
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.mft
File: bh8PSva3iIgm_-9004brZ4kDq90.mft (raw, json)
Hash identifier: 6jnt1I2osW7cb+AV0CTCzHry1nKi1DZ09GzktMD62Qo=
Subject key identifier: 91:B4:EE:22:FE:24:3F:59:9C:D4:A5:D1:3B:FB:32:19:22:5B:1C:DD
Authority key identifier: 6E:1F:0F:4A:F6:B7:88:88:26:FF:EF:74:D3:86:EB:67:89:03:AB:DD
Certificate issuer: /CN=6E1F0F4AF6B7888826FFEF74D386EB678903ABDD
Certificate serial: 07
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bh8PSva3iIgm_-9004brZ4kDq90.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.mft
Manifest number: D0
Signing time: Thu 26 Mar 2026 04:42:27 +0000
Manifest this update: Thu 26 Mar 2026 04:42:27 +0000
Manifest next update: Fri 10 Apr 2026 04:42:27 +0000
Files and hashes: 1: bh8PSva3iIgm_-9004brZ4kDq90.crl (hash: kgzjjrGm1pR67zE3IthAJsO9BJ/hlMAUiK0FTGvUmSc=)
2: dnkW1sayozlEXfZ1VK5Igj9lfxw.roa (hash: Ivlnm/CVKl2K6wS4J+9rk7kSgAoYGt3dGPjTEmX+s4k=)
3: u6NlxOM3IRBSy7FWJGLmuaxCyJY.roa (hash: ofV4ocxsm4+aP9QTgmUQkNVjqDhqGSsNFhqxfkHRSUk=)
4: zQ18fZIQQSNgM-k124yN9jNJafM.roa (hash: L7HZAneTmJDxNn7iQQSgSO+fvDZoz6oo++CsCPFJ0EU=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bh8PSva3iIgm_-9004brZ4kDq90.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E1F0F4AF6B7888826FFEF74D386EB678903ABDD
Validity
Not Before: Mar 15 01:37:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=91B4EE22FE243F599CD4A5D13BFB3219225B1CDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:6c:0e:45:01:d7:95:02:ff:ae:5f:0a:03:
a0:37:37:dc:a6:56:1f:2b:50:9a:4d:88:88:df:1f:
28:c0:bf:ff:70:d4:c7:3c:0e:00:9e:bc:41:a5:14:
ef:42:0a:25:d8:6c:e5:d1:16:f5:3e:23:2d:f2:18:
fd:95:6a:9e:28:95:fd:2b:4f:cc:3c:95:71:8c:32:
1e:ce:5e:de:71:59:24:64:d0:ab:cb:09:c6:42:2a:
e4:3e:4d:5e:67:8e:8d:6a:21:e3:ab:62:5f:3d:d7:
71:d3:61:45:41:40:67:f4:25:1e:92:1b:24:4d:44:
c3:6a:ec:de:89:a7:67:ea:d1:85:ff:91:43:df:83:
79:a7:f0:be:10:e0:b3:59:60:45:41:f0:97:28:7b:
33:01:53:84:7a:99:67:1e:86:05:81:81:2e:98:ab:
0e:05:0c:ba:fa:ba:6b:3c:0f:be:08:04:b6:0d:59:
33:21:91:0d:a7:97:13:1a:bb:66:fb:b8:f6:83:7e:
93:88:ca:67:0b:cc:65:a9:8f:68:6e:d3:06:96:bf:
c3:53:f2:ea:52:a0:a5:c8:82:b6:a3:66:1f:1b:70:
e1:31:c5:55:e0:2c:a7:e5:ff:15:10:79:15:c5:99:
a6:62:28:9d:5b:f9:1e:7f:4e:47:3b:d2:60:2c:b9:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B4:EE:22:FE:24:3F:59:9C:D4:A5:D1:3B:FB:32:19:22:5B:1C:DD
X509v3 Authority Key Identifier:
keyid:6E:1F:0F:4A:F6:B7:88:88:26:FF:EF:74:D3:86:EB:67:89:03:AB:DD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bh8PSva3iIgm_-9004brZ4kDq90.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:a1:c6:3e:5d:e9:7a:38:74:c2:3d:b0:cd:e7:a4:02:ef:d4:
77:f6:ec:f9:a9:09:a3:99:91:93:72:dc:62:22:45:27:d4:39:
d1:c0:f8:cf:46:2b:bb:18:a8:9f:0b:f6:24:9c:ab:ff:7f:6d:
f9:10:9d:10:dc:be:92:70:ac:a3:9f:32:85:e1:c7:b7:b4:d3:
11:07:d7:77:29:41:5b:60:61:cf:74:e9:1b:51:eb:39:ac:e0:
db:63:f9:1d:e5:1e:1f:ec:32:f8:9d:71:fb:ed:4f:83:95:78:
75:b8:be:b2:09:d7:68:b7:19:1b:b3:41:2e:df:01:89:f1:c0:
7c:a0:ec:69:83:46:96:ea:72:e0:c7:c2:08:49:e1:21:14:64:
00:5f:fd:95:2e:f1:da:aa:92:26:c2:a2:ed:91:bb:40:9e:41:
48:c4:c6:be:82:20:f8:e7:d2:bc:78:bf:ff:13:14:0a:0e:14:
e7:64:8a:71:2c:af:98:77:8e:11:00:4d:c8:23:5b:38:47:0b:
60:08:54:55:b1:e2:1f:12:d6:73:69:6d:13:5f:3a:71:22:88:
d6:a5:ae:1d:2b:c5:8d:29:83:31:08:92:dc:fa:d9:4a:a3:a9:
8a:ec:b9:ac:e4:bc:d7:53:67:f0:57:5e:0d:f8:87:51:39:3d:
81:c8:94:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:27:03 2026 by rpki-client