
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.mft
File: k4BnwlvKfROFvTbEgoWPgwtabjo.mft (raw, json)
Hash identifier: fmi3/WnznpQsQtQwHgF6MQvLlsxlZTx1gBmXVPH3z2I=
Subject key identifier: 1E:89:E5:19:D5:8D:B7:B6:2A:8C:A8:EC:47:EF:A0:FF:E2:9D:1E:99
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Certificate issuer: /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial: 4C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.mft
Manifest number: 0BD3
Signing time: Mon 02 Mar 2026 09:00:01 +0000
Manifest this update: Mon 02 Mar 2026 09:00:01 +0000
Manifest next update: Tue 17 Mar 2026 09:00:01 +0000
Files and hashes: 1: GnHVQAAGaxtJ4vDIhl4pN75Ixgg.roa (hash: arLfzbZrCkFiIqK86E3hRDt8zKntgybAduaS6FgjP+8=)
2: k4BnwlvKfROFvTbEgoWPgwtabjo.crl (hash: 4L42xUmt6nfuJNkv8xj7bgoCWcr+VVNNe7YYQ/1qM58=)
3: vt92Bicrqn5ztTn5aTHbMQi1R2I.roa (hash: WPLShHtan0ycENjYuuUObLV2Qz/ZCXo4Frmtk9Ap/2U=)
4: wxXMe6ooqES1PZkYFFWb9yJoGVg.roa (hash: d7+N4YTZYnHaXXmajWmGH78WgzGP8EJvYKAvyG4VaVU=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Validity
Not Before: Feb 15 01:39:14 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=1E89E519D58DB7B62A8CA8EC47EFA0FFE29D1E99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:91:78:5b:77:c4:1e:e6:27:e5:1e:f6:aa:
19:52:1b:f4:f0:ff:c3:35:97:01:ce:a8:0c:08:c0:
a5:d4:ae:3a:9d:fd:c5:fe:28:33:4a:2b:b2:3e:c4:
04:50:2a:25:5e:78:3b:c4:e8:d7:cb:03:43:09:b0:
aa:ea:fc:9a:1b:12:63:a1:6f:00:02:a6:af:a3:f7:
e0:b6:39:31:12:ed:82:79:62:95:ff:cb:a2:af:96:
72:35:07:52:bc:d5:d5:aa:23:18:a3:05:cb:7b:bf:
af:df:4a:35:2f:24:01:bd:7b:33:d4:0c:4a:16:b9:
50:83:0b:18:91:89:13:b6:71:be:2e:1f:63:96:81:
a2:21:4d:ce:06:eb:27:92:4d:64:d5:5a:fe:0c:41:
55:c3:2d:db:e1:12:a4:78:b2:a2:15:7a:4a:95:27:
ee:55:ab:54:0e:c0:ac:83:c2:6a:14:dc:cf:15:36:
f9:10:d5:71:fc:a0:5b:89:aa:0f:90:7d:d1:74:b9:
dc:8f:8f:32:aa:f4:98:8d:d8:ed:39:98:06:2d:12:
ac:3c:d3:0f:d3:dd:32:93:c3:53:64:29:39:f7:e4:
ac:e3:74:b9:2b:90:87:25:2b:92:f3:cc:81:df:b5:
e0:2c:3d:36:de:6d:3b:b6:5e:c7:12:8b:cb:4f:20:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:89:E5:19:D5:8D:B7:B6:2A:8C:A8:EC:47:EF:A0:FF:E2:9D:1E:99
X509v3 Authority Key Identifier:
keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:62:9a:83:33:41:97:bf:45:52:b9:e3:ed:99:f1:29:fd:59:
46:5d:1f:58:0c:ed:4a:20:5b:65:a1:00:0d:27:d4:b8:2d:e3:
fe:c3:a5:e1:3a:c7:21:62:39:0e:cf:8d:66:2c:25:ce:7b:9f:
87:72:1a:c9:54:a7:15:b4:76:bf:4b:30:9d:bc:c7:73:8b:06:
90:d6:f9:30:06:52:8b:67:ed:b4:9f:de:18:c4:fc:0e:81:3e:
fe:dc:4a:21:29:bc:ba:b4:82:a1:28:a0:47:80:d9:a6:17:e5:
d6:d9:9f:bd:42:9e:d6:36:34:8a:ce:37:64:6d:39:df:b9:48:
a0:88:1c:64:ba:fb:9a:01:77:e4:73:41:7c:1f:fb:86:dc:32:
2f:47:ae:ff:e7:d1:05:86:3a:9b:73:82:4f:21:a0:01:16:cb:
e1:73:c2:a4:c5:ff:44:2a:ef:91:26:e8:e9:68:e5:30:e7:b6:
8e:b6:8b:94:d3:bf:9f:a3:58:5b:27:5d:2b:cf:d0:30:19:28:
f9:f7:0b:83:7e:62:65:61:c0:41:85:5f:8d:7b:eb:71:c6:ff:
57:ba:15:c2:cb:9a:63:e3:4f:52:d7:2c:31:79:87:93:93:07:
5a:be:d8:30:dd:54:29:3d:2f:d5:82:35:94:f1:4d:56:de:3e:
4b:0c:f3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:05 2026 by rpki-client