
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.mft
File: ilcFHISivweHSee7NL4ZZ44TERk.mft (raw, json)
Hash identifier: dFrlqLdv+BSJnqzi7jVAcqwZFqYuyNruKvO7mQ9HFjw=
Subject key identifier: D1:9D:BC:4D:FA:68:06:DD:64:99:FF:F2:5E:07:99:5B:B4:00:DE:65
Authority key identifier: 8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19
Certificate issuer: /CN=8A57051C84A2BF078749E7BB34BE19678E131119
Certificate serial: 57
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.mft
Manifest number: 0977
Signing time: Wed 05 Nov 2025 13:22:45 +0000
Manifest this update: Wed 05 Nov 2025 13:22:45 +0000
Manifest next update: Thu 20 Nov 2025 13:22:45 +0000
Files and hashes: 1: QY2z08QoWHcbX6UJwUVZlm4BiqQ.roa (hash: /lwLOJlJ93pJL027CjqRk1LqIQ3pqxxdYL5j5TTKWqo=)
2: ilcFHISivweHSee7NL4ZZ44TERk.crl (hash: Xe1SCYDWvBT4ExvalPsX0ksbgO5ctKLUvqVpQQb0kfw=)
3: qFR0pV79N9nIwok4TNYG6bYGvkc.roa (hash: wPqx/oHOQwnS65qW91LuX4IuJ2vBsHcuW9b+erz+azA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A57051C84A2BF078749E7BB34BE19678E131119
Validity
Not Before: Oct 15 01:35:08 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=D19DBC4DFA6806DD6499FFF25E07995BB400DE65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:d1:c4:88:d6:59:03:dc:9c:5d:3a:af:0f:
79:17:8a:3e:e8:c8:77:23:7a:9c:95:f4:da:30:b1:
5a:a4:59:bc:c2:8a:c8:71:8f:7d:b6:8d:e3:a8:a3:
5a:07:c0:75:5e:f8:77:d0:05:ab:4f:25:e1:10:2c:
fb:30:aa:7a:2d:f2:63:fc:46:6e:c5:73:0c:35:d7:
d7:92:07:d8:21:f2:fa:5e:fc:2b:63:29:47:f5:3f:
35:02:9c:13:f0:31:6c:05:ff:54:a3:e1:fe:a8:49:
1b:99:17:73:5c:95:36:c2:56:43:3b:9d:08:d9:06:
6e:ee:60:b0:a7:ff:8d:ba:02:57:c5:55:03:31:ac:
8f:6e:24:6b:4e:46:3b:0a:68:5c:3a:55:52:a3:b1:
a6:a1:67:3e:22:e6:fb:50:80:9f:f4:b3:26:98:68:
d8:c8:d7:d3:21:62:3b:1e:14:da:9f:1a:75:f1:09:
4b:86:fb:79:74:b6:19:15:56:54:25:84:e2:0c:23:
cd:d8:82:2d:08:ff:c4:31:75:d7:2f:ba:19:12:64:
70:4b:d8:1e:d9:f4:63:3a:ad:2a:17:2e:b1:4e:5f:
92:16:4c:70:89:41:4a:d3:b6:34:64:28:bb:e1:82:
7e:bc:87:00:77:21:de:fa:1b:25:a3:ef:77:b3:91:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9D:BC:4D:FA:68:06:DD:64:99:FF:F2:5E:07:99:5B:B4:00:DE:65
X509v3 Authority Key Identifier:
keyid:8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:62:04:6a:d1:20:9b:4e:54:a8:58:22:a8:21:58:cd:ab:77:
d7:30:58:e1:ed:d8:e5:0b:93:5f:e7:7a:a9:3e:cc:3c:be:28:
31:f1:d7:e4:7f:d5:f6:26:21:da:76:62:bc:5f:10:d7:12:f3:
dc:10:44:b4:65:d1:c2:de:d2:a9:f0:76:d3:c4:e0:e8:60:72:
00:42:4d:e8:59:ce:41:d9:bc:85:bb:d4:c1:ea:30:eb:d2:e6:
32:63:cd:a6:5d:9d:f4:e7:5f:ec:52:72:bf:12:5f:3d:01:e2:
ea:b5:cc:e3:f0:36:ac:13:0c:1e:85:c7:d3:55:d3:fc:7b:c8:
39:01:51:d5:67:99:6c:f7:8c:7b:6d:1c:99:0c:cc:dc:f0:f5:
27:69:16:14:1e:0d:d4:aa:49:04:9a:71:88:50:9a:8c:fa:fa:
cb:7a:8e:08:2f:db:b1:23:e2:00:1d:6d:96:78:3b:2a:05:ec:
30:83:71:25:7d:fb:a2:7e:70:82:e4:31:cc:4e:ff:03:68:02:
00:8f:3e:cd:b1:9b:cc:0a:5a:a3:4f:ac:08:33:0a:57:39:ee:
0f:a9:3d:1f:ff:49:4b:d3:b0:81:15:42:53:c5:67:4e:53:58:
2f:a4:b2:59:87:ba:97:e9:6a:5f:cd:50:f9:37:a0:1f:69:6f:
eb:e4:72:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:19:24 2025 by rpki-client