
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
File: Fnjda2HLZzukQjyBv2OmHdck6EA.mft (raw, json)
Hash identifier: 6093bW2J10/FvidJ4NSrHvAs9DY2LBC9sJoO26Udx7E=
Subject key identifier: F1:91:1C:5A:97:2A:DE:0E:BF:5F:AE:90:03:38:45:05:B7:84:D9:8C
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Certificate issuer: /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial: 58
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
Manifest number: 0CE5
Signing time: Sun 19 Apr 2026 11:10:20 +0000
Manifest this update: Sun 19 Apr 2026 11:10:20 +0000
Manifest next update: Mon 04 May 2026 11:10:20 +0000
Files and hashes: 1: EYGfNhrpED03SCDA3j04KPCoMHU.roa (hash: Omc3MK8n7Cl+W8czNWOZZCvOzhUbS1bZZhk/PXyZLWk=)
2: Fnjda2HLZzukQjyBv2OmHdck6EA.crl (hash: qby137thRZmzz97fcN4EFCbmAEPIp+R/kywVQq/JI5U=)
3: P_RnxjN2rfn-xttBbuWMR30-CTE.roa (hash: KfACiYYqNlTfpO+M/ehKiZfzp56Rx2AN1NTG2QmFVRw=)
4: VPIwXYyEuZnwgAgi_Jf5W-z3t20.roa (hash: dswvtH5ttQq47S/fVFuu7otlyCqbrUoWEQgwqjJfu0E=)
5: WGv-uKhFJlRebGlq0Qwn_W0J1aQ.roa (hash: YphHPqiid+k/RPeBn0bohgNBu2/+SguTxtkx85q2B9w=)
6: WjoTDc1nsKFbk4T0xxpvccbUvd0.roa (hash: aqhHTxWOGvCblxEpW82QA7iAnPOn78AXSfx8AS6z0ZE=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 12:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Validity
Not Before: Apr 15 01:36:35 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=F1911C5A972ADE0EBF5FAE9003384505B784D98C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:7b:0e:5d:92:62:b5:5a:c0:d5:df:9d:e4:
2a:c5:84:55:0b:eb:0f:23:ad:2f:1e:b2:28:cf:f8:
40:3c:d9:db:a2:8f:9b:06:71:17:12:16:ac:cd:c5:
52:50:b3:21:e1:05:6b:87:74:07:1b:b9:07:d4:91:
ce:9b:6a:15:e5:47:ea:07:4f:aa:6d:d4:76:8a:38:
5f:92:e5:15:64:7a:96:1f:f5:e4:c4:a7:49:b4:21:
33:84:1e:c4:18:d3:a8:24:85:d9:25:f0:67:0a:96:
cb:e9:99:42:c3:86:0c:38:af:48:67:34:2c:37:49:
a8:b0:a8:8d:4a:76:d2:81:fc:cc:9d:57:16:87:13:
9b:90:51:32:22:a2:41:90:d3:74:5f:27:13:6b:ac:
8a:e1:e6:53:24:4a:07:c7:59:63:ff:bc:c1:59:0c:
ff:20:7c:7c:98:d1:29:7b:92:ea:a8:86:0d:9d:5b:
ab:24:78:bd:0d:03:0d:60:56:88:05:e4:d0:82:64:
34:d4:78:0b:e8:da:40:14:ac:5c:5c:ae:53:3c:c9:
5e:99:b9:4d:a2:eb:1a:18:19:75:97:d1:91:52:18:
df:7f:cd:a1:3f:7d:96:66:4a:e3:01:57:c6:5c:3a:
f3:b3:d6:23:df:97:c4:a0:50:74:38:73:cc:23:11:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:91:1C:5A:97:2A:DE:0E:BF:5F:AE:90:03:38:45:05:B7:84:D9:8C
X509v3 Authority Key Identifier:
keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:48:c9:89:f0:5e:d0:c4:fd:74:03:f7:cb:79:cd:00:f3:ca:
fb:a6:5a:4a:66:96:d2:82:40:10:ce:02:4b:31:3f:dc:fc:71:
88:85:49:23:e1:09:e7:75:df:6a:00:5e:5c:b8:e5:a5:b2:a0:
6b:05:36:0c:6b:65:20:7b:8c:a9:63:ce:ee:18:9e:80:1f:d4:
2b:65:7d:e6:19:d0:52:d9:17:11:43:04:61:ab:a8:20:b0:6e:
6c:dd:db:92:60:48:9a:69:37:7f:69:9c:65:da:10:d8:cb:e6:
d1:f8:e4:92:05:f1:c5:46:81:ea:13:1e:9d:b7:4a:fa:d7:7b:
70:98:f6:ea:fb:a4:65:de:2f:41:ac:8e:9e:c8:40:05:86:81:
e7:3f:11:03:a8:e2:ba:c8:0d:95:c2:02:53:52:9c:a1:d5:ea:
0f:23:e9:f6:14:fd:7e:a6:55:94:b5:9a:e6:e5:31:a3:58:74:
fb:ae:0c:d7:43:f2:4e:31:fc:48:03:53:af:7f:6f:3e:69:ea:
59:89:03:fd:e8:9e:c2:f2:6c:56:65:ef:78:12:27:29:8e:5f:
c8:21:86:9a:f7:1d:26:be:5e:d3:c0:77:e2:04:0c:30:71:44:
dd:e3:b2:ec:51:b7:4e:cc:4f:d8:6b:6e:8d:be:e9:cd:34:2f:
27:4b:c1:2f
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjc4
REQ2QjYxQ0I2NzNCQTQ0MjNDODFCRjYzQTYxREQ3MjRFODQwMB4XDTI2MDQxNTAx
MzYzNVoXDTI3MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoRjE5MTFDNUE5NzJBREUw
RUJGNUZBRTkwMDMzODQ1MDVCNzg0RDk4QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKvBew5dkmK1WsDV353kKsWEVQvrDyOtLx6yKM/4QDzZ26KPmwZx
FxIWrM3FUlCzIeEFa4d0Bxu5B9SRzptqFeVH6gdPqm3Udoo4X5LlFWR6lh/15MSn
SbQhM4QexBjTqCSF2SXwZwqWy+mZQsOGDDivSGc0LDdJqLCojUp20oH8zJ1XFocT
m5BRMiKiQZDTdF8nE2usiuHmUyRKB8dZY/+8wVkM/yB8fJjRKXuS6qiGDZ1bqyR4
vQ0DDWBWiAXk0IJkNNR4C+jaQBSsXFyuUzzJXpm5TaLrGhgZdZfRkVIY33/NoT99
lmZK4wFXxlw687PWI9+XxKBQdDhzzCMR1DECAwEAAaOCAfIwggHuMB0GA1UdDgQW
BBTxkRxalyreDr9frpADOEUFt4TZjDAfBgNVHSMEGDAWgBQWeN1rYctnO6RCPIG/
Y6Yd1yToQDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU0L0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRjazZFQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRj
azZFQS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85NTQvRm5qZGEySExaenVrUWp5QnYyT21IZGNrNkVBLm1mdDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAEZIyYnwXtDE/XQD98t5zQDzyvumWkpm
ltKCQBDOAksxP9z8cYiFSSPhCed132oAXly45aWyoGsFNgxrZSB7jKljzu4YnoAf
1CtlfeYZ0FLZFxFDBGGrqCCwbmzd25JgSJppN39pnGXaENjL5tH45JIF8cVGgeoT
Hp23SvrXe3CY9ur7pGXeL0Gsjp7IQAWGgec/EQOo4rrIDZXCAlNSnKHV6g8j6fYU
/X6mVZS1mublMaNYdPuuDNdD8k4x/EgDU69/bz5p6lmJA/3onsLybFZl73gSJymO
X8ghhpr3HSa+XtPAd+IEDDBxRN3jsuxRt07MT9hrbo2+6c00LydLwS8=
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:05:24 2026 by rpki-client