
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
File: Gy5-YtqPEvO7M-C1484AL9oozyU.mft (raw, json)
Hash identifier: lwLX+3u/ZBE3sB8DaYg1rYGVor7FpoP+sl9iA+dLSRM=
Subject key identifier: DE:0B:E4:24:97:41:26:03:10:D5:0A:C9:89:FA:E4:A9:FE:D7:AD:2C
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Certificate issuer: /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial: 2E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
Manifest number: 0BE7
Signing time: Thu 26 Mar 2026 12:04:11 +0000
Manifest this update: Thu 26 Mar 2026 12:04:11 +0000
Manifest next update: Fri 10 Apr 2026 12:04:11 +0000
Files and hashes: 1: 3U6V_dON3hvJs8wH4zjvRP1ZL0o.roa (hash: 2z3DDTejfkMZMxlCaai8jNOqf3jE1ETZmwr0hqlsaOM=)
2: 43_fV0lyNKDL6Y3zBbdXYMTtlp4.roa (hash: 66M33Dt3zJSZK95IT0wlJ0IooeZMgGk1f6Yd0B6qP3c=)
3: DCIa9g447TDKUuQObtX4jh9Knlo.roa (hash: aqbu+7zMQMn7YCO6Ptl5HaToQ+L+uJO3bF8fiqDyTqo=)
4: Gy5-YtqPEvO7M-C1484AL9oozyU.crl (hash: Tu4LgWShhKH2aHJPJXJFVzJA0KhMEcf7iW7Zw6lQsqo=)
5: MBJ2k7vaS4emdBhuKKBvyBUWx50.roa (hash: 53FuTSKp9z4+l94TtFnmKIlUP7Eh2kE6pJq87lQfigU=)
6: sCQtjKbZQxnVlB-lYOekiFpDGZ8.roa (hash: NZuCQIr+Kqa+1tdX1fRF4uT3jpkqMMkqPGTUVdITMRE=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 12:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Validity
Not Before: Mar 15 01:36:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DE0BE4249741260310D50AC989FAE4A9FED7AD2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fb:19:42:3f:26:6c:fe:85:d4:e4:e3:b7:33:
ba:63:49:7a:ce:04:ac:03:0d:39:b4:98:da:67:42:
1d:04:24:24:99:e9:27:bc:65:64:3d:dc:39:69:c0:
c3:72:5a:df:89:a5:90:6f:63:60:3a:75:10:7f:d5:
bf:03:0c:1b:c2:f9:cd:83:e5:54:f4:51:de:18:e9:
30:55:a7:83:cd:27:27:a8:8b:39:49:70:c5:62:b6:
de:aa:84:45:f6:ea:2a:15:a6:a3:4e:19:35:be:be:
09:c9:50:4a:4c:ab:93:ee:e8:00:cb:fb:dc:01:e4:
43:70:ab:97:b6:9c:ef:dc:bf:81:3e:57:40:58:31:
f4:7e:6f:9f:f1:29:4a:44:66:5b:4a:fd:b3:dd:a3:
c7:94:78:81:28:53:a4:03:fa:c7:51:5d:7d:fd:81:
ed:49:b7:cb:d1:c1:f6:14:f8:b8:da:b7:16:1b:1b:
97:11:68:05:7c:60:29:9c:0a:db:78:04:96:42:cd:
a8:ed:e7:35:18:72:80:b3:ed:56:30:06:f9:61:47:
15:43:50:a1:f2:57:9a:a4:be:9c:c8:e6:40:36:e7:
58:fd:3a:8a:32:b5:e8:42:cd:2a:58:a2:a8:71:3c:
2a:7d:9c:46:84:8c:84:a8:a3:c8:e6:e3:25:a2:60:
61:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0B:E4:24:97:41:26:03:10:D5:0A:C9:89:FA:E4:A9:FE:D7:AD:2C
X509v3 Authority Key Identifier:
keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:3f:9f:b5:27:cf:e5:40:2d:34:75:24:f0:57:b4:10:3c:9f:
3c:5a:e0:c5:43:fa:f0:49:e3:71:9d:ea:d5:4a:df:b1:62:b9:
27:2e:ee:3b:e7:72:ff:bc:3b:13:aa:c1:58:83:d9:40:3d:fd:
41:1f:dc:7c:87:93:6e:d9:95:b7:b1:56:08:12:9f:29:64:a9:
de:ce:90:df:f5:1f:3a:ad:eb:5a:41:a6:59:da:5d:1c:6a:f1:
7e:a5:e5:86:a9:66:31:fc:dc:b9:b6:97:d4:b9:0e:65:0e:80:
27:68:f0:ba:3c:db:5b:1b:0e:b8:67:2e:9b:b5:c6:32:b0:69:
de:73:cc:66:39:75:24:58:14:83:f5:cf:20:45:9f:4a:8f:d0:
04:fa:df:40:73:17:ff:e0:0a:55:a6:34:0b:b6:0c:e0:ea:74:
70:45:fb:a3:fe:e6:5f:73:ed:0b:9a:cf:66:d0:45:39:c6:1a:
e5:36:95:61:81:d0:e6:5a:f7:7a:ae:07:2c:ac:9f:ab:43:2b:
51:6f:ea:52:ff:7d:98:22:0e:02:42:64:b5:2e:3c:7c:f9:60:
95:61:a1:6e:9f:41:09:69:4e:f3:ba:89:20:e6:eb:04:a5:6d:
cb:d7:a8:bf:52:70:31:ea:95:9f:b9:a1:85:22:eb:48:e3:7a:
d8:58:7b:db
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjJF
N0U2MkRBOEYxMkYzQkIzM0UwQjVFM0NFMDAyRkRBMjhDRjI1MB4XDTI2MDMxNTAx
MzY0OFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoREUwQkU0MjQ5NzQxMjYw
MzEwRDUwQUM5ODlGQUU0QTlGRUQ3QUQyQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOn7GUI/Jmz+hdTk47czumNJes4ErAMNObSY2mdCHQQkJJnpJ7xl
ZD3cOWnAw3Ja34mlkG9jYDp1EH/VvwMMG8L5zYPlVPRR3hjpMFWng80nJ6iLOUlw
xWK23qqERfbqKhWmo04ZNb6+CclQSkyrk+7oAMv73AHkQ3Crl7ac79y/gT5XQFgx
9H5vn/EpSkRmW0r9s92jx5R4gShTpAP6x1Fdff2B7Um3y9HB9hT4uNq3FhsblxFo
BXxgKZwK23gElkLNqO3nNRhygLPtVjAG+WFHFUNQofJXmqS+nMjmQDbnWP06ijK1
6ELNKliiqHE8Kn2cRoSMhKijyObjJaJgYf0CAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBTeC+Qkl0EmAxDVCsmJ+uSp/tetLDAfBgNVHSMEGDAWgBQbLn5i2o8S87sz4LXj
zgAv2ijPJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODE4L0d5NS1ZdHFQRXZPN00tQzE0ODRBTDlvb3p5VS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5NS1ZdHFQRXZPN00tQzE0ODRBTDlv
b3p5VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MTgvR3k1LVl0cVBFdk83TS1DMTQ4NEFMOW9venlVLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBADk/n7Unz+VALTR1JPBXtBA8nzxa4MVD+vBJ43Gd6tVK37FiuScu7jvncv+8
OxOqwViD2UA9/UEf3HyHk27ZlbexVggSnylkqd7OkN/1Hzqt61pBplnaXRxq8X6l
5YapZjH83Lm2l9S5DmUOgCdo8Lo821sbDrhnLpu1xjKwad5zzGY5dSRYFIP1zyBF
n0qP0AT630BzF//gClWmNAu2DODqdHBF+6P+5l9z7Quaz2bQRTnGGuU2lWGB0OZa
93quByysn6tDK1Fv6lL/fZgiDgJCZLUuPHz5YJVhoW6fQQlpTvO6iSDm6wSlbcvX
qL9ScDHqlZ+5oYUi60jjethYe9s=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:56 2026 by rpki-client