
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
File: 4FbQUB1DDOD88NsGdbr8kLBdm_U.mft (raw, json)
Hash identifier: UfRBdUe1ke/iWk/IL4SpN54fOnznx9UH2FB/VwCO0wU=
Subject key identifier: 12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial: 96
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
Manifest number: 1BA2
Signing time: Tue 21 Jul 2026 18:33:16 +0000
Manifest this update: Tue 21 Jul 2026 18:33:16 +0000
Manifest next update: Thu 20 Aug 2026 18:33:16 +0000
Files and hashes: 1: 4FbQUB1DDOD88NsGdbr8kLBdm_U.crl (hash: ckZjHNJY4Cmya/WnXiEHki4/9YTT6Hw4H82ejctSZi4=)
2: Gvlzwd_Hfvi82DEETc8uwGEog58.roa (hash: UyZe/Nc8E1IqGyekSsAzcqDuR1QemYq1qobaYZOB43Y=)
3: Ijq7PDY82f_y4TP_q8Y_ZqtNVjQ.roa (hash: qkwBxPhBQpUi0aQrUMTK647WjicWlVGg9T+3CEYYrGI=)
4: NzSFNy5lYTL4ZmAj_RBqwz8GsZM.roa (hash: QWvSGl715icJLrF4+r2RKCSeS0K7+urwqMXIGN06Uxw=)
5: U2ZBKjpm4WHND-Jvj0s8Oe6-8tI.roa (hash: cSb9+N+Eo6yk2/WqUfBt4oJq18PC6OFUJ+GyxFm6KBA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Validity
Not Before: Jul 15 01:31:53 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=1237FA2C47A961C2F966F3B20BB09D2477AEF307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:1c:dd:e1:32:ba:b9:74:3f:c7:64:44:c7:
56:ee:be:36:7a:80:45:63:f4:2b:18:6d:35:9b:1b:
62:c6:04:b5:ce:f8:53:1b:26:fc:cd:ac:1f:6c:05:
53:4d:b4:c4:57:10:0c:0c:f6:b4:c1:69:6d:69:3e:
2b:3d:f2:d8:ae:1b:c5:85:1b:3d:29:da:19:da:f7:
08:60:29:81:db:3c:a4:92:82:9c:f1:2e:19:ce:0c:
71:ab:07:60:dd:f5:84:93:95:1d:c3:72:ab:c0:0b:
bd:49:06:9b:06:cd:f2:2e:3f:12:da:33:54:97:ac:
57:d9:a1:d5:59:27:2c:88:b4:f9:04:17:3d:4e:8b:
ee:29:6a:43:59:a1:1b:34:84:1c:0b:ab:f8:2d:be:
a0:42:6b:4c:50:f7:95:7c:dc:05:12:64:12:17:c4:
97:a9:b2:1f:ee:f6:e8:89:81:8c:a1:44:2e:d2:a5:
83:b1:af:ba:3e:c2:3b:61:10:be:87:9c:e0:66:a3:
0a:c1:61:d3:84:79:19:f7:7c:82:bc:ed:5a:9e:63:
9e:81:d9:8e:b5:10:e0:b2:c9:e5:14:a8:a8:ed:ca:
1d:71:41:be:7d:97:a2:c2:3a:7a:36:e5:ff:87:71:
2f:46:1b:39:39:72:81:3d:01:18:af:40:4e:cd:dc:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07
X509v3 Authority Key Identifier:
keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:0e:26:0e:7d:e0:32:3b:49:fc:a6:a5:30:ae:5c:b2:fc:41:
46:bc:48:35:6f:d5:de:1a:aa:43:68:f5:ad:59:fb:67:b9:92:
f0:a5:5d:10:5f:67:9a:53:d1:70:0f:fc:32:39:aa:88:aa:46:
4c:c2:9e:b8:b9:22:62:cb:f3:01:79:04:80:38:1f:76:dc:ee:
ef:6a:6e:98:75:8c:0d:b1:e7:29:aa:3f:65:8f:79:83:b8:36:
8e:53:1a:23:3c:3d:11:7e:6f:c2:06:0d:b7:e6:cc:e5:e9:70:
ba:55:46:06:ca:9c:40:19:69:a1:a4:67:2d:fc:3e:44:1c:0b:
67:9e:7b:c5:44:c6:8c:d2:98:29:b4:28:88:7f:44:97:ee:c1:
d1:d8:59:a7:6c:9b:80:90:77:39:95:e0:d4:29:49:ff:7e:8a:
9e:4c:d8:1b:d8:0e:3b:1d:50:c4:11:de:9e:1f:6c:60:40:ea:
49:c9:73:51:bd:1e:23:31:ea:76:3a:3b:58:7b:c6:8f:ac:42:
03:d9:0a:af:5d:d3:3c:b4:a7:97:bd:e7:56:81:97:9c:a8:ca:
dd:c0:04:49:98:73:7d:42:0e:f6:27:d4:3f:26:86:d1:5d:c4:
03:f6:2f:4a:eb:29:59:68:59:fe:e9:46:ce:0d:6c:2b:c7:22:
73:e0:d6:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:14:36 2026 by rpki-client