
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft
File: BqhITfT7r-XEjZiKBGtqtqgbLfM.mft (raw, json)
Hash identifier: hVaZWTUE4Tc4/maE0D6MmhZ/vYgqnoArQH43DvcnoEY=
Subject key identifier: E2:3C:28:05:66:C8:40:96:51:25:98:EF:39:E5:E2:B6:5A:B6:78:06
Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
Certificate issuer: /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Certificate serial: 67
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft
Manifest number: 0D5F
Signing time: Fri 17 Apr 2026 01:59:35 +0000
Manifest this update: Fri 17 Apr 2026 01:59:35 +0000
Manifest next update: Sat 02 May 2026 01:59:35 +0000
Files and hashes: 1: 3PpYy4AqZudfVYexefSW6oiu3E0.roa (hash: ThoSSti/vagt9rV3DzExYxluB+FSiTnLrDPh9UWkaWU=)
2: BqhITfT7r-XEjZiKBGtqtqgbLfM.crl (hash: BaFiIpWWfIQ4UuOIv5JSOciDwCUeclb3KdBWI1GHyOs=)
3: U6oDooWE_m7vetfFjjidc9QmDWQ.roa (hash: dTZfdXuxMRkEP7B+/ncRJyQPdaSB0kwJFEbEypl5nbY=)
4: lImLAeqSF9k9NhRNyijfINutmpM.roa (hash: XX3m9wPJUhlEEVGM7oAzQmzoUjMgQNIiywFjGhoLUvk=)
5: rW1RoZGzi7ZacgPELCGTYtIqggc.roa (hash: KmKrNt/7I1cHzqfdDlgicsUL6zx8NilTfxcMBnkjhSA=)
6: w79bgDJ7e9aA6XaYE4m97-DsHH8.roa (hash: lAAA0hk7UJfAU5thgJmr9DQz/J+mP88UDk1oEjFCrbM=)
7: xoZi08jw9ZPoaDTFDLTbGEF72nE.roa (hash: ALRc5ImHpG5QF0A6PbRkB2XwcklWTg8J0qa8BzGCBUQ=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Validity
Not Before: Apr 15 01:35:13 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=E23C280566C84096512598EF39E5E2B65AB67806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:f2:5e:fc:7e:5f:f4:57:24:01:c8:13:a5:
8a:19:7e:e5:e1:3d:65:64:0d:33:5d:32:2a:b9:6e:
46:73:49:e6:47:f8:85:fc:eb:40:37:89:b3:8d:2b:
5c:58:71:fb:3c:59:57:96:fc:e5:00:53:01:ac:55:
76:ac:87:a8:f4:0e:69:c9:c3:29:19:e5:a3:34:69:
30:13:37:e0:2b:45:be:af:df:1e:bc:b9:44:b1:62:
29:46:6c:8c:9c:37:34:0c:50:52:d3:e5:eb:c8:08:
98:2b:ee:7b:9f:d6:7f:e0:d5:6a:8d:d6:92:09:fb:
eb:a9:70:68:9e:ea:9a:e3:38:ee:5a:38:13:ce:27:
89:99:13:22:bf:c9:6c:10:5c:4d:ce:7b:c1:80:89:
8c:6b:6a:61:9f:1f:bf:86:f8:3c:de:fe:1c:57:f4:
83:c4:a0:6c:67:dd:dd:aa:68:8e:cd:da:c3:d7:b3:
89:46:65:1b:d0:b2:a1:d9:f8:21:50:1f:d6:18:64:
26:45:ef:07:ef:f6:36:b1:4e:91:ef:07:1c:fb:cc:
3d:cf:d7:e0:9d:9e:66:ae:29:9c:67:0f:3e:44:56:
09:7a:92:00:0a:dd:0c:2f:12:d8:73:3e:83:b7:b9:
d4:00:fd:d0:bd:e7:49:41:94:00:9e:68:c9:7e:6a:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3C:28:05:66:C8:40:96:51:25:98:EF:39:E5:E2:B6:5A:B6:78:06
