
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
File: I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft (raw, json)
Hash identifier: Z0n6MsQiBhpgiOjSQItQTLBpZy16fujrTfverbOvvzw=
Subject key identifier: ED:E3:76:CC:D5:7F:D3:28:8D:9F:74:AA:EF:09:F4:76:3D:4F:75:AC
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Certificate issuer: /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial: 43
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
Manifest number: 0C59
Signing time: Tue 07 Apr 2026 14:08:52 +0000
Manifest this update: Tue 07 Apr 2026 14:08:52 +0000
Manifest next update: Wed 22 Apr 2026 14:08:52 +0000
Files and hashes: 1: 9_VXatsk8sE58JrqjYQRkk5bYO8.roa (hash: PV3DrXuoBLbhNAkBpD4/nc5P9Ao6UNX+C7Ixo8Xj3bk=)
2: I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl (hash: DxlGsMkYquC2xgrKr/ujKh/vJEx/qETtMHNj2od2AHE=)
3: LaWA04ddbP_pz-OgoAPs5LuLyT0.roa (hash: gMZnRxYTs5woAjJSR2uP9hQcnRk5wTzHyXCGBvYe2VE=)
4: P7YnGxmL_Emd9zetq0ELA8lyVr4.roa (hash: PfQeDOV2MTUTU+jVtD7vSdrBSArqL9E1LWXx41pSRO4=)
5: Vn_EN-HiOgU4yCueybNZBruFgSc.roa (hash: dhYAf3jQBj2LJ8E8ZkDPXMAgwh4WTIw4RG3qd2+Iwq4=)
6: WrMft5e4PnPgMY7N6cMZBaUMZ4c.roa (hash: xNwv/t3ZhrBuwnOEPs1cLgFUpEM9FhAeFNEugYAPzBk=)
7: w0T4eyQO7Yiu7XHBRl3zS9JPAXc.roa (hash: J3AKkOSall1VthYvbjdBmOey3tnE15sBqE3wR81j8DE=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 14:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Validity
Not Before: Mar 31 08:33:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=EDE376CCD57FD3288D9F74AAEF09F4763D4F75AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:ec:4f:b6:d1:d7:30:6d:f3:dd:4b:58:48:
bc:e5:e1:3b:1d:b5:2d:51:c5:88:5e:43:9c:ec:3b:
b5:90:fc:83:14:cc:b1:d5:fc:45:25:ed:95:60:bd:
8f:64:9a:ec:99:b3:11:e2:ac:ac:77:55:eb:50:a2:
c8:41:4d:6d:b3:78:b2:a3:09:8e:81:8b:03:07:18:
f0:b3:2b:f9:93:5b:20:a8:1e:bd:d5:c2:e7:ac:67:
a2:0b:ea:e7:1c:98:c9:1b:99:77:e0:17:d4:3b:90:
64:b9:f7:ef:b1:9b:48:63:ed:c1:b5:a8:fb:a2:90:
26:5a:63:50:fb:05:d8:33:81:b1:d9:1d:02:67:08:
cb:61:25:e4:60:eb:bc:93:5b:22:48:f0:bc:14:9e:
4e:e9:62:ea:86:77:e2:25:42:43:d9:a5:28:99:58:
59:19:c7:15:47:43:f8:fc:d8:0b:84:36:c0:33:14:
33:67:c2:ff:cd:07:8e:91:76:24:df:03:02:8b:14:
a3:b0:e9:77:b5:8f:4d:c8:5a:ab:5a:ca:7a:8d:1c:
26:74:23:c1:50:d7:b6:18:ae:2f:4b:cd:01:61:7e:
60:33:0b:2c:3f:2c:95:8c:24:aa:1d:f8:54:91:45:
03:2b:c1:77:07:61:cc:04:06:8b:5d:47:de:22:f0:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E3:76:CC:D5:7F:D3:28:8D:9F:74:AA:EF:09:F4:76:3D:4F:75:AC
X509v3 Authority Key Identifier:
keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:da:36:51:35:c8:c7:f3:e9:b2:d4:da:b1:c0:0b:73:09:52:
22:46:38:8b:db:d6:96:6c:3e:52:1e:5f:81:01:29:f5:9e:9d:
ac:eb:2f:95:17:a2:d1:2f:23:77:11:2e:4f:9e:59:81:6b:7b:
b4:ae:cc:7a:61:59:42:3e:9e:68:76:99:b1:51:01:72:87:39:
93:b3:74:ed:fd:18:91:23:aa:37:ad:42:41:5c:b5:2b:14:89:
2e:1d:8f:e9:c4:b8:a2:23:84:2d:85:60:8c:40:c1:af:be:72:
5b:b4:9f:7b:c3:d0:fd:bb:2e:1c:3c:c2:33:c4:e1:14:47:3c:
9e:23:28:37:aa:df:28:8b:a0:b8:eb:32:2c:ef:4d:a0:cd:e2:
be:0f:03:1e:48:e3:61:c7:8a:31:9d:6a:d6:16:8a:d9:81:57:
72:18:2c:0f:50:41:58:e4:d8:2a:c7:87:55:da:12:fc:b4:40:
6d:06:74:9b:d0:a1:e0:16:38:ad:29:5e:18:fd:61:e6:b0:35:
3d:ec:56:7f:74:3a:f1:bb:4f:bd:e4:7d:ae:e1:3c:75:88:98:
70:59:df:db:c3:5f:2d:11:a0:df:26:33:84:1f:7e:29:d3:36:
2c:f3:b9:1c:c7:20:1e:e1:4c:55:bd:e0:fd:ff:1b:28:4e:a6:
6d:3e:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:10:30 2026 by rpki-client