
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.mft
File: -XT56z5ratix6uoKRh0kjTrNzeI.mft (raw, json)
Hash identifier: BfIL3lzAOuToP6mNZZ7Wn7hpShJbGFRvJNVbVe/349o=
Subject key identifier: D2:2A:02:05:77:C3:A4:B3:64:26:47:E7:AB:CA:81:57:22:B3:8D:A1
Authority key identifier: F9:74:F9:EB:3E:6B:6A:D8:B1:EA:EA:0A:46:1D:24:8D:3A:CD:CD:E2
Certificate issuer: /CN=F974F9EB3E6B6AD8B1EAEA0A461D248D3ACDCDE2
Certificate serial: 3F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.mft
Manifest number: 0C3D
Signing time: Thu 26 Mar 2026 05:14:40 +0000
Manifest this update: Thu 26 Mar 2026 05:14:40 +0000
Manifest next update: Fri 10 Apr 2026 05:14:40 +0000
Files and hashes: 1: -XT56z5ratix6uoKRh0kjTrNzeI.crl (hash: Jicb3HcbBTsRbsvEzR+O5N2+FiZaKz5pC9fnx7C4b4M=)
2: GxFOVPiHb1DMccPAB6Wcklpb4Bo.roa (hash: Okk3hEjuiR6zmPiCXs7uX8CkzqjgWicU0gD/cw5AYeM=)
3: q1mDfLP_k8fEayQv8ElP_1XBAoM.roa (hash: qZZvJqWO237+bJTPxc7a3rfFEfeKCiBdiDl+hQRNot8=)
4: vfUiDVgzaXJya1GzFQaqULsG1gU.roa (hash: VL4zsdO7oK1Ik4a5RCe8hBN4xeXhmjyIbtZKPtZLVuY=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 04:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F974F9EB3E6B6AD8B1EAEA0A461D248D3ACDCDE2
Validity
Not Before: Mar 15 01:34:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D22A020577C3A4B3642647E7ABCA815722B38DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:3f:40:96:e4:0f:bf:06:ed:2f:c7:54:7c:
72:bb:3a:af:84:e0:7b:dd:73:a3:db:b9:d9:67:0f:
28:f4:44:24:14:ca:5e:f4:35:46:4e:25:91:9e:52:
90:54:d3:c9:34:02:8e:c8:db:a8:59:7f:7d:5a:86:
53:85:ee:01:80:9b:13:62:1d:e2:ce:2b:f7:cd:0d:
82:d7:16:94:bf:be:13:a8:7e:10:9f:34:3c:f1:7d:
8c:f8:e8:53:ce:06:c6:84:8c:5b:ab:5d:61:4c:fb:
30:56:8c:7a:f4:7f:0a:17:97:a3:b8:58:65:7a:7b:
1f:3b:12:17:fe:86:f3:71:67:80:94:c5:bf:4a:9f:
1a:8e:1e:35:ef:1d:f7:42:29:af:3c:9d:0b:9a:54:
f7:4b:ae:b0:d5:40:81:c0:c3:3c:10:ac:b1:fc:c6:
13:b9:c6:26:18:da:6e:9b:7a:d9:04:39:f1:89:b7:
1d:d6:d0:de:64:a1:23:f2:fd:ea:45:ba:80:be:6c:
3e:b8:b4:63:c6:78:71:27:cf:09:df:23:11:de:f3:
dc:a8:4e:ea:b3:d8:0d:26:c5:89:e5:ef:82:38:a6:
43:a0:af:3c:58:f5:14:da:01:e9:6d:72:4e:dc:79:
8b:73:a2:31:b3:f8:fc:15:24:ed:24:40:5d:76:0a:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2A:02:05:77:C3:A4:B3:64:26:47:E7:AB:CA:81:57:22:B3:8D:A1
X509v3 Authority Key Identifier:
keyid:F9:74:F9:EB:3E:6B:6A:D8:B1:EA:EA:0A:46:1D:24:8D:3A:CD:CD:E2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:4f:8b:7f:bc:0f:05:73:dd:0e:70:8e:5e:b0:b3:43:96:96:
7c:ac:e7:52:25:9e:e3:54:d0:f5:7c:24:e4:92:50:2f:50:55:
6f:6e:fd:f3:c2:15:f6:9d:63:60:c9:35:97:b4:c6:b5:a4:28:
03:da:0a:6b:e6:af:52:8d:69:10:1a:25:e5:b7:6f:c9:9d:a3:
1d:8f:ef:9b:9f:43:26:9c:66:22:86:5d:6e:da:9b:2b:75:76:
58:99:ba:14:fa:a6:82:5f:c9:36:d3:17:66:32:1a:6f:ab:92:
d2:75:ab:c8:fc:7f:d2:4e:9d:e5:d7:9e:ce:9a:fa:58:42:fb:
f6:82:3c:13:04:8e:c3:69:22:41:80:a9:86:1b:d8:66:cb:4d:
5f:a1:9c:c4:62:90:d7:67:4d:67:ee:b1:f8:a2:36:34:02:cd:
00:60:b6:63:32:c6:10:83:ab:5a:09:9a:db:52:25:a9:a2:01:
a0:71:53:84:f5:26:d3:fb:8c:bb:11:55:2d:3a:c0:2d:d3:7f:
ec:f4:72:74:d3:d5:4e:1b:7e:7c:9e:c8:65:30:d2:96:bc:6a:
47:e4:b7:c0:dd:4c:aa:6b:d5:73:a2:89:98:10:1a:92:b8:82:
c2:73:1a:7e:db:17:00:11:71:15:1d:00:7c:0e:30:96:71:86:
92:67:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:55 2026 by rpki-client