
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
File: FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft (raw, json)
Hash identifier: 4QrA2CYytxdTo7MfAPVeYktYloAfswf/Rl9JZNupR4g=
Subject key identifier: 77:2A:04:1C:C6:30:7E:09:26:95:0B:F0:B2:CD:9B:8D:C9:DE:FC:27
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Certificate issuer: /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial: 80
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
Manifest number: 1C8F
Signing time: Mon 06 Apr 2026 08:33:12 +0000
Manifest this update: Mon 06 Apr 2026 08:33:12 +0000
Manifest next update: Tue 21 Apr 2026 08:33:12 +0000
Files and hashes: 1: -tpMObVJK7UZdWzYdZD7xWfve8Y.roa (hash: w6Vn6DWUVPSYF67nIoKMAL6yP2hpkjvCjGD5+0MeCIk=)
2: 23OfVBArAd1aWnrCI1VR1H4koWQ.roa (hash: +aGJMhbBUDGS1BLly+y71+1Y3QvBbW2spOhOHE8kRXs=)
3: FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl (hash: dYS74JuX8ImB1AxktuCTz8XkuUm7lDyEob9UHKhvB48=)
4: H99dxcIuNomtxYs-xSQJj0Har28.roa (hash: BUtKlgZ8XqqQWwv0cN8lHx52hfdB3CUwNmqZUqgWc9g=)
5: Q4vmoO-RbNyOGCIUdeOzDkLdoTs.roa (hash: UD6Rc9uCfD98sp72vRN3mb/+Z18tzhkETsPZJeUjSNo=)
6: kTMEnmUtPJYTvglEod8vtGOPIsw.roa (hash: AS2ngvOX5r127xh79QlRtVG+pxbOJbMoTZQQM6qQN/w=)
7: wvxGjT3gunE4vvpRsIMnzOSbjcI.roa (hash: xabIg6MdSfbJuX+5yi7c9uSmnJWy9b8zmfWb6jEiI84=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 10:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Validity
Not Before: Mar 31 07:32:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=772A041CC6307E0926950BF0B2CD9B8DC9DEFC27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9a:e9:8d:e7:c9:a0:e8:6e:8f:11:5d:14:e0:
95:ae:a6:0f:b6:db:24:26:5d:ce:b1:bb:4d:47:89:
2f:33:9b:ea:3c:c6:fe:95:13:02:e4:53:b0:47:fc:
6a:2a:95:29:40:80:fc:0a:33:21:f1:f8:e6:ff:bd:
21:94:dc:03:01:05:d2:d7:46:64:4e:6e:8d:fb:fb:
6d:4b:ba:d9:43:ee:0e:2f:c0:9c:a3:22:e2:d1:f8:
69:2f:07:6d:06:54:67:ba:65:69:6f:fd:42:00:87:
26:2e:7b:de:03:af:5a:69:c3:fb:9e:e9:54:e0:6f:
ad:68:f5:06:ca:a1:11:69:80:dc:2f:0b:d5:33:16:
6c:f6:a9:9f:1f:e3:c8:04:5b:8a:b9:b9:15:4d:75:
45:50:3b:ce:f2:34:b2:c1:2f:b9:02:2a:40:0a:78:
a0:11:80:98:e1:da:8a:80:e3:1d:d1:39:b6:ae:cd:
6e:a9:8c:2b:9a:8a:2e:d6:7a:16:34:3d:63:a3:1b:
26:42:d1:d4:ce:e7:ef:65:c3:65:d5:b3:4d:76:6e:
e8:84:7e:eb:6c:1a:62:3a:c6:34:eb:5c:24:76:35:
cc:f5:1d:05:6a:e0:88:3b:5d:99:11:3b:ee:30:39:
78:f0:b6:54:0b:74:83:5a:81:d9:ba:b9:08:e5:7f:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2A:04:1C:C6:30:7E:09:26:95:0B:F0:B2:CD:9B:8D:C9:DE:FC:27
X509v3 Authority Key Identifier:
keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4e:69:08:83:63:e5:d7:91:9c:5a:a4:bb:25:eb:72:27:ba:
91:14:46:bd:19:16:e0:4e:6a:a0:2a:8e:6d:88:fa:dc:b0:2d:
c7:21:0a:0d:be:b0:a6:e0:53:25:6e:14:8f:3a:bb:0f:6c:7a:
c3:b2:38:ff:58:cb:5f:01:21:cf:76:31:07:e4:16:01:13:f6:
37:64:c3:97:97:c8:4e:bc:71:3a:95:e2:2f:6f:93:15:b4:ec:
b6:dc:a1:77:03:9c:70:fc:e7:f2:54:09:b7:21:af:e4:bf:c7:
94:b2:24:88:b9:63:ec:1c:50:16:6e:a5:b4:b9:fc:76:dc:f1:
5e:8d:c2:4c:61:81:42:55:36:2e:8b:78:f2:33:aa:32:b7:11:
9c:67:85:65:5d:c5:cd:61:a5:8f:79:f6:e8:ce:17:6e:e2:fd:
22:cc:55:45:05:5e:e0:3d:c1:4a:63:5a:dc:35:7e:57:fd:e4:
6e:51:8f:f7:ee:74:e2:6a:51:b5:1d:a9:13:71:1d:07:d2:2b:
fc:13:13:0e:01:7c:d0:2f:a7:77:a5:c0:bc:4c:7a:35:0b:92:
d2:e7:77:17:e5:62:5b:32:eb:b2:23:6a:fd:03:92:4f:04:91:
3f:3f:57:e3:10:36:b5:16:d7:8c:54:c3:f0:07:37:13:2f:c4:
1a:1c:2f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:54:24 2026 by rpki-client