
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
File: 4FbQUB1DDOD88NsGdbr8kLBdm_U.mft (raw, json)
Hash identifier: t+jPybnfmJpcaH44fe5QllULN/DMt3LA/9wJ9STYt/s=
Subject key identifier: 12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial: 80
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
Manifest number: 1599
Signing time: Wed 05 Nov 2025 20:42:30 +0000
Manifest this update: Wed 05 Nov 2025 20:42:30 +0000
Manifest next update: Thu 20 Nov 2025 20:42:30 +0000
Files and hashes: 1: 3o4efsy6CF7jZ61dtOW7PqQSq94.roa (hash: kBN7u6BGw6aX4jO6ee9sQffgu3wHtY2kw5tnWjAwSDc=)
2: 4FbQUB1DDOD88NsGdbr8kLBdm_U.crl (hash: X+EvAfILC4Q8daDu7NH10rdTdfymtFcSIGt7fHQZK4U=)
3: 8oH6agpp1ENa38mQLZQr1iG0qnY.roa (hash: kCgm9wR/qw1bOTiSB8WF7+qt79rPFX9Gruyq07nzcjY=)
4: Htn5TbuZ0ywFb2QUrta39pHLTsM.roa (hash: W8JiYZ8GhlKTsZI0eWdZQICZ8luw3Ek3h9OwUiFN7yw=)
5: qsVmoq0KHHiMzxcwMrvP3kU9hqo.roa (hash: cWbsDbS0XIg1G0NaeGS0yc6PGzej0S2xn1+oZEyO6vg=)
6: vxiw72qJLhOZWd4axelngyu2BMs.roa (hash: cWyZP78E8QjkwpLE90bWmmtG3kW6i8AXs2mNvKYd69g=)
7: wsGZYljcA1Ick8Kg4FH_ygf-Jf8.roa (hash: JKqvbMmvJoK14+TL/yEi8jX2l01b0FGxFTqnYJsg6Gw=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Validity
Not Before: Oct 15 01:40:43 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=1237FA2C47A961C2F966F3B20BB09D2477AEF307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:1c:dd:e1:32:ba:b9:74:3f:c7:64:44:c7:
56:ee:be:36:7a:80:45:63:f4:2b:18:6d:35:9b:1b:
62:c6:04:b5:ce:f8:53:1b:26:fc:cd:ac:1f:6c:05:
53:4d:b4:c4:57:10:0c:0c:f6:b4:c1:69:6d:69:3e:
2b:3d:f2:d8:ae:1b:c5:85:1b:3d:29:da:19:da:f7:
08:60:29:81:db:3c:a4:92:82:9c:f1:2e:19:ce:0c:
71:ab:07:60:dd:f5:84:93:95:1d:c3:72:ab:c0:0b:
bd:49:06:9b:06:cd:f2:2e:3f:12:da:33:54:97:ac:
57:d9:a1:d5:59:27:2c:88:b4:f9:04:17:3d:4e:8b:
ee:29:6a:43:59:a1:1b:34:84:1c:0b:ab:f8:2d:be:
a0:42:6b:4c:50:f7:95:7c:dc:05:12:64:12:17:c4:
97:a9:b2:1f:ee:f6:e8:89:81:8c:a1:44:2e:d2:a5:
83:b1:af:ba:3e:c2:3b:61:10:be:87:9c:e0:66:a3:
0a:c1:61:d3:84:79:19:f7:7c:82:bc:ed:5a:9e:63:
9e:81:d9:8e:b5:10:e0:b2:c9:e5:14:a8:a8:ed:ca:
1d:71:41:be:7d:97:a2:c2:3a:7a:36:e5:ff:87:71:
2f:46:1b:39:39:72:81:3d:01:18:af:40:4e:cd:dc:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07
X509v3 Authority Key Identifier:
keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:97:19:a2:d7:82:e7:08:d7:a7:91:cb:41:2d:74:76:98:7d:
cc:57:31:3b:bf:e6:20:99:fb:df:1b:b7:bf:d0:28:df:43:18:
a6:e8:e2:ca:08:b8:9a:2d:ca:a3:95:ac:12:12:2d:a7:a7:be:
95:99:b6:e8:61:99:c1:98:ea:fe:52:b6:b5:21:cf:a4:6e:03:
d6:c3:0d:d5:55:56:32:0d:92:96:6f:4a:e8:bd:73:08:b0:a6:
4a:7a:ed:94:1a:9b:61:2a:2d:00:73:d9:a3:fe:46:26:8d:59:
71:df:84:f7:9a:d9:c5:d9:cd:86:21:a3:8f:00:19:8f:7f:61:
24:c4:14:ae:1b:6f:d4:07:cd:e7:89:ca:00:5b:08:55:36:be:
be:36:c1:7e:a5:c7:68:eb:c0:af:d7:3b:4a:5b:8b:e4:78:f7:
36:86:0c:41:26:86:95:dd:02:40:fe:4b:2f:e9:72:96:19:4e:
7b:76:37:f8:2b:fa:18:93:64:ec:04:0c:53:66:10:b0:45:5a:
53:27:84:47:5d:6e:fd:a3:1a:4a:1c:fe:ae:c2:e0:f1:8b:c0:
0e:da:d5:f7:a3:fa:f2:41:a7:c5:1d:ac:d7:7e:e8:af:55:9f:
57:58:d6:4e:7d:61:d5:bc:79:e3:32:20:b7:51:2f:29:0c:00:
6b:dc:73:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:34:25 2025 by rpki-client