
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
File: heXxjZYxwlh7CU54zdThuGUPTLk.mft (raw, json)
Hash identifier: vYymmXENa8wBYZr8g5WscnSXQw3xkhmdF9k0YkVhXec=
Subject key identifier: 35:FC:D8:FE:7F:83:87:94:A6:64:EF:FC:4C:2F:EA:9A:70:65:39:30
Authority key identifier: 85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9
Certificate issuer: /CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
Certificate serial: 16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
Manifest number: 07EB
Signing time: Thu 26 Mar 2026 04:59:56 +0000
Manifest this update: Thu 26 Mar 2026 04:59:56 +0000
Manifest next update: Fri 10 Apr 2026 04:59:56 +0000
Files and hashes: 1: AdMaPSay0Od6CcGQlsjG4EWxjjE.roa (hash: 1xmO3h8be8qkvMR/p7ooCKnp8YWzdbU6YzCVP5Wn9PU=)
2: Cgr4vrEXLst_PC27lRgEE70gIf8.roa (hash: 2dBNXR/uqgzbtVj22EcWAf66T634oTntixsOJOO/Q68=)
3: QMzgb68WkMO5sso7QFJH-HR4KZc.roa (hash: SbHkB9DsLhF5GZQRXJaTixDO3UC8Tx/yGn+BoY93eEc=)
4: Qhu-g4bhbS7g2KE8qMH-n_iKn_s.roa (hash: Lvfbo+DDTDxLuvFSKmLk9/dyFX6mGFcoQd6m9Dr00FA=)
5: heXxjZYxwlh7CU54zdThuGUPTLk.crl (hash: MzEjjeO/dieyc08ENve1z9vdSxr+WPqXYQalvbAEwzk=)
6: jPunJw3-EXwnD4HV8XvCVsJGLDs.roa (hash: wRy0qJsUy2sPVetIywT0v4LFP3t24hyicVNpMv9CuBc=)
7: yBe6Q0a1e8U2u5vDAidXhvuJxNQ.roa (hash: xbPHknJgKfhnqgPRFUhrwURUsCXzKvDNaiWfOj6teD8=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
Validity
Not Before: Mar 15 01:43:18 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=35FCD8FE7F838794A664EFFC4C2FEA9A70653930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:29:00:53:b7:7c:96:33:98:60:fd:8d:86:
55:c7:c4:2e:07:bb:be:b4:3a:dd:85:89:bf:8e:b3:
49:51:9a:4b:98:1f:84:22:42:26:1c:1a:8e:1d:ba:
34:8b:9e:04:ad:8f:b3:cc:48:eb:48:1d:0a:c1:e6:
9a:be:8c:5c:66:b1:e9:99:78:50:2e:f4:c2:85:fa:
a0:ea:25:87:0c:fc:f3:7f:6c:5b:93:95:0d:f7:88:
a5:44:8f:35:c3:17:2d:b7:26:9c:d3:fd:0f:9a:20:
05:67:22:41:67:f4:2b:27:6b:9a:e8:fa:1d:29:9d:
7a:25:f5:cf:3c:25:ad:b8:c1:d0:bf:f9:ea:9b:4c:
59:1c:70:10:f4:83:64:18:62:27:4a:91:51:a6:8a:
4e:c6:f0:af:34:23:de:05:a4:d0:c0:9d:65:22:b1:
bb:7a:06:70:ba:f4:ec:d2:0a:e8:69:ae:96:7e:1e:
5e:e9:b5:28:7e:3f:57:88:fc:96:e3:aa:9e:e2:37:
ba:6b:52:53:ef:b2:78:4b:b1:bf:2f:57:71:14:80:
3b:cb:36:02:e1:b3:59:fc:cb:85:ff:03:49:d1:d9:
e1:65:87:c7:a4:78:4f:52:ed:93:20:ed:6a:a9:07:
df:bf:83:0e:b9:84:21:76:e4:c7:bb:4c:f2:07:53:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:D8:FE:7F:83:87:94:A6:64:EF:FC:4C:2F:EA:9A:70:65:39:30
X509v3 Authority Key Identifier:
keyid:85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0c:0d:14:d9:30:a0:0c:cd:de:be:ad:0f:c6:ad:7c:32:99:
74:ea:2f:aa:a2:70:d3:5a:c0:05:9f:b2:54:27:0a:aa:5e:aa:
19:94:a2:dc:a4:40:a9:ee:0e:e0:06:3b:64:7d:df:23:b6:83:
29:84:51:42:a7:e1:92:41:1b:7a:58:37:5e:a8:3d:d3:44:94:
b8:41:b9:2f:ea:78:82:f4:14:d2:c1:fe:bc:89:82:1e:30:b4:
41:97:49:08:c6:b1:69:4e:da:be:fc:ce:51:c1:fb:fc:b7:91:
0a:8b:2c:1f:ae:d1:46:fd:81:1f:23:2b:e6:52:73:01:6b:45:
29:d2:2a:32:6f:26:ed:63:2d:78:61:59:70:aa:54:cd:60:f8:
79:2c:7c:e3:9f:47:9d:de:6c:e7:8a:16:4e:ff:b3:1a:f7:89:
df:38:17:db:32:74:8b:67:74:fa:3d:68:1a:bc:9c:dd:5b:73:
d5:d2:d8:5e:59:b2:2f:00:f5:07:97:dc:16:52:3d:1e:19:b2:
68:3a:11:a4:71:ee:5e:69:b0:67:09:ad:21:86:a3:6c:bf:1e:
35:5c:fd:70:fa:4c:8c:dd:93:e3:d0:f6:ed:66:43:77:96:e7:
a0:58:ff:eb:38:b9:9e:91:1e:07:dc:33:9b:52:81:1b:56:71:
62:60:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:55 2026 by rpki-client