
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft
File: VfNagqI2vO2BkIjU2QiH4Lllx88.mft (raw, json)
Hash identifier: sOciXhek9kek2ir1rRiLSmL7fDzhNkQ95rgqLRf+qak=
Subject key identifier: A4:7E:F6:3E:24:A9:44:27:ED:F9:A5:17:CE:81:45:B4:90:A7:D0:C2
Authority key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF
Certificate issuer: /CN=55F35A82A236BCED819088D4D90887E0B965C7CF
Certificate serial: 2A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft
Manifest number: 0BE5
Signing time: Thu 26 Mar 2026 03:39:33 +0000
Manifest this update: Thu 26 Mar 2026 03:39:33 +0000
Manifest next update: Fri 10 Apr 2026 03:39:33 +0000
Files and hashes: 1: 7ErM9mmOdy6dP7tyP37_8jpg54M.roa (hash: gDcVga84H0UmRKDH4QVAqh7GFzlN9+28bjA7izWN2uc=)
2: EaNNIuH7j3cY9d8s5Ba-dHK7eA4.roa (hash: jiTVBGaOaWKjiCnClxwWhuyNmDOH+RmfDb8I1O61QT4=)
3: VfNagqI2vO2BkIjU2QiH4Lllx88.crl (hash: fpFohSvZKKL+VT9Kt4pNNbpCsnP40kMoINPRJA8L7wU=)
4: gRxZJM-Zt_jPWmRGfJkWgiM7Vow.roa (hash: hCm8Rth56oTd+KYSIYkn4jNdyFJmWrtwpNVE9PQsP64=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55F35A82A236BCED819088D4D90887E0B965C7CF
Validity
Not Before: Mar 15 01:45:23 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A47EF63E24A94427EDF9A517CE8145B490A7D0C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:8f:50:60:bf:c4:49:78:0d:d0:49:b4:bf:
6c:e1:87:ea:fe:90:ba:83:f3:ee:ce:31:d7:77:5d:
09:65:0e:bb:bf:16:d8:d8:e2:3d:5f:55:d4:44:9d:
3e:d3:2e:66:9c:3a:2e:6c:b8:26:22:7d:f5:6b:03:
2d:f4:46:dd:33:32:03:09:23:1d:a5:08:82:78:8e:
56:88:0f:6d:25:53:8b:25:19:e5:16:fa:94:00:24:
9a:b9:e7:06:2e:49:06:7a:42:d7:43:af:2a:2e:62:
3a:48:d9:55:03:ce:82:3a:25:1c:e8:25:30:b7:3f:
fa:0d:0e:fe:88:2d:9a:13:22:46:dc:c6:df:f7:ab:
92:41:32:86:ca:eb:fe:f9:34:3f:43:56:d2:2d:b2:
97:e3:28:14:b3:f3:a5:e4:1f:bd:a1:41:a9:b6:3b:
0d:cb:c9:4d:a0:f1:34:64:cf:6f:07:11:af:ad:df:
e8:05:c5:31:fc:3b:b0:2b:cd:d5:f2:ad:8c:02:68:
44:e7:0b:3c:04:d3:03:e4:1e:89:f4:3d:9a:55:c0:
cd:fc:a2:99:94:d0:ec:8e:3e:27:f7:f2:4a:12:1e:
ab:4d:a1:dc:42:80:5e:f9:18:f8:40:4f:cc:01:d5:
8d:59:12:cf:e5:62:90:71:6c:25:ab:46:6e:84:ec:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7E:F6:3E:24:A9:44:27:ED:F9:A5:17:CE:81:45:B4:90:A7:D0:C2
X509v3 Authority Key Identifier:
keyid:55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:09:26:84:6f:ed:7d:a9:8f:4e:75:f3:da:77:56:c4:ea:4b:
b5:8d:ad:47:58:a1:77:57:75:01:cc:5f:a1:c7:f7:23:1d:d5:
ed:07:04:0d:cd:a9:f3:de:77:99:bb:85:b3:80:14:8a:86:16:
8c:f7:6e:16:c4:c7:68:a1:af:c0:2f:03:ff:77:8c:d4:f7:39:
c5:2d:d4:e5:ae:2b:7c:06:a8:3a:96:e9:5e:68:26:8f:bb:7a:
9f:b7:bd:4f:70:31:37:6c:d6:e0:8f:da:30:81:ad:31:3f:82:
ac:9d:c6:d1:e6:d0:3f:b6:5f:0d:d8:72:f7:39:d9:3e:ba:5a:
d1:d8:c2:87:13:19:74:bb:5c:3b:6e:32:bb:e6:7a:74:99:80:
55:34:47:df:01:ff:7c:51:3f:58:96:4f:ce:50:f4:a7:61:a6:
d1:e8:46:41:28:90:ea:89:dc:b0:be:96:45:be:c9:95:5d:38:
73:0e:d6:bb:90:53:da:84:02:d3:3b:98:ee:fa:74:31:b0:bb:
e2:7c:de:73:38:7b:d6:95:a2:cc:d6:ac:64:6c:3c:45:07:0d:
24:1b:b8:b2:fd:9c:64:b9:3b:99:e6:99:cc:a2:69:c9:62:49:
5e:32:25:31:a8:7e:3b:2c:84:cc:76:4d:84:71:81:6a:17:af:
ef:78:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:16:49 2026 by rpki-client