
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
File: lMLwvhgAiadZPZ7TfQToUu1aJZo.mft (raw, json)
Hash identifier: ZJeo8N9h4EisArK5TOp3fq4YLBgSB0p6MaqRuae9Gfk=
Subject key identifier: FB:3E:F1:E1:23:9D:35:C9:89:C7:37:98:3D:97:AE:74:69:53:33:EE
Authority key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
Certificate issuer: /CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Certificate serial: 24
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
Manifest number: 0A6D
Signing time: Tue 07 Apr 2026 14:35:27 +0000
Manifest this update: Tue 07 Apr 2026 14:35:27 +0000
Manifest next update: Wed 22 Apr 2026 14:35:27 +0000
Files and hashes: 1: NtPUy9E9ESQdoTgoun7jTnrp9e0.roa (hash: rOhn/Xa2FnTGgBKyUyc7sfDTsub4/uoxjb1Xn/afJno=)
2: TnqRIdompsF-UKiILnSTRP9WhwU.roa (hash: ZOrg50bunY164hoamkRN+paK+FuL6McRsyq+DP0HB/Q=)
3: UPNgjWcLsnQub0NWgPIez47sPcI.roa (hash: eWtTDUtctIcBquKFs7JV04XfjF/yAMEszz49cX/5YGM=)
4: lMLwvhgAiadZPZ7TfQToUu1aJZo.crl (hash: /Mgxmc46OcbwmPTN8SRqdClwMXYZz1KwbWBGMPzbS3E=)
5: mKoDzEJN4ro4Q3bgjsswSkLK2U4.roa (hash: TXNeJaY4TGn8OHrfcTIV3aly+XE8uagCre1Na6L1f6c=)
6: wFILkJFtZdXVvX7eWtd_umI4b5w.roa (hash: Q/+u4QTAavMJBTluBIpJVifyD5SmkHtlSh4Tzwe3Zdo=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 14:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Validity
Not Before: Mar 31 08:44:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FB3EF1E1239D35C989C737983D97AE74695333EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:ee:a6:91:a4:bc:95:20:f3:44:49:82:58:
d3:2b:a2:3c:84:de:a2:34:f4:8f:30:d3:55:ae:1f:
41:86:ab:d2:55:cb:ea:08:cd:e2:2c:8b:ab:72:29:
13:d0:b3:b8:3f:b3:50:93:b7:6e:d6:db:19:68:f7:
2e:be:88:dc:c7:89:5d:07:df:3f:6d:9b:0b:c0:1a:
ce:85:04:0a:f8:83:4c:41:70:a9:75:4f:ab:f3:75:
47:e3:f8:57:ea:ff:25:12:04:75:c6:f3:86:fd:f3:
08:17:2e:38:21:9f:f3:e4:aa:81:e5:d7:51:3d:42:
85:31:17:b8:ad:0e:36:b7:d4:06:fb:95:2e:ec:84:
48:87:5e:1b:56:f3:9f:34:f1:5f:dd:e2:c6:39:3c:
dc:9c:3d:1f:07:cb:67:b1:71:1b:43:f4:fc:45:f9:
de:d1:e4:97:82:42:d5:a4:4f:d0:a6:af:61:a9:a8:
93:29:63:d0:a7:bd:e5:d5:2d:ce:e0:b1:68:5d:46:
17:eb:31:ed:b8:bc:cf:cd:ea:02:8b:74:45:65:50:
0b:45:1e:57:60:c0:40:47:c5:96:7e:e9:27:7d:11:
61:d7:a2:87:51:21:7f:86:e1:54:8f:1d:9f:dc:be:
28:2f:40:97:6e:28:21:73:c0:50:5d:0c:70:27:a1:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3E:F1:E1:23:9D:35:C9:89:C7:37:98:3D:97:AE:74:69:53:33:EE
X509v3 Authority Key Identifier:
keyid:94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:97:ff:02:48:8c:da:48:6e:5e:a7:85:e6:2a:fc:08:57:3b:
c7:12:9a:9b:cd:2b:2a:4a:db:99:45:7c:de:72:7a:f3:32:d5:
61:9b:db:59:c7:c9:d3:b8:8c:17:04:29:8a:d0:61:71:2c:01:
d5:38:dd:41:ad:67:94:63:a1:b9:9c:c0:36:ce:0b:f6:80:d5:
a5:1d:c6:b9:fc:d7:ba:05:bd:a0:0d:96:90:10:db:1e:d3:42:
8d:83:cf:d7:d7:ac:dd:04:1b:9d:c8:8f:46:f8:af:38:54:fd:
cb:1c:2a:7e:df:4c:0e:74:37:7a:56:a5:a8:72:62:be:33:40:
5b:c6:dc:59:9b:df:8e:fd:90:d3:2e:2e:d8:b5:0b:45:07:4c:
9b:ce:23:67:69:70:a4:84:7f:f5:ab:79:86:bf:48:96:18:b2:
45:24:04:49:fb:47:7d:42:87:7a:be:09:d1:44:ba:42:33:a2:
35:a0:8b:25:cc:86:27:a1:8d:f9:9a:51:34:84:2b:ee:08:3a:
44:2b:24:c6:0c:43:09:5c:cf:34:dd:72:d9:bc:84:b5:8b:be:
97:f2:44:bc:d4:c9:0c:da:72:c9:2e:b3:82:65:3b:d3:8c:e2:
13:8b:74:0d:0e:27:3e:ca:f0:23:4a:a7:9a:0f:71:10:4e:d2:
a9:0e:e0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:11:29 2026 by rpki-client