
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.mft
File: cR9iZZW96r6TNMYdcpxNolTO2Rw.mft (raw, json)
Hash identifier: t2wj1tYniIViO/KtaUtOitpl53P5nLwjOjvvLT4NvVU=
Subject key identifier: 0A:F8:22:81:57:A1:4D:62:B1:38:6A:4D:A5:BB:AC:30:0D:66:CE:B2
Authority key identifier: 71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C
Certificate issuer: /CN=711F626595BDEABE9334C61D729C4DA254CED91C
Certificate serial: 5F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.mft
Manifest number: 0C28
Signing time: Mon 02 Mar 2026 04:29:40 +0000
Manifest this update: Mon 02 Mar 2026 04:29:40 +0000
Manifest next update: Tue 17 Mar 2026 04:29:40 +0000
Files and hashes: 1: 8P6tD-bfcy3TDA8EcsJoPNXi5LM.roa (hash: rcYvgYPpZAJSsyyCJllulEFshkpQR45dQhf6swzvsjg=)
2: TvaIq_lGRMUiTC0YfuhxOOeXzX4.roa (hash: hm98oPUTu03pwCM7cCCbdKihv01I9wW4YkcOPeUTyU8=)
3: cR9iZZW96r6TNMYdcpxNolTO2Rw.crl (hash: rX/3gYH3A6A1Ze//GkGBeVI1TCPB2Bj5/d6QqFyODBs=)
4: uwsJSzlzj4C9X7XVSHUo5oFj5AI.roa (hash: eHl0XEYSprrgKHxATEGhyAAHDrkEV4L25UqXiuHaO3k=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711F626595BDEABE9334C61D729C4DA254CED91C
Validity
Not Before: Feb 15 01:32:05 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=0AF8228157A14D62B1386A4DA5BBAC300D66CEB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:1f:d7:3a:d7:5b:fa:f5:1f:d3:9a:4e:56:
46:96:4b:e3:ac:b7:31:93:07:e3:e7:80:e8:8e:f5:
c2:62:61:8e:de:93:64:a2:41:49:df:8e:14:a3:1c:
6c:06:b3:97:af:20:f7:a3:5b:2a:0c:37:5e:1d:7b:
6a:26:77:3d:97:c3:84:2b:ea:1f:a5:bb:fc:33:17:
b8:02:08:0e:a1:51:16:9e:1c:29:e6:3e:23:1c:3b:
f8:b2:7c:c5:e2:03:8e:26:5e:04:bc:f7:b2:61:96:
1a:b9:8a:3f:8d:41:7b:05:2c:9f:05:f3:b0:3e:bb:
97:49:0e:b6:1a:60:ee:70:79:ac:45:29:9b:9b:b9:
a0:b8:ac:80:f7:7e:41:97:f2:5c:82:7f:ea:83:72:
8b:24:84:14:cc:dc:2e:5b:d2:1e:78:2d:fb:ff:3e:
9d:db:5c:2b:af:9f:15:60:49:b5:e1:f7:14:a8:0f:
e4:ab:2f:0d:72:09:0c:10:49:6d:00:f8:37:07:e0:
c0:ae:ac:82:59:bb:86:f1:31:cc:77:d1:66:42:0b:
f5:ed:d1:81:0b:89:fb:2c:01:33:97:d9:87:ae:e8:
91:90:ab:af:f0:56:3c:38:f8:9d:5d:eb:77:bc:81:
20:92:4b:07:58:0b:49:97:cf:a8:e4:56:f1:7f:07:
8d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F8:22:81:57:A1:4D:62:B1:38:6A:4D:A5:BB:AC:30:0D:66:CE:B2
X509v3 Authority Key Identifier:
keyid:71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:a7:96:8c:75:79:6e:59:c3:b7:c5:f8:28:f2:0f:b5:f4:15:
