
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.mft
File: fqcwHfzYhUgbrs2du-yKFOmBV9k.mft (raw, json)
Hash identifier: jpKzhmuSuQvEegvQSszZ8DGxHf+Ia/QkLahpM30Oou4=
Subject key identifier: 80:D8:CA:E9:97:3F:3C:38:03:F0:49:56:35:60:CF:F4:FA:71:49:C3
Authority key identifier: 7E:A7:30:1D:FC:D8:85:48:1B:AE:CD:9D:BB:EC:8A:14:E9:81:57:D9
Certificate issuer: /CN=7EA7301DFCD885481BAECD9DBBEC8A14E98157D9
Certificate serial: 56
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.mft
Manifest number: 0CEF
Signing time: Tue 07 Apr 2026 13:20:12 +0000
Manifest this update: Tue 07 Apr 2026 13:20:12 +0000
Manifest next update: Wed 22 Apr 2026 13:20:12 +0000
Files and hashes: 1: 5xCziJNiHsCa0Yp9NkyzWxZAmZU.roa (hash: n+StRgoJxNUIjQHw5VOcXGaZZnggppmAKwM7DPHLVNY=)
2: 7M53IR7jswRd2bqyCE5evc7FlyA.roa (hash: 4t7Ch5vLgXVKy4urROS4s+wk9w0ZcVOV8PNTAMEEiU4=)
3: 8DFLF1CGPsYh1KUBV_SyXErAmIE.roa (hash: gKG9cMAE6Li5WXD30KDv9vhYhtnsc7LDro+eVvP47+M=)
4: fqcwHfzYhUgbrs2du-yKFOmBV9k.crl (hash: hZeczTs8RdYGca6pp77La6mzlqZtv+epNEeJ4AeJCDQ=)
5: uTUoIZni_5e8dOhFZHeyC7J-D4E.roa (hash: mnolcNCYH3zAercXsszLiRJakLlgQedJ8pNQ7+dvexc=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 14:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EA7301DFCD885481BAECD9DBBEC8A14E98157D9
Validity
Not Before: Mar 31 07:50:00 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=80D8CAE9973F3C3803F049563560CFF4FA7149C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:fa:d5:2d:97:85:0f:ba:b2:c9:6d:86:c6:
d1:30:bc:8e:f0:9b:5c:e2:a2:dd:c2:f2:71:6b:63:
25:5d:d5:4d:9c:0f:19:02:7d:fb:4a:37:3e:6c:e4:
ef:79:2a:68:24:da:30:c2:9f:7e:fe:65:25:85:d0:
53:af:10:1f:57:20:84:98:4d:5c:e0:2b:41:93:d2:
2c:d3:2c:81:e6:b4:75:e3:e0:97:f0:7b:45:87:36:
f5:68:2c:5b:64:b6:c9:0a:4a:a4:45:19:f2:3c:0f:
ba:f7:b3:1c:74:44:da:78:82:91:87:44:9f:8a:f3:
22:36:7a:fb:e2:36:86:4b:d5:b5:b0:c4:97:6d:af:
5a:b1:14:ba:43:f8:da:f0:bc:e2:f6:5f:e0:fe:95:
23:3c:fd:46:8f:28:59:29:96:78:38:08:4c:9b:4c:
68:02:40:3a:86:a4:c3:3d:e7:a2:8b:8f:97:e9:7f:
6e:91:14:d7:aa:d4:13:74:4a:b8:98:f6:a1:c9:19:
b6:f3:04:fc:55:d0:d9:33:f0:0d:48:25:f2:71:fd:
5a:af:30:6c:60:4f:4b:5d:0d:9e:07:aa:53:88:32:
a6:19:cd:f0:47:52:54:7d:b9:7e:87:57:73:a9:4f:
14:99:cf:e8:94:51:27:5c:21:07:3c:0a:3b:e0:52:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D8:CA:E9:97:3F:3C:38:03:F0:49:56:35:60:CF:F4:FA:71:49:C3
X509v3 Authority Key Identifier:
keyid:7E:A7:30:1D:FC:D8:85:48:1B:AE:CD:9D:BB:EC:8A:14:E9:81:57:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:b5:e4:c6:de:1e:d9:97:ab:c1:f5:6c:88:f5:3d:f8:15:6d:
44:0f:56:eb:cd:25:16:cc:2b:d8:14:d9:57:fb:c5:41:3f:b0:
17:dd:76:49:03:0a:29:d3:fb:b1:76:57:04:1c:b4:ae:0e:ec:
48:ca:c4:18:85:d3:58:28:7d:d1:22:d4:52:e0:27:ae:a1:e7:
49:23:20:82:45:a2:41:14:c6:83:af:1b:86:fd:f3:b3:d0:09:
ef:24:ae:d6:fd:d5:f4:18:e0:1c:12:2d:e3:7a:f4:92:3e:36:
3d:cb:f4:a0:f9:43:93:27:49:7e:ba:42:54:2b:27:23:4a:d4:
71:2d:f9:fa:e8:87:f2:b3:86:04:5f:b5:ac:90:b8:ce:e9:e1:
3a:d8:8f:97:17:0e:2c:cc:5f:a4:90:46:fa:16:29:5a:ba:da:
20:22:85:59:0e:63:48:77:e4:59:42:a3:65:0f:a0:19:13:2d:
62:20:22:4f:b6:f9:fd:14:6f:c8:e9:2b:c2:dc:65:82:aa:84:
ba:64:00:54:db:66:52:20:94:6f:3d:86:db:fa:4b:cd:87:c2:
ca:f6:ef:fb:a1:16:b9:2f:70:07:23:e1:d7:8c:d0:28:06:a6:
38:2e:2a:8f:f0:ed:95:d8:d6:32:0b:f9:f3:b4:b0:98:58:8b:
70:f5:57:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:12:55 2026 by rpki-client