
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
File: EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft (raw, json)
Hash identifier: oKpzI82szyUFpYtHI/Sbdpw7Lc9w1/izacu7uDM6bVY=
Subject key identifier: A2:DB:FF:23:8A:85:9E:EF:BB:4D:B7:93:FD:7F:3A:61:A1:2B:2C:E6
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial: D1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
Manifest number: 1B0C
Signing time: Wed 05 Nov 2025 12:42:27 +0000
Manifest this update: Wed 05 Nov 2025 12:42:27 +0000
Manifest next update: Thu 20 Nov 2025 12:42:27 +0000
Files and hashes: 1: 0PAFmAhpbvgLdbmDJ2k--iIBYHk.roa (hash: TBfXVVvl+I0JOMNOaqJ2W8PgyyEjUUuyDsyxlWdqHQ8=)
2: 0srX8y3Jti07Hnnicc6k3BJYxP8.roa (hash: 61jZ1lE6xB9tfCWmSxBSU9uF8bAHLEcOth1NkEiAkMc=)
3: 9xscJtcTW-WeHnNRVY5DMCVbbPE.roa (hash: zksblTLVuKotYLK7oArWGaAO8yzsfbDfhbrvdg5mY84=)
4: AQTDxTcTCI45hOxBEWNl9A73EE4.roa (hash: VDyCiePXtRnfNcZR9iXhw09mC6UtKgholnIkcdgrcWk=)
5: EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl (hash: lnR2J2+5KhWBPt+bb/IzM62NCQLNgQwkm4WWWvZBJsI=)
6: J5Rz8oXbQEJk8gssAfFbzH27kWE.roa (hash: /NvhgjAlB+2N48IuXxAhT1RxoomG+cancg5GOevnSpk=)
7: Muz4veYwYMXngxvdeFbGQkfqNzU.roa (hash: 9ktCjshvkIjF784V91Opr/PUKTq9lV72q0Qty0VQTlM=)
8: NAMn1afCARECE5vUVMtAYD75tTI.roa (hash: Rx5R0Q3ISExp8EqhSw0eelilGT5MkxakecoZB8o5nro=)
9: aCKUeZU3WSLhACxmTMwCPJCZLUw.roa (hash: gTGxvDID6/8y43sm1M1aG0OHolLQnUlbjN1MRV66t2Y=)
10: b5b-aW5uwh5i28IiNA7cctuW7DE.roa (hash: HWEP2PDQOID+gOurylLkMhJOtRgCxlzrSon9J10JluM=)
11: dlqlP92ne5iXEr_Jps1uHbvFaho.roa (hash: f3GSmSdhBD6ujxXoBZu17In7bwsMfVTCYKMhuNl4Ofs=)
12: iu1Fhx_wusf6qNPH07bxdsJ9tjs.roa (hash: 8CjfmAubG1rN3/yYGa9jSzoh1YjrWwT5yuraFxJJrRQ=)
13: rwNTvoN2RBjF4jD-4xLiPW6WfmE.roa (hash: Gs930vS1gAJpIdv986KapZr9qmnD8HKt/jvA2d7np90=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Validity
Not Before: Oct 15 01:41:22 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=A2DBFF238A859EEFBB4DB793FD7F3A61A12B2CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:6c:d2:72:c9:1f:db:e3:b2:49:f6:c7:c7:
5c:ec:bf:ad:a9:5a:2c:07:07:6e:da:77:23:a3:26:
90:c0:eb:93:89:97:11:10:e8:dc:23:34:fa:73:14:
12:bb:f5:16:71:5b:30:6a:77:f7:78:37:98:8f:c4:
63:1a:60:d2:d7:26:59:58:e2:65:58:14:44:77:00:
ec:0e:21:92:0d:08:88:a4:82:ec:d1:9f:81:63:8b:
c6:c4:64:d2:9c:ab:05:6a:1c:1a:d2:2f:c0:70:14:
8f:58:09:6f:0d:9f:c1:d7:3e:c6:36:8a:5c:24:0d:
a7:4a:f4:fe:95:75:d7:6d:47:e0:14:19:b1:2e:17:
b3:09:88:04:18:4c:17:c0:d5:00:c5:ab:29:39:2a:
b2:17:87:43:bd:58:13:04:fd:88:18:8c:42:9f:2a:
40:55:7b:38:4c:25:7d:e7:f7:54:a0:16:ae:d9:2f:
55:10:b9:eb:7a:1a:a2:b6:80:17:5d:a9:26:96:e1:
49:7a:7f:ab:6b:84:9f:58:0f:82:bf:7c:e9:48:81:
d5:74:34:fb:3a:0e:48:7c:88:1b:d6:ae:f4:05:0e:
fc:ac:6d:13:39:0f:f5:d4:51:7e:26:19:2f:35:64:
51:2d:2a:34:cc:fa:36:81:e0:fc:a7:1d:24:57:ed:
13:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DB:FF:23:8A:85:9E:EF:BB:4D:B7:93:FD:7F:3A:61:A1:2B:2C:E6
X509v3 Authority Key Identifier:
keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:68:4e:67:c2:4a:9f:22:1a:69:f1:2a:88:4f:88:e5:a6:dc:
23:b5:44:98:3f:21:6d:48:de:4c:77:3a:e8:4a:14:26:70:d5:
d3:27:9f:bf:09:36:56:c7:53:c4:63:1c:74:f3:92:d0:90:fd:
7f:4e:59:9d:a3:d9:15:ef:4e:05:89:1b:b0:0b:da:b4:49:76:
a2:09:bc:61:6c:a4:5a:d5:33:07:0d:09:9b:40:1b:5f:0f:cb:
0b:83:9d:48:fc:67:2d:ac:8b:25:8a:ed:95:fb:97:18:f1:e6:
9a:2a:10:35:a4:d4:e8:48:c0:f9:52:7d:02:28:0e:65:d6:1c:
43:27:ab:f2:6e:b0:0e:ff:87:fc:d9:c9:28:2a:fa:77:9d:4e:
07:d1:43:1c:fb:3f:26:2c:17:e8:ed:4b:fc:f9:47:d5:a3:20:
cb:af:10:2e:00:c6:2e:c7:e8:6d:44:fe:c2:8d:7b:6b:5d:47:
07:0f:a1:76:a4:5b:7b:69:f0:b7:67:cd:f3:cd:b7:64:9a:9e:
7b:07:21:cc:81:5c:e2:e7:71:04:8e:ce:42:bf:95:ba:40:06:
65:a8:6f:01:f8:b3:40:6a:86:30:d2:d6:48:6d:a3:38:ff:aa:
58:6f:c3:20:a3:90:cb:57:1e:4d:f9:1e:47:79:d4:12:1f:e2:
98:27:40:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:35:37 2025 by rpki-client