6e:47:a7:c5:12:4c:4e:ec:7d:1f:8c:98:5c:a1:34:1f:f9:98:
2c:51:62:d6:3f:35:5d:2c:90:bb:7e:dd:22:f6:d1:e7:72:0c:
84:63:82:61:8f:ca:33:c0:cf:6d:6c:0b:06:90:37:50:df:e7:
09:39:37:3a:9d:ca:19:02:6a:f7:9b:c0:c0:b3:9d:e2:18:e8:
bf:9c:cd:54:53:3c:d0:2c:25:d3:59:ed:6f:07:97:84:03:4f:
ec:fc:b5:71:6f:49:48:ea:a3:6e:ef:22:51:b8:e7:3d:ac:51:
cc:f3:d4:f2:9e:40:61:9e:1c:7c:e7:09:ec:0a:05:0d:a8:30:
8c:f6:b0:a3:5c:f2:2e:69:67:91:bd:1f:87:21:21:35:4f:e1:
84:ae:cd:0e:bd:63:20:8f:ea:a8:52:24:99:2d:13:bf:1b:2e:
2a:81:47:64:59:1f:b5:eb:06:48:ce:f6:53:ce:7d:aa:14:62:
13:df:5b:67:57:ee:8d:15:29:25:91:c1:fb:33:7c:2e:7c:37:
d6:d4:0b:7c:cf:51:f7:27:24:eb:02:30:00:66:1d:4b:0a:1a:
a4:8f:5e:92:1d:cb:04:10:c4:fb:3f:60:6e:ad:6c:ab:14:dc:
77:32:7a:b0
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTFG
NjI2NTk1QkRFQUJFOTMzNEM2MUQ3MjlDNERBMjU0Q0VEOTFDMB4XDTI2MDIxNTAx
MzIwNVoXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoMEFGODIyODE1N0ExNEQ2
MkIxMzg2QTREQTVCQkFDMzAwRDY2Q0VCMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMYZH9c611v69R/Tmk5WRpZL46y3MZMH4+eA6I71wmJhjt6TZKJB
Sd+OFKMcbAazl68g96NbKgw3Xh17aiZ3PZfDhCvqH6W7/DMXuAIIDqFRFp4cKeY+
Ixw7+LJ8xeIDjiZeBLz3smGWGrmKP41BewUsnwXzsD67l0kOthpg7nB5rEUpm5u5
oLisgPd+QZfyXIJ/6oNyiySEFMzcLlvSHngt+/8+ndtcK6+fFWBJteH3FKgP5Ksv
DXIJDBBJbQD4NwfgwK6sglm7hvExzHfRZkIL9e3RgQuJ+ywBM5fZh67okZCrr/BW
PDj4nV3rd7yBIJJLB1gLSZfPqORW8X8HjfECAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBQK+CKBV6FNYrE4ak2lu6wwDWbOsjAfBgNVHSMEGDAWgBRxH2Jllb3qvpM0xh1y
nE2iVM7ZHDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwOTMvY1I5aVpaVzk2cjZUTk1ZZGNweE5vbFRPMlJ3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvY1I5aVpaVzk2cjZUTk1ZZGNweE5v
bFRPMlJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDkzL2NSOWlaWlc5NnI2VE5NWWRjcHhOb2xUTzJSdy5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZp5aMdXluWcO3xfgo8g+19BVuR6fFEkxO7H0fjJhcoTQf+ZgsUWLW
PzVdLJC7ft0i9tHncgyEY4Jhj8ozwM9tbAsGkDdQ3+cJOTc6ncoZAmr3m8DAs53i
GOi/nM1UUzzQLCXTWe1vB5eEA0/s/LVxb0lI6qNu7yJRuOc9rFHM89TynkBhnhx8
5wnsCgUNqDCM9rCjXPIuaWeRvR+HISE1T+GErs0OvWMgj+qoUiSZLRO/Gy4qgUdk
WR+16wZIzvZTzn2qFGIT31tnV+6NFSklkcH7M3wufDfW1At8z1H3JyTrAjAAZh1L
Chqkj16SHcsEEMT7P2BurWyrFNx3Mnqw
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:30 2026 by rpki-client