
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
File: JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft (raw, json)
Hash identifier: jUgI/QWJFMcStffoeKhaaHYkvkysdB6s/2KRSe+wX14=
Subject key identifier: 31:50:38:AA:C2:4C:17:54:9A:82:BA:AD:E2:AF:44:63:12:D6:F6:D2
Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
Certificate issuer: /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Certificate serial: 33
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
Manifest number: 0B85
Signing time: Mon 02 Mar 2026 01:50:45 +0000
Manifest this update: Mon 02 Mar 2026 01:50:45 +0000
Manifest next update: Tue 17 Mar 2026 01:50:45 +0000
Files and hashes: 1: 4PF0J0m7GsmkgccgYtIKfjOBth0.roa (hash: zunxeqvs6iUkdx5UVnOn7GEi8Mg3NM9SZ6onV1HNnaM=)
2: DNGsxgJcYAF1GoooEJH5DhK4XVk.roa (hash: TiJfYy1mOUG4j6zN8EP5xtYONf+2Jh7gIA1xUqIc7EY=)
3: JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl (hash: KvtzstpMB/HtItdVY0z5KbhG760t2zDsICNZi0uYAiI=)
4: PPt0QVJoZ12J5x9RU0YMDYXAjdA.roa (hash: aE/aV/1lgnCcVSLqezfqbllu/+6gN0Aws+S1aK4bZF0=)
5: oY5rrplFJfAiSM7Wcx9RvlHuvk4.roa (hash: mTna8/Nctc3Jqec3m/D7RBXcq18nvTrFSKPWJggcV8Q=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Validity
Not Before: Feb 15 01:34:44 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=315038AAC24C17549A82BAADE2AF446312D6F6D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:91:7a:c7:7c:e2:70:90:2c:3d:bb:7a:46:
2d:3a:26:24:9d:51:43:55:5b:fd:9b:50:38:f5:15:
df:2c:0a:72:61:07:25:48:f4:d1:2b:0f:20:0c:ac:
c2:c2:21:f0:6f:7a:c6:20:65:7c:7b:a8:f4:01:62:
64:31:1a:12:72:f0:70:53:1c:05:a0:77:c3:5c:40:
28:f7:cc:59:fe:c2:4b:24:d9:26:08:58:75:f5:c2:
a3:3f:aa:5d:74:a2:5f:15:5b:2c:bf:5c:0c:19:5d:
4f:c3:20:f6:16:75:a5:4e:f0:82:35:a8:da:fc:d8:
d6:7e:1a:ca:be:87:a6:c5:bc:90:a3:c9:aa:12:ed:
0e:5e:1d:06:bd:94:d2:6f:c8:34:9f:ea:a2:fc:3e:
61:11:2e:95:36:aa:54:5d:af:63:3a:02:42:df:0c:
e5:d7:a0:e7:3a:5a:80:85:6a:0d:0c:60:53:fd:56:
cd:aa:b1:b0:77:e3:d7:77:af:c7:c1:5b:fe:db:3a:
3d:1a:a9:2d:6d:cc:b4:44:5b:5b:e2:a6:2b:ef:de:
39:9f:44:66:4b:d6:4a:8c:e9:5e:6a:5a:0e:d5:ef:
a9:44:97:13:6f:0e:bc:11:7c:ef:41:4f:9f:b3:9c:
28:6b:f6:75:b2:05:3a:0d:2b:24:53:28:bd:cd:81:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:50:38:AA:C2:4C:17:54:9A:82:BA:AD:E2:AF:44:63:12:D6:F6:D2
X509v3 Authority Key Identifier:
keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:bc:c3:01:ec:7b:b8:2a:83:aa:2a:e4:3a:28:4d:78:b9:21:
f2:81:a3:d2:49:a0:30:94:ec:61:98:d2:7b:63:3c:c8:b9:c2:
04:8c:1f:ba:4a:f7:46:f9:99:67:ab:3b:bd:01:0f:a3:14:99:
eb:c5:e6:18:88:81:f6:3c:d1:53:85:81:7f:7d:62:7f:02:57:
a7:81:16:d5:11:9c:fa:e5:10:69:1e:3b:53:51:d4:d5:3a:0f:
98:28:d7:8f:f0:43:a8:b5:89:8a:c2:59:06:58:88:60:12:77:
c3:71:ed:27:9b:1c:6c:4b:1e:3d:fc:ff:16:22:d5:74:a0:03:
20:b2:52:89:ec:d6:65:ab:2d:18:74:b8:39:e8:0a:31:f4:38:
dc:6f:8f:a2:af:28:6e:aa:5a:9b:75:dc:3c:1b:ea:b7:27:90:
da:80:19:c0:8d:d6:7b:93:23:ee:f5:92:7d:c6:1d:d1:f4:08:
93:72:10:4a:4e:c2:6a:3c:60:01:f9:b2:00:44:56:be:8d:d6:
6d:3f:f3:9f:6c:a1:4e:92:b7:d8:9f:e4:50:7b:c9:f0:3d:c5:
d1:aa:2c:45:8c:00:89:17:83:e9:a6:48:69:9b:63:f7:27:f0:
c6:8b:f9:f4:bc:2b:ea:69:f6:ac:d3:58:02:75:e7:f1:1a:8e:
8d:a7:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:07 2026 by rpki-client