56:f2:
36:63:0e:4c:f0:58:41:29:55:90:17:eb:a4:c5:6a:
24:cc:a0:ea:0f:99:f0:dd:8e:c6:63:1d:5d:f5:b6:
e8:63:e1:94:7e:a3:8f:c3:41:e5:2e:e8:fb:9d:cb:
19:37:01:25:af:4b:88:47:1d:17:de:8b:80:90:73:
99:a6:6b:11:5f:c9:3d:f8:95:72:95:2a:9b:6b:05:
a3:01:18:9b:8d:b7:fd:fa:51:04:da:73:6d:d4:dc:
7b:6b:f9:9f:7b:cd:b1:8e:68:4f:9c:ed:ec:e0:f5:
89:6d:a6:ef:00:4d:5a:4c:d3:05:26:27:39:43:97:
b3:a0:13:e5:16:58:bb:a7:5c:77:7e:c0:3d:bf:ce:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:07:28:A6:B3:9D:EC:13:15:44:F5:B0:B6:82:44:83:10:5D:EA:51
X509v3 Authority Key Identifier:
keyid:FB:8C:78:D2:02:5F:36:5E:0B:6E:BA:41:C8:B2:35:1D:81:16:C2:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:b0:62:d2:f6:49:e1:45:89:9c:86:b5:4d:54:65:82:78:24:
c1:91:21:fa:db:27:77:89:5e:0f:15:45:a2:a0:40:bf:bb:70:
50:5c:76:71:1b:20:c7:2d:f5:1f:89:e7:b5:19:72:e8:e6:9b:
6b:0e:25:1b:38:cf:8a:8c:c8:ef:4b:59:d6:8d:e9:38:bc:07:
6c:e1:32:ec:9b:0b:fd:20:a3:21:70:84:d4:53:a8:58:97:03:
3f:93:35:d8:dd:c2:1f:f0:7a:b2:60:93:eb:0a:a1:4d:0b:0d:
44:35:e6:cb:b2:8a:78:8d:52:b1:9c:a8:e7:3e:24:84:63:7c:
fc:aa:02:57:53:f2:d5:5e:fa:2a:94:ab:67:3b:6e:e2:e7:db:
a1:93:dc:f7:45:3c:b5:75:97:45:71:43:4b:b7:86:f7:e1:53:
1d:9e:02:7b:5b:69:e1:8e:fa:83:68:04:05:cc:bb:83:b8:5c:
0e:a0:03:a4:88:72:81:a8:bd:5c:58:5c:8e:ab:38:3a:e1:d9:
f8:9d:54:60:ff:ee:72:3e:ab:3b:7c:a2:58:05:4c:19:7b:70:
81:3f:af:56:70:e5:77:db:f4:93:d0:ae:0a:c3:63:4d:8c:7a:
9f:d8:be:74:29:3e:b9:61:51:7b:a2:db:d7:5c:55:2c:86:d0:
77:2d:23:b7
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjhD
NzhEMjAyNUYzNjVFMEI2RUJBNDFDOEIyMzUxRDgxMTZDMkE1MB4XDTI2MDMxNTAx
NDE0MVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOEEwNzI4QTZCMzlERUMx
MzE1NDRGNUIwQjY4MjQ0ODMxMDVERUE1MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO3dhfTTc+tz1Z+QpSN2qQV1JtMH7vxYbIyRPw6jXJGchESpKKSY
pErg94ldEg4g3ZbKLBMTIE3LS2DsvIYNs4fI/XfbaHbw9xRPw5AhiE+E9KaF1pqP
ZhlEgsfbuuTD1Ea/E4n9zHKlRrlTPDbNEdU8BoE+rVbyNmMOTPBYQSlVkBfrpMVq
JMyg6g+Z8N2OxmMdXfW26GPhlH6jj8NB5S7o+53LGTcBJa9LiEcdF96LgJBzmaZr
EV/JPfiVcpUqm2sFowEYm423/fpRBNpzbdTce2v5n3vNsY5oT5zt7OD1iW2m7wBN
WkzTBSYnOUOXs6AT5RZYu6dcd37APb/O//UCAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBSKByims53sExVE9bC2gkSDEF3qUTAfBgNVHSMEGDAWgBT7jHjSAl82XgtuukHI
sjUdgRbCpTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA3Ly00eDQwZ0pmTmw0TGJycEJ5TEkxSFlFV3dxVS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy00eDQwZ0pmTmw0TGJycEJ5TEkxSFlF
V3dxVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDcvLTR4NDBnSmZObDRMYnJwQnlMSTFIWUVXd3FVLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAEmwYtL2SeFFiZyGtU1UZYJ4JMGRIfrbJ3eJXg8VRaKgQL+7cFBcdnEbIMct
9R+J57UZcujmm2sOJRs4z4qMyO9LWdaN6Ti8B2zhMuybC/0goyFwhNRTqFiXAz+T
Ndjdwh/werJgk+sKoU0LDUQ15suyiniNUrGcqOc+JIRjfPyqAldT8tVe+iqUq2c7
buLn26GT3PdFPLV1l0VxQ0u3hvfhUx2eAntbaeGO+oNoBAXMu4O4XA6gA6SIcoGo
vVxYXI6rODrh2fidVGD/7nI+qzt8olgFTBl7cIE/r1Zw5Xfb9JPQrgrDY02Mep/Y
vnQpPrlhUXui29dcVSyG0HctI7c=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:18 2026 by rpki-client