
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
File: -3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft (raw, json)
Hash identifier: Xic1rbJerFYlRIPK51UZWwXZpr/UJho58DV0y2XMQbo=
Subject key identifier: 06:5D:30:60:CA:C3:BD:BB:DC:7B:6B:B4:08:D6:97:A0:88:D6:41:6F
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Certificate issuer: /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial: 68
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
Manifest number: 1192
Signing time: Tue 27 Oct 2026 23:24:42 +0000
Manifest this update: Tue 27 Oct 2026 23:24:42 +0000
Manifest next update: Thu 26 Nov 2026 23:24:42 +0000
Files and hashes: 1: -3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl (hash: TFROJ9qt6e5y5NOjNW17FWG+AARaEVrSkSZLi7WfLLo=)
2: 1hDWKAZ1pwa6f6yxjNP2WwFr8u0.roa (hash: gvQdyeJ7sCZzndyi/nCi+xNoHjGWAoQtsip4j2SQ7b0=)
3: 6PNmliUMDsCKNA8WO9KEAXI2xl8.roa (hash: cI8hEJKCvF06YqBJGa4h95a9TYWdbVCk3LTp/Mx3nT0=)
4: 9WpUZ5lhpOtfkbU8n_ubNLlQShw.roa (hash: gDUcSf9wsm475YD7A20RJILLPUlqNO95epPT7wVey+Y=)
5: ZjCcGla3cvdKuL3C51y8ms5HrB4.roa (hash: xqmtVSmucjEL4xkdJgKvAzKV/eIK60s8C4v0JNf7HuE=)
6: j6GZqFdtFxz9oyvYKwfHRt290Gw.roa (hash: rk4nXul7VxL7M8u3bFZJFobRfBbm6Gls1Gu0FAg9nG4=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 01:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Validity
Not Before: Oct 15 01:36:27 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=065D3060CAC3BDBBDC7B6BB408D697A088D6416F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:1a:fe:62:99:2a:dc:20:dc:8a:cc:4a:74:
ab:87:bb:b2:df:1d:3e:23:c3:fa:25:09:46:df:5f:
8f:53:45:f3:ff:09:46:cc:33:73:6d:45:79:80:0a:
97:3b:62:1c:c5:0c:a1:5c:36:7c:e4:bc:79:a5:03:
03:5f:1c:bb:d9:77:f5:62:9f:19:8e:ae:f5:af:67:
c3:9b:3a:fe:26:5a:5d:f2:68:85:14:7c:63:9c:ab:
6c:30:00:71:7e:1d:0a:99:21:b5:97:0b:39:12:43:
30:b0:84:3c:34:32:f1:b8:e4:66:da:a5:c7:84:68:
35:84:fa:ec:93:64:03:80:ce:b3:6f:fe:6d:7e:60:
ff:1b:d1:3b:0b:fc:fd:e0:e4:3f:ce:12:83:c9:da:
4d:ac:0c:5e:d4:ee:8f:46:17:97:1e:39:aa:19:7c:
87:2f:37:fb:3a:2f:01:05:68:28:6e:60:51:cd:5f:
da:00:31:de:de:dd:c5:48:f2:7b:0b:0e:20:0d:9d:
19:68:5a:21:c1:c1:2a:13:0e:64:9b:e7:49:c4:df:
6a:60:89:ac:95:3b:2d:12:a6:ea:c5:a5:32:0f:80:
7b:6b:de:48:81:61:4a:83:19:40:fa:85:70:9c:68:
70:08:ea:c6:08:f4:02:1e:d4:17:82:4a:14:73:87:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5D:30:60:CA:C3:BD:BB:DC:7B:6B:B4:08:D6:97:A0:88:D6:41:6F
X509v3 Authority Key Identifier:
keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:bb:07:31:6f:41:39:0d:f3:21:d8:fd:5c:7b:2d:05:20:95:
98:91:1a:a0:38:7e:12:a7:38:c3:a5:12:58:91:1f:36:09:c1:
be:91:a2:ac:a1:06:be:69:12:73:e0:d5:2d:33:20:98:f5:ce:
3f:7a:ca:ba:e3:da:28:aa:3b:d8:31:0f:e1:d2:b9:5b:dd:67:
af:0e:4a:cc:0f:6c:65:65:8e:a3:12:fe:f1:d6:46:0b:87:b7:
68:6d:ac:4b:0b:93:d2:a9:6b:ed:de:84:5f:d3:5d:8f:e0:f1:
48:20:b5:78:eb:8f:00:82:81:87:e6:e7:c8:44:3c:5b:9b:5c:
08:0f:13:3c:5c:78:cd:c3:71:bb:ce:88:f3:00:eb:ae:70:fc:
bc:63:97:69:28:1f:f2:a5:6b:e3:19:33:26:f9:58:0d:55:e5:
d0:10:c8:31:3e:ea:d3:6f:36:30:0c:aa:e0:1e:af:2f:16:8f:
18:01:c8:1b:e4:6b:0f:e8:1c:6f:98:62:fe:e8:82:9e:7f:cd:
05:79:4f:f4:7f:bf:54:c7:10:59:1b:b0:41:a7:d1:02:cc:57:
50:ec:1f:2c:d2:f1:5c:1a:b2:57:8b:ac:13:cb:ac:c7:17:48:
56:6a:8c:8a:4f:40:ce:13:f3:18:b6:80:6a:7c:a2:7d:97:bd:
fb:31:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:40:10 2026 by rpki-client