
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39057/OOA7GOMKX7R-6x8-BJVakKO0pic.mft
File: OOA7GOMKX7R-6x8-BJVakKO0pic.mft (raw, json)
Hash identifier: GFPaZOYKKqZbEFGVW+HIikLW12+KwwlHtbjwImSEDUI=
Subject key identifier: A4:88:92:8C:A4:62:18:FA:97:16:9B:D3:BC:B2:90:D6:0B:F8:DE:21
Authority key identifier: 38:E0:3B:18:E3:0A:5F:B4:7E:EB:1F:3E:04:95:5A:90:A3:B4:A6:27
Certificate issuer: /CN=38E03B18E30A5FB47EEB1F3E04955A90A3B4A627
Certificate serial: 24
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OOA7GOMKX7R-6x8-BJVakKO0pic.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/OOA7GOMKX7R-6x8-BJVakKO0pic.mft
Manifest number: 0BE5
Signing time: Thu 26 Mar 2026 07:39:48 +0000
Manifest this update: Thu 26 Mar 2026 07:39:48 +0000
Manifest next update: Fri 10 Apr 2026 07:39:48 +0000
Files and hashes: 1: OOA7GOMKX7R-6x8-BJVakKO0pic.crl (hash: 1TPCwWuCmpZmOFLlkAdsIFuIrYIIWXFgpcRR0sKUUYw=)
2: giisuVrIeNBqgAb-eLDOsJUXS9k.roa (hash: 6rqLhMNxTJRn/WHCq1uHMfuY1qoKLsadLrptr02Ou0k=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/OOA7GOMKX7R-6x8-BJVakKO0pic.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/OOA7GOMKX7R-6x8-BJVakKO0pic.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OOA7GOMKX7R-6x8-BJVakKO0pic.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E03B18E30A5FB47EEB1F3E04955A90A3B4A627
Validity
Not Before: Mar 15 01:45:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A488928CA46218FA97169BD3BCB290D60BF8DE21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:bc:47:c6:91:dd:15:f1:82:88:0e:0b:c5:
8d:e8:da:3a:38:d9:f6:6c:59:5b:81:d5:f1:c9:64:
c6:ce:d3:fe:2f:72:6e:0a:3d:36:12:d4:94:82:0b:
4b:f8:3a:f7:38:7a:bf:44:b4:4b:24:81:4f:66:64:
13:42:88:e0:5c:c9:e6:e9:03:15:9e:1b:9d:a8:8e:
2a:21:fb:3e:2a:7f:46:53:7a:49:c3:6c:46:73:64:
3f:c2:6a:c2:9e:f1:f0:d1:65:b3:90:5a:bf:25:a9:
2a:21:36:e6:b2:20:11:b7:6e:35:d2:40:71:fa:74:
12:3a:db:81:82:51:e3:eb:b2:2a:29:20:9e:2f:1c:
e5:e7:12:bf:45:4a:45:30:6a:1b:47:90:a9:f3:db:
0a:84:fb:c3:0d:99:54:91:61:44:d6:68:8c:12:87:
e2:05:88:8a:75:f2:69:df:f6:62:68:f1:7a:54:6d:
5e:0d:51:92:47:73:7c:ca:4c:5c:e2:d6:ea:24:f1:
3f:37:c5:63:5f:0f:47:6a:63:35:aa:2f:e2:20:f3:
8a:9b:5e:58:7c:d9:7b:c3:9b:88:a1:eb:54:01:69:
cb:b0:68:e0:5e:f5:cc:c9:46:32:50:29:d8:d8:7e:
9f:4a:fe:44:d9:18:55:98:54:e0:6e:11:05:17:b0:
af:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:88:92:8C:A4:62:18:FA:97:16:9B:D3:BC:B2:90:D6:0B:F8:DE:21
X509v3 Authority Key Identifier:
keyid:38:E0:3B:18:E3:0A:5F:B4:7E:EB:1F:3E:04:95:5A:90:A3:B4:A6:27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/OOA7GOMKX7R-6x8-BJVakKO0pic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OOA7GOMKX7R-6x8-BJVakKO0pic.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/OOA7GOMKX7R-6x8-BJVakKO0pic.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f0:d8:a3:01:cf:29:52:78:07:16:08:b0:14:b9:f9:5f:98:
f3:6f:a1:4a:71:a9:6c:8e:d2:69:14:a9:c3:42:41:3f:a9:0c:
a2:2d:30:04:2b:ec:bd:79:1f:d5:d9:bd:37:89:fb:56:a4:a4:
29:24:7e:57:a6:7c:df:81:7e:72:0f:70:70:dd:03:8d:09:45:
fd:5f:10:89:b3:d8:62:1a:05:4c:45:c6:24:0e:66:19:c9:f3:
26:29:73:8c:fc:43:ff:c6:0a:76:e8:72:b1:0f:f2:5d:69:88:
11:45:28:f5:2b:bc:6c:8d:49:99:54:fc:9a:6a:c7:94:7e:f3:
f1:92:f2:35:87:3e:fc:2b:8b:8f:eb:36:a3:d7:09:c1:fe:a1:
79:e3:7b:7f:a4:d1:8e:c8:3f:41:71:1b:91:d9:da:88:1a:eb:
19:cb:bb:1e:0a:6b:fa:83:3a:7a:4c:e1:79:e0:fc:75:5b:34:
78:be:75:43:8b:dd:76:dc:eb:25:20:09:f7:ca:98:9e:05:fa:
d1:95:8b:61:81:1b:9a:a2:bf:ef:d9:d7:c3:73:13:ae:06:fe:
fe:d1:56:9e:36:b8:14:37:d4:e8:f7:69:82:47:b1:00:35:a9:
64:4e:a0:8b:38:01:c3:5c:78:e9:d8:68:b4:b0:dd:c0:8c:2a:
a8:e2:2f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:18 2026 by rpki-client