
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
File: -3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft (raw, json)
Hash identifier: rXtc/aBfPbAXP3b7cPSyDqij87xjjavrfpx1uGAZ8kQ=
Subject key identifier: 06:5D:30:60:CA:C3:BD:BB:DC:7B:6B:B4:08:D6:97:A0:88:D6:41:6F
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Certificate issuer: /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial: 62
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
Manifest number: 0D10
Signing time: Fri 17 Apr 2026 06:18:41 +0000
Manifest this update: Fri 17 Apr 2026 06:18:41 +0000
Manifest next update: Sat 02 May 2026 06:18:41 +0000
Files and hashes: 1: -3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl (hash: ViURAmTyaClUrfRz/YuDl+U+oDo5yzPlkhbt6V99iM4=)
2: 1hDWKAZ1pwa6f6yxjNP2WwFr8u0.roa (hash: gvQdyeJ7sCZzndyi/nCi+xNoHjGWAoQtsip4j2SQ7b0=)
3: 6PNmliUMDsCKNA8WO9KEAXI2xl8.roa (hash: cI8hEJKCvF06YqBJGa4h95a9TYWdbVCk3LTp/Mx3nT0=)
4: 9WpUZ5lhpOtfkbU8n_ubNLlQShw.roa (hash: gDUcSf9wsm475YD7A20RJILLPUlqNO95epPT7wVey+Y=)
5: ZjCcGla3cvdKuL3C51y8ms5HrB4.roa (hash: xqmtVSmucjEL4xkdJgKvAzKV/eIK60s8C4v0JNf7HuE=)
6: j6GZqFdtFxz9oyvYKwfHRt290Gw.roa (hash: rk4nXul7VxL7M8u3bFZJFobRfBbm6Gls1Gu0FAg9nG4=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Validity
Not Before: Apr 15 01:35:57 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=065D3060CAC3BDBBDC7B6BB408D697A088D6416F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:1a:fe:62:99:2a:dc:20:dc:8a:cc:4a:74:
ab:87:bb:b2:df:1d:3e:23:c3:fa:25:09:46:df:5f:
8f:53:45:f3:ff:09:46:cc:33:73:6d:45:79:80:0a:
97:3b:62:1c:c5:0c:a1:5c:36:7c:e4:bc:79:a5:03:
03:5f:1c:bb:d9:77:f5:62:9f:19:8e:ae:f5:af:67:
c3:9b:3a:fe:26:5a:5d:f2:68:85:14:7c:63:9c:ab:
6c:30:00:71:7e:1d:0a:99:21:b5:97:0b:39:12:43:
30:b0:84:3c:34:32:f1:b8:e4:66:da:a5:c7:84:68:
35:84:fa:ec:93:64:03:80:ce:b3:6f:fe:6d:7e:60:
ff:1b:d1:3b:0b:fc:fd:e0:e4:3f:ce:12:83:c9:da:
4d:ac:0c:5e:d4:ee:8f:46:17:97:1e:39:aa:19:7c:
87:2f:37:fb:3a:2f:01:05:68:28:6e:60:51:cd:5f:
da:00:31:de:de:dd:c5:48:f2:7b:0b:0e:20:0d:9d:
19:68:5a:21:c1:c1:2a:13:0e:64:9b:e7:49:c4:df:
6a:60:89:ac:95:3b:2d:12:a6:ea:c5:a5:32:0f:80:
7b:6b:de:48:81:61:4a:83:19:40:fa:85:70:9c:68:
70:08:ea:c6:08:f4:02:1e:d4:17:82:4a:14:73:87:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5D:30:60:CA:C3:BD:BB:DC:7B:6B:B4:08:D6:97:A0:88:D6:41:6F
X509v3 Authority Key Identifier:
keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:e2:6d:ee:d6:55:07:70:32:0d:84:02:40:4c:b0:3e:f4:07:
0b:7d:57:7e:98:3d:91:ca:b5:03:bd:ec:75:ae:4e:39:27:25:
83:1c:c1:66:de:75:dd:5b:f8:b0:aa:33:29:22:f0:a5:df:4d:
c0:cb:5e:60:45:64:20:5c:b7:93:15:de:38:c7:ba:85:86:27:
38:6c:97:e9:44:4c:3a:26:2d:b6:67:cc:df:c6:ae:7a:47:52:
80:a7:44:28:06:9e:13:67:dc:e8:21:90:4e:b0:8a:c1:31:2c:
08:2e:82:1f:e1:4f:3e:17:91:f7:79:8a:82:84:56:cf:04:10:
53:a9:e9:a0:6e:7d:e3:f0:86:e8:a0:fb:37:c5:97:f5:1f:44:
9b:d2:b1:60:80:1a:e9:7d:4f:dd:39:f2:43:6e:8a:c6:2a:89:
81:a0:97:cc:d4:31:1b:27:74:d2:76:94:04:f6:5d:9d:6c:eb:
1b:78:38:2f:c3:9b:8c:32:4c:2a:e2:cf:3c:24:a0:8c:46:38:
28:ea:b4:14:d0:eb:34:25:3d:4b:0e:b8:4c:ef:ef:8d:7b:dd:
52:65:c8:ee:8c:9d:f3:73:bf:10:c5:9a:45:9a:b4:49:a0:4a:
9c:81:d2:a9:c6:fd:3d:d2:af:07:b0:f2:7f:3c:b1:dd:b4:6e:
a6:25:47:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:26 2026 by rpki-client