X509v3 Authority Key Identifier:
keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:e6:c2:69:a7:85:b4:25:86:83:94:bf:4f:8b:7a:a5:7c:4a:
51:be:1e:a6:79:b4:ed:ec:c8:ab:81:f5:f5:55:9d:bb:e3:66:
9d:5b:2f:10:c5:11:9a:69:dd:31:32:ca:be:05:0b:64:24:d3:
66:39:20:2f:70:fc:28:1d:47:cc:fa:e6:b3:d0:36:3a:5e:06:
46:0f:50:79:03:8e:c1:e4:42:13:f0:ea:b5:34:c8:41:b0:de:
b3:a2:f0:0e:c8:b5:75:4d:84:0a:93:d8:98:93:7a:ce:e1:15:
04:63:38:b5:72:36:a4:69:b5:fa:0f:87:e5:09:73:73:9b:43:
0a:8f:75:e9:e5:02:ad:fc:0d:4b:bc:25:a3:0e:c3:51:c7:a2:
a1:88:ad:d6:2c:d3:d6:fc:f0:cf:85:af:91:79:77:89:db:7f:
6f:b7:ac:1c:42:2d:cd:75:9a:9c:a9:e0:4c:30:78:d7:91:9b:
e6:a6:28:e5:3b:a2:4a:bd:1e:a1:ba:79:96:77:a9:bf:b1:c2:
e5:6a:6c:dd:75:54:a7:14:4a:d0:d8:28:49:ca:e0:79:18:33:
60:60:04:2f:18:24:ef:a2:d1:f6:16:90:18:c1:7c:08:8d:40:
fe:2e:86:4e:24:49:a2:17:3b:44:a3:91:db:8b:d6:96:2f:df:
9c:ec:4c:03
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkE4
NDg0REY0RkJBRkU1QzQ4RDk4OEEwNDZCNkFCNkE4MUIyREYzMB4XDTI2MDQxNTAx
MzUxM1oXDTI3MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoRTIzQzI4MDU2NkM4NDA5
NjUxMjU5OEVGMzlFNUUyQjY1QUI2NzgwNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJaJ8l78fl/0VyQByBOlihl+5eE9ZWQNM10yKrluRnNJ5kf4hfzr
QDeJs40rXFhx+zxZV5b85QBTAaxVdqyHqPQOacnDKRnlozRpMBM34CtFvq/fHry5
RLFiKUZsjJw3NAxQUtPl68gImCvue5/Wf+DVao3Wkgn766lwaJ7qmuM47lo4E84n
iZkTIr/JbBBcTc57wYCJjGtqYZ8fv4b4PN7+HFf0g8SgbGfd3apojs3aw9eziUZl
G9Cyodn4IVAf1hhkJkXvB+/2NrFOke8HHPvMPc/X4J2eZq4pnGcPPkRWCXqSAArd
DC8S2HM+g7e51AD90L3nSUGUAJ5oyX5qQD8CAwEAAaOCAfIwggHuMB0GA1UdDgQW
BBTiPCgFZshAllElmO855eK2WrZ4BjAfBgNVHSMEGDAWgBQGqEhN9Puv5cSNmIoE
a2q2qBst8zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTI0L0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFnYkxmTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFn
YkxmTS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MjQvQnFoSVRmVDdyLVhFalppS0JHdHF0cWdiTGZNLm1mdDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBABDmwmmnhbQlhoOUv0+LeqV8SlG+HqZ5
tO3syKuB9fVVnbvjZp1bLxDFEZpp3TEyyr4FC2Qk02Y5IC9w/CgdR8z65rPQNjpe
BkYPUHkDjsHkQhPw6rU0yEGw3rOi8A7ItXVNhAqT2JiTes7hFQRjOLVyNqRptfoP
h+UJc3ObQwqPdenlAq38DUu8JaMOw1HHoqGIrdYs09b88M+Fr5F5d4nbf2+3rBxC
Lc11mpyp4EwweNeRm+amKOU7okq9HqG6eZZ3qb+xwuVqbN11VKcUStDYKEnK4HkY
M2BgBC8YJO+i0fYWkBjBfAiNQP4uhk4kSaIXO0SjkduL1pYv35zsTAM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:15 2026 by rpki-client