
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft
File: mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft (raw, json)
Hash identifier: /RpTzxfjQplp25es3nrtCcVvTYlaouEG7Seqx2tvkJg=
Subject key identifier: 25:57:C2:B6:7D:5C:EC:87:35:6B:C7:AD:6F:62:9B:95:BE:83:67:AC
Authority key identifier: 98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0
Certificate issuer: /CN=989E82672C98A627120ABA72DEBEBE22015849A0
Certificate serial: 30
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft
Manifest number: 0C00
Signing time: Thu 26 Mar 2026 09:02:39 +0000
Manifest this update: Thu 26 Mar 2026 09:02:39 +0000
Manifest next update: Fri 10 Apr 2026 09:02:39 +0000
Files and hashes: 1: WOopuP15FTh9r1rDaVlUvxMZIIY.roa (hash: gKvquzzVzESdr8rYj5LtmUYma7krRlcFEVVjEjkRgNo=)
2: awg6oO-tZPD2KpSJvg1ONGDDjKY.roa (hash: E6EwurajY37w6lrn4C+5hZ51lK8KeatST+HRcbAY++U=)
3: lMwmHsS4T59BlPPacH6GaaSeONQ.roa (hash: g2jor3C5pEAMWvL7YlMcHvIKUadMfgzD+sB8f9EVUSY=)
4: mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl (hash: 38c4KA2uxHekdwuDkymhGs9z9IQ7FoGQki9ZHAs3RfE=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=989E82672C98A627120ABA72DEBEBE22015849A0
Validity
Not Before: Mar 15 01:41:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2557C2B67D5CEC87356BC7AD6F629B95BE8367AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:1e:da:87:2a:57:8d:99:1e:4a:30:7b:f2:
7e:15:f7:e0:68:3f:bf:c0:a7:7e:44:35:bb:7d:d3:
da:fc:e9:44:c5:90:ed:49:8a:bb:6f:4d:58:e2:55:
4f:72:86:bf:51:97:af:b1:96:39:07:28:aa:9d:30:
1f:01:fd:98:f7:a1:16:8f:1e:b1:b9:1e:67:2f:7f:
89:a3:48:34:20:bf:7f:69:fb:6f:b5:fe:96:9b:8b:
6d:92:ab:ce:02:48:bf:09:3f:6b:e9:33:26:c8:18:
0c:83:24:70:dd:be:eb:63:7f:ab:b5:b6:1a:2b:ff:
cf:6e:bd:bc:68:6f:d6:1d:eb:fe:40:27:77:a1:d6:
1d:2b:a0:17:f8:12:8c:e8:01:c1:c5:5a:61:64:e0:
0e:8e:15:de:ae:a6:ee:16:9d:ed:d1:02:3b:43:19:
9f:12:78:1f:93:1b:3a:80:52:81:a0:3b:78:c6:57:
2a:7f:d9:af:a6:0b:68:9a:5d:d4:f7:4c:d4:98:9e:
16:b9:b3:4d:56:91:a4:d9:00:4f:cb:17:b3:ec:9d:
10:f1:ab:b2:88:fc:74:d9:47:22:98:57:ec:5b:f6:
81:a6:b9:96:39:25:aa:8d:3c:1e:20:54:be:38:b5:
58:bb:7e:ce:b6:0e:85:74:56:32:15:47:ad:f0:03:
00:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:57:C2:B6:7D:5C:EC:87:35:6B:C7:AD:6F:62:9B:95:BE:83:67:AC
X509v3 Authority Key Identifier:
keyid:98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:fe:a8:fb:ba:bb:c2:85:c6:5c:1c:0d:d0:f9:ad:58:d2:2e:
10:f4:bd:53:c3:5d:f3:a4:31:85:ee:1f:95:d3:ac:ac:1b:e6:
e4:cc:21:9a:93:ae:8d:5f:c2:d8:97:69:b9:1f:f0:ad:40:e5:
4d:c1:bb:6b:6f:17:99:45:54:bd:57:2b:11:98:4c:7c:3c:cd:
19:18:bc:74:dd:c1:f2:9f:79:ff:1d:97:ea:59:d4:cb:55:aa:
98:89:aa:04:07:37:0d:1b:d9:b2:ab:d6:b8:c4:fc:a8:96:a3:
d6:6e:aa:52:86:dd:7d:a3:21:88:d0:19:da:91:05:58:ec:b6:
bb:3e:bf:bb:f2:ee:98:19:15:02:ec:6c:57:bc:43:87:da:89:
f1:94:d5:8e:ce:67:3c:26:f4:ba:9f:0c:ad:21:e6:49:55:44:
9a:ef:fb:c3:9c:1d:6a:b9:36:43:7d:9a:eb:13:20:54:6c:1b:
56:62:15:cd:10:7e:84:33:29:54:0f:a5:45:60:5c:64:62:a0:
e1:35:2e:53:5c:69:a7:05:05:5b:2e:78:bd:2c:a4:dc:2e:a4:
5c:43:95:8e:77:0a:d0:82:05:6a:97:72:e7:d0:ff:d6:c5:43:
8a:f9:6a:50:91:93:77:ce:31:e3:47:d1:84:c2:1d:a3:28:e1:
07:d7:4c:64
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5ODlF
ODI2NzJDOThBNjI3MTIwQUJBNzJERUJFQkUyMjAxNTg0OUEwMB4XDTI2MDMxNTAx
NDEzM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjU1N0MyQjY3RDVDRUM4
NzM1NkJDN0FENkY2MjlCOTVCRTgzNjdBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMKzHtqHKleNmR5KMHvyfhX34Gg/v8CnfkQ1u33T2vzpRMWQ7UmK
u29NWOJVT3KGv1GXr7GWOQcoqp0wHwH9mPehFo8esbkeZy9/iaNINCC/f2n7b7X+
lpuLbZKrzgJIvwk/a+kzJsgYDIMkcN2+62N/q7W2Giv/z269vGhv1h3r/kAnd6HW
HSugF/gSjOgBwcVaYWTgDo4V3q6m7had7dECO0MZnxJ4H5MbOoBSgaA7eMZXKn/Z
r6YLaJpd1PdM1JieFrmzTVaRpNkAT8sXs+ydEPGrsoj8dNlHIphX7Fv2gaa5ljkl
qo08HiBUvji1WLt+zrYOhXRWMhVHrfADAGECAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBQlV8K2fVzshzVrx61vYpuVvoNnrDAfBgNVHSMEGDAWgBSYnoJnLJimJxIKunLe
vr4iAVhJoDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTY1L21KNkNaeXlZcGljU0NycHkzcjYtSWdGWVNhQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21KNkNaeXlZcGljU0NycHkzcjYtSWdG
WVNhQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NjUvbUo2Q1p5eVlwaWNTQ3JweTNyNi1JZ0ZZU2FBLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGb+qPu6u8KFxlwcDdD5rVjSLhD0vVPDXfOkMYXuH5XTrKwb5uTMIZqTro1f
wtiXabkf8K1A5U3Bu2tvF5lFVL1XKxGYTHw8zRkYvHTdwfKfef8dl+pZ1MtVqpiJ
qgQHNw0b2bKr1rjE/KiWo9ZuqlKG3X2jIYjQGdqRBVjstrs+v7vy7pgZFQLsbFe8
Q4faifGU1Y7OZzwm9LqfDK0h5klVRJrv+8OcHWq5NkN9musTIFRsG1ZiFc0QfoQz
KVQPpUVgXGRioOE1LlNcaacFBVsueL0spNwupFxDlY53CtCCBWqXcufQ/9bFQ4r5
alCRk3fOMeNH0YTCHaMo4QfXTGQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:20:57 2026 by rpki-client