
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
File: Mttw_7inIon1ZFB2hkRljFSqZOk.cer (raw, json)
Hash identifier: F+bYvY1ILecR7m90NHrlqCGH6ZIpuNNeMNbDpnN1EoY=
Subject key identifier: 32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 722E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Tue 15 Sep 2026 01:37:04 +0000
Certificate not after: Wed 15 Sep 2027 01:30:02 +0000
Subordinate resources: IP: 42.83.0.0/18
IP: 103.205.48.0/22
IP: 153.124.224.0/21
IP: 182.23.216.0/21
IP: 203.211.32.0 -- 203.211.55.255
IP: 219.100.88.0/22
IP: 219.103.0.0/19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 13:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29230 (0x722e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Sep 15 01:37:04 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=32DB70FFB8A72289F56450768644658C54AA64E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9c:82:60:d0:74:15:7f:bc:46:73:6d:b5:8a:
3d:b8:14:91:9c:47:1d:b2:2f:4f:50:4b:7a:90:e8:
4f:1d:f7:80:cd:e3:89:d6:53:38:46:96:ee:81:ac:
f6:45:32:01:00:73:61:23:a9:b9:d5:e9:35:53:dd:
b1:46:ca:47:62:b8:b7:a4:93:09:3c:e8:0b:75:c5:
ce:89:2e:1f:bf:42:3d:9c:c9:c7:dd:3b:03:38:9b:
df:27:4c:ff:c0:b0:b8:7e:fb:ab:f0:fc:4f:d5:df:
61:1c:6d:a9:28:88:b1:61:15:ae:92:f6:16:dd:6e:
51:9a:f7:c4:4a:b0:99:79:af:89:3c:83:19:82:b3:
d3:5a:2b:1f:3b:19:d5:d1:c6:fe:68:0b:f8:cc:6a:
46:55:e1:9e:36:05:28:e3:26:d5:16:ee:c7:e3:45:
cb:c5:3c:ec:18:33:51:54:64:f1:bf:2f:54:84:ec:
5f:55:e9:59:24:4e:ab:a1:e0:b5:69:b0:f3:30:c3:
c2:e4:be:98:b2:46:bd:47:2d:f2:31:2a:dc:fe:1c:
a3:58:30:35:cb:fa:f4:4d:a5:8a:37:19:b2:40:16:
c8:20:1a:c6:b3:c0:1c:e9:db:68:77:ce:ef:97:a7:
4b:44:5b:a2:3f:e8:89:fb:85:c7:f8:ff:d9:71:4e:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.83.0.0/18
103.205.48.0/22
153.124.224.0/21
182.23.216.0/21
203.211.32.0-203.211.55.255
219.100.88.0/22
219.103.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:f5:ba:0e:01:a7:83:84:01:e8:c2:e2:76:d3:3c:58:c7:61:
ea:d4:68:a4:a7:7d:c5:96:a2:61:f2:87:0a:70:54:db:da:61:
ce:18:36:43:ab:5c:0e:62:6e:49:18:b3:12:4b:2d:de:9c:11:
ba:1b:6b:2a:d2:58:20:b7:7e:42:29:ef:5c:39:a8:39:01:eb:
b4:e2:99:48:00:43:16:79:99:01:10:d1:3e:0f:74:ca:02:54:
86:e0:11:07:e2:e2:62:bc:af:7b:fd:b2:c4:eb:83:31:78:c1:
9d:b2:d2:1e:28:c5:58:ea:45:93:f4:4d:b1:9d:13:60:cc:26:
2b:69:2a:3a:b9:59:4b:49:43:d0:7c:61:e1:69:cc:9f:1f:a9:
d3:ea:1b:b7:d6:cc:d4:08:87:52:6a:a2:58:26:0a:01:e3:c3:
7e:bd:e4:c0:cc:f3:62:d2:63:4f:52:57:f1:a3:ae:52:93:07:
ab:e7:a3:d5:76:60:2f:52:9d:97:2a:11:bf:00:f8:ee:b1:79:
2c:1e:25:f5:80:15:11:08:32:fe:d9:31:ef:69:d2:2b:82:fe:
b2:b6:03:c6:74:b3:60:cc:85:60:57:f8:38:1e:30:fd:8d:20:
5e:d5:b6:60:a6:8f:38:0c:a9:cc:9e:61:fc:4b:55:19:77:c9:
48:86:fa:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:33:11 2026 by rpki-client