
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft
File: DDDSD1aGuuqd0oV4siuy4eiUGYk.mft (raw, json)
Hash identifier: 49ZL7xqZ59tIjik2WuZnINtKctN6cko8u2f/dx3p5J0=
Subject key identifier: 22:CA:B7:49:DE:4E:59:7F:1C:94:A0:05:14:9D:51:B3:23:9F:71:69
Authority key identifier: 0C:30:D2:0F:56:86:BA:EA:9D:D2:85:78:B2:2B:B2:E1:E8:94:19:89
Certificate issuer: /CN=0C30D20F5686BAEA9DD28578B22BB2E1E8941989
Certificate serial: 1D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DDDSD1aGuuqd0oV4siuy4eiUGYk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft
Manifest number: 089B
Signing time: Wed 05 Nov 2025 14:33:35 +0000
Manifest this update: Wed 05 Nov 2025 14:33:35 +0000
Manifest next update: Thu 20 Nov 2025 14:33:35 +0000
Files and hashes: 1: DDDSD1aGuuqd0oV4siuy4eiUGYk.crl (hash: rVNuARMb8bn635wv5H4T/eXc9FM7NjMDhWeCt7g5iUc=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DDDSD1aGuuqd0oV4siuy4eiUGYk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C30D20F5686BAEA9DD28578B22BB2E1E8941989
Validity
Not Before: Oct 15 01:38:29 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=22CAB749DE4E597F1C94A005149D51B3239F7169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:60:09:3d:40:ca:45:e2:c9:9f:22:8c:28:
6e:f5:ae:e8:e4:b2:f7:32:7c:42:a9:01:77:56:0d:
80:d6:42:43:e4:d2:3f:6a:43:fd:cf:7d:e4:18:7a:
c6:8d:1e:c5:65:e2:e5:ea:e7:1d:47:f4:80:a1:76:
32:2c:2f:b7:19:1d:8d:24:0a:d7:e6:e7:44:fb:5b:
87:08:f0:73:70:e6:7a:64:08:95:b0:0e:16:df:b2:
6f:76:e5:57:e8:77:d2:fd:0c:30:db:02:20:b7:99:
b9:59:89:d3:59:d5:46:a7:c2:1e:19:e2:15:f1:04:
83:90:ae:ef:f0:b4:b5:73:b7:6a:00:21:6e:b3:4f:
26:85:a0:a1:66:9c:be:72:cc:d8:a0:b5:23:f3:62:
71:9b:db:2e:fb:9d:b0:d1:2e:87:d9:46:cf:3b:a2:
ac:bb:df:71:d8:a6:7f:bd:45:6a:f6:8f:91:a9:4e:
f5:f7:ab:ad:4b:1a:6c:e0:1f:49:9f:17:06:19:bb:
b4:b3:a4:68:aa:e