
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.mft
File: 7EtcAqQugt2tObb65uyg8z74ym0.mft (raw, json)
Hash identifier: /FpauOsbtREMbEe91bwLM3IB87L7XEWiid1nxDon8cs=
Subject key identifier: 48:9D:9B:D3:7C:12:7B:D5:E2:59:84:23:3B:C0:E7:1E:1F:C4:A3:24
Authority key identifier: EC:4B:5C:02:A4:2E:82:DD:AD:39:B6:FA:E6:EC:A0:F3:3E:F8:CA:6D
Certificate issuer: /CN=EC4B5C02A42E82DDAD39B6FAE6ECA0F33EF8CA6D
Certificate serial: 34
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.mft
Manifest number: 0C49
Signing time: Tue 07 Apr 2026 14:17:03 +0000
Manifest this update: Tue 07 Apr 2026 14:17:03 +0000
Manifest next update: Wed 22 Apr 2026 14:17:03 +0000
Files and hashes: 1: 2JDI7M16juvNGqtInQiPC1imQTQ.roa (hash: CC9FRxOzbIJcteRi4guOh6/dw7ehlJnFsSHiyRvJS74=)
2: 7EtcAqQugt2tObb65uyg8z74ym0.crl (hash: wfuA4WIkltOQBtIaKZRLGGuwCNYhcdkddu9cBWTHC2I=)
3: ocQfw1WIgVvMJHT0D5QXwoHQzAE.roa (hash: tuIJm0NVsJFf0LH01nTERbxq+JmUX5Wa9xKqVWuVC5g=)
4: z8zc6FILGXhHspYrYvjiUPHwVb4.roa (hash: +8NvAax1U+qZ1aht9gFQ3pXNGzKVfxOyw8atyXoxe5c=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC4B5C02A42E82DDAD39B6FAE6ECA0F33EF8CA6D
Validity
Not Before: Mar 31 08:35:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=489D9BD37C127BD5E25984233BC0E71E1FC4A324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:b8:f4:27:3a:33:8d:7b:db:93:23:71:cc:
ac:92:4a:43:c5:2e:e7:26:bc:5f:4b:24:51:d3:e4:
cb:e8:92:48:71:c4:90:cd:a3:d1:7f:f2:ef:c7:5a:
d0:f8:f3:de:2d:bd:f6:81:73:f8:5a:10:4f:df:29:
39:25:c8:39:3d:cb:ac:f6:8e:c1:60:d7:ca:50:32:
1f:45:aa:b4:76:d7:4d:eb:ca:dc:cb:d1:06:32:23:
80:fe:16:92:27:fd:f2:81:ce:ac:15:35:6a:b3:d4:
57:13:53:3d:a9:c4:cd:4e:1a:9f:9e:9e:05:3d:65:
18:82:d3:6a:90:ba:8f:3b:20:30:48:52:6d:fd:42:
2a:e9:82:63:9a:7d:07:fe:20:fc:b6:e9:69:7c:ef:
4b:56:e6:f7:03:b0:3a:87:c7:7b:55:7d:02:70:59:
6d:cb:b2:46:cd:0a:3b:34:51:3a:00:65:2e:ad:81:
e5:d8:02:53:38:c2:b9:42:10:83:85:18:48:5a:1b:
bf:d2:1c:2e:c4:a7:a2:88:3d:af:99:b5:8d:6e:97:
3c:e9:20:0c:86:33:a2:5a:1f:82:8b:85:3e:bc:2d:
5e:7b:6a:22:74:c7:37:27:9a:ed:f6:2a:4b:73:6a:
95:80:1c:ac:5f:53:6c:33:9e:21:72:6b:90:62:0b:
ba:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9D:9B:D3:7C:12:7B:D5:E2:59:84:23:3B:C0:E7:1E:1F:C4:A3:24
X509v3 Authority Key Identifier:
keyid:EC:4B:5C:02:A4:2E:82:DD:AD:39:B6:FA:E6:EC:A0:F3:3E:F8:CA:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:3e:6f:79:95:a0:8c:11:96:7c:34:e3:df:11:17:73:a9:8b:
74:00:39:42:a7:fd:65:c9:48:0a:a4:11:c8:d3:04:19:4f:ab:
ca:e1:94:f5:28:50:fb:26:3a:eb:50:98:29:a1:93:0c:27:22:
f2:9a:43:7d:ba:5c:d7:82:d8:bc:05:b1:3b:03:44:2f:af:63:
c1:1d:f5:03:dd:2d:35:05:ea:d9:42:e0:a1:7c:80:b9:b7:11:
61:98:d5:d3:60:3f:2f:51:ad:01:59:30:c3:4e:ed:e0:da:32:
92:38:9c:3c:8b:02:b7:ce:b5:a1:a1:57:79:03:be:7c:fc:02:
00:fd:c1:88:27:e6:02:d9:48:40:db:08:67:97:0a:57:e3:29:
48:27:f1:14:04:ec:fd:01:e0:6d:df:8d:1f:42:b9:97:b8:4f:
d3:3f:2c:66:9c:51:d0:91:44:08:36:a8:c4:d5:39:07:17:de:
0b:52:93:4a:36:9c:13:85:27:82:e7:6c:c2:7d:e0:3f:b8:a7:
4f:68:13:6d:95:3e:c7:a5:06:56:e5:37:d0:ba:27:25:0b:27:
d2:16:63:31:c8:f4:fe:1b:c6:bc:cc:a2:55:ba:72:98:ed:92:
17:22:2f:84:6e:f6:46:dd:d8:26:17:66:9e:6a:0d:fa:8b:1b:
fb:b3:a1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:13:52 2026 by rpki-client