
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.mft
File: ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.mft (raw, json)
Hash identifier: +UGN2eFa2vG2Cj1kRYgBMDdNu7KoFr6G0aRdRugy+Yc=
Subject key identifier: 5A:51:BA:71:62:32:EE:70:CB:AD:B7:D4:13:13:DF:F8:58:C0:20:94
Authority key identifier: 66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12
Certificate issuer: /CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
Certificate serial: 70
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.mft
Manifest number: 1DC8
Signing time: Mon 02 Mar 2026 12:17:31 +0000
Manifest this update: Mon 02 Mar 2026 12:17:31 +0000
Manifest next update: Tue 17 Mar 2026 12:17:31 +0000
Files and hashes: 1: MGTD4sqCByNoPVrj3YECWMtz3vw.roa (hash: gWVu4MCZw07KDUxgAxJE+EIGLSIuhbRhiuDFZLrSJ3E=)
2: ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl (hash: 9Wo/aTfMg6dMj2NjHaKN7z1OdWg6hP+volBcHKc5GOg=)
3: _8pxt6Ikot-3aF4-1iRmAT5rZp0.roa (hash: Q5FWG4OGk9Wyfz8D6RWiukIR759cL6qwGBvVJsCe/Rk=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
Validity
Not Before: Feb 15 01:31:10 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=5A51BA716232EE70CBADB7D41313DFF858C02094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:18:56:3e:8d:84:66:12:6e:28:88:ab:6f:
04:d9:63:2a:9d:c4:84:5d:08:56:3b:e6:72:09:d7:
95:d2:a0:a2:83:f3:03:8a:57:ef:8f:e2:83:c1:9f:
6a:9b:7f:1f:0d:99:b2:51:d7:99:ee:a3:82:57:ed:
a8:59:ba:55:31:2a:c4:79:d9:95:78:cf:c6:46:ae:
7a:7b:ad:e9:de:df:31:83:41:1d:5a:ab:87:76:c4:
5f:5e:25:8c:8c:da:91:37:fc:ba:06:75:60:7a:28:
92:f4:cf:b3:7d:d1:6b:12:5f:0c:79:7d:4b:06:fe:
cb:54:0b:1d:0c:4a:05:ea:39:40:40:db:f1:8c:37:
82:1f:54:1d:9a:a7:b1:33:50:3f:5b:b5:41:f3:d1:
e3:3d:b6:89:32:84:4b:e3:6d:32:e8:9a:3b:c5:c1:
26:0b:b0:54:98:1c:a8:39:30:16:ee:de:11:ec:b6:
81:28:0b:36:58:b3:49:5f:36:c3:3b:94:d7:17:d6:
f2:fe:79:35:b1:d8:0f:d0:24:69:98:27:bd:6d:2a:
2a:8d:c3:c2:69:3a:3f:b5:a2:59:c8:f6:77:74:21:
f6:01:70:96:d0:b6:75:c2:bf:71:74:2b:b4:96:ae:
e7:64:7d:dd:46:1f:e9:7f:eb:4d:bc:06:df:74:8b:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:51:BA:71:62:32:EE:70:CB:AD:B7:D4:13:13:DF:F8:58:C0:20:94
X509v3 Authority Key Identifier:
keyid:66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:4d:a0:8a:8e:b9:0b:a1:68:02:d6:ef:cd:bf:20:7d:eb:f5:
3e:71:b0:67:19:ba:84:80:41:92:d5:ef:e8:a0:79:a3:79:10:
26:40:cf:f6:86:02:86:5b:f1:e6:a8:ce:cc:4a:3d:dc:8f:2d:
c2:28:03:ab:78:6d:0b:1f:2c:d1:b1:e4:ca:bd:f2:95:1c:68:
90:39:4e:c8:65:bc:c2:26:86:f4:03:d7:bd:6c:27:2e:0c:00:
c2:0b:1a:2e:37:c6:b9:3d:0d:2a:e0:1d:d5:bd:7f:5b:ac:b6:
19:d9:01:36:4e:ae:0e:29:50:bf:49:d4:c2:c2:33:3c:0f:6d:
c0:c1:41:cf:65:be:e6:ac:5a:75:13:07:ec:25:10:53:87:94:
5f:9f:35:11:dc:1c:56:9b:18:d9:10:38:7e:e3:89:67:39:db:
1a:7b:80:41:f2:66:32:18:87:d3:91:2a:56:29:91:89:8a:42:
e4:83:89:e9:6e:b5:96:f3:ae:94:77:38:fa:f4:79:33:a7:91:
59:4d:20:eb:81:12:01:3e:56:b5:55:2d:a7:4c:69:23:6f:ec:
c3:30:f6:8a:0c:a6:c3:a0:06:30:4f:b6:d1:85:17:eb:69:f9:
c6:6e:e6:6b:ca:5a:e2:08:38:fd:1a:00:29:ac:eb:b5:88:a0:
ed:01:4d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:54 2026 by rpki-client