
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
File: JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft (raw, json)
Hash identifier: 9kKz1CXBAGECR4egC5b4MwXSNCdKnsS86xkCGoXBEFw=
Subject key identifier: 31:50:38:AA:C2:4C:17:54:9A:82:BA:AD:E2:AF:44:63:12:D6:F6:D2
Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
Certificate issuer: /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Certificate serial: 40
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
Manifest number: 0D41
Signing time: Fri 15 May 2026 09:48:24 +0000
Manifest this update: Fri 15 May 2026 09:48:24 +0000
Manifest next update: Sat 30 May 2026 09:48:24 +0000
Files and hashes: 1: 7Cf9VbqlI6vc0h2UgFjGMVZtHYo.roa (hash: DyYom2bshDmZ38vFBUag1xdUtfw2yHSB2ZZ7QJXMHmk=)
2: 93hIVtxcpKKWPj2lwqKuHaZgMZk.roa (hash: lgu9fauSKYkCue9/e7cEdwN1D4fvJP2pfnU1yl8E0F4=)
3: JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl (hash: P9iUYgAt8utdr90sLUett8iEmd++3/qLjmed2P4oC38=)
4: MyyFqln-P5CAFgV1p7Bxsoe04oE.roa (hash: ElDW+NpP9+B9wTXtRr0/WSbsSUpOGxnj97pk98UlEVk=)
5: b8buXXSdXc50EoN_9z4lL81yxLc.roa (hash: y1+5GgrVlxar8AhFDExwyNjRYr2VXZ8nJ3r1LAS3BQs=)
6: dJB4MS4HT-PXmgb27v7yzuoaUec.roa (hash: yk82kxXPs3siGc6DkrNtbxJMeEXWQnc9Nf+oeetU4Sc=)
7: kAxuuW_pfwxpY3HogyB4mEHRSuQ.roa (hash: 5E/eoqFn3bltIb3d+XAIbaNmFtbombeELoWwRt986a4=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 10:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Validity
Not Before: May 15 01:45:11 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=315038AAC24C17549A82BAADE2AF446312D6F6D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:91:7a:c7:7c:e2:70:90:2c:3d:bb:7a:46:
2d:3a:26:24:9d:51:43:55:5b:fd:9b:50:38:f5:15:
df:2c:0a:72:61:07:25:48:f4:d1:2b:0f:20:0c:ac:
c2:c2:21:f0:6f:7a:c6:20:65:7c:7b:a8:f4:01:62:
64:31:1a:12:72:f0:70:53:1c:05:a0:77:c3:5c:40:
28:f7:cc:59:fe:c2:4b:24:d9:26:08:58:75:f5:c2:
a3:3f:aa:5d:74:a2:5f:15:5b:2c:bf:5c:0c:19:5d:
4f:c3:20:f6:16:75:a5:4e:f0:82:35:a8:da:fc:d8:
d6:7e:1a:ca:be:87:a6:c5:bc:90:a3:c9:aa:12:ed:
0e:5e:1d:06:bd:94:d2:6f:c8:34:9f:ea:a2:fc:3e:
61:11:2e:95:36:aa:54:5d:af:63:3a:02:42:df:0c:
e5:d7:a0:e7:3a:5a:80:85:6a:0d:0c:60:53:fd:56:
cd:aa:b1:b0:77:e3:d7:77:af:c7:c1:5b:fe:db:3a:
3d:1a:a9:2d:6d:cc:b4:44:5b:5b:e2:a6:2b:ef:de:
39:9f:44:66:4b:d6:4a:8c:e9:5e:6a:5a:0e:d5:ef:
a9:44:97:13:6f:0e:bc:11:7c:ef:41:4f:9f:b3:9c:
28:6b:f6:75:b2:05:3a:0d:2b:24:53:28:bd:cd:81:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:50:38:AA:C2:4C:17:54:9A:82:BA:AD:E2:AF:44:63:12:D6:F6:D2
X509v3 Authority Key Identifier:
keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6e:e5:ca:ea:68:cd:89:88:b8:1b:99:37:64:27:b1:71:84:
88:08:9d:39:1a:94:45:25:f8:da:30:ff:c0:25:e8:44:0b:50:
85:35:0f:01:c9:7e:73:72:4d:cf:28:ad:3e:b1:c2:de:37:ed:
f3:0e:d0:af:d5:8a:6f:74:67:17:c3:30:4a:25:a6:7e:f4:8e:
3d:2e:e0:0d:ba:66:17:09:ab:eb:65:ba:bb:63:4c:3a:6c:27:
c1:3d:26:00:b6:47:3f:27:02:5a:e3:2b:28:68:3b:cf:b9:8a:
e0:8c:57:7d:8d:f6:2d:90:41:e3:08:85:12:05:f3:0b:d1:72:
3e:5a:f6:b3:b3:0c:31:32:af:e1:66:24:c9:7b:8f:30:79:c6:
d6:99:7c:1f:d5:d9:9a:30:bd:f7:62:fa:3f:82:1b:d8:ad:a4:
fe:32:b7:f8:c6:5e:04:7f:8d:c5:93:f1:2b:97:05:42:0c:60:
b0:4d:26:ec:3c:af:b6:e1:13:ea:22:7c:2f:5b:32:7d:bc:58:
50:d1:de:06:b8:a6:1b:cf:93:db:22:77:9f:6c:c5:9f:8c:78:
39:c6:c2:6e:32:ee:47:bf:2a:45:4d:3a:b9:f1:45:35:31:6c:
43:53:e7:3d:7d:4f:65:33:70:90:1c:3a:4b:25:20:0f:c7:41:
ef:29:08:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:24:38 2026 by rpki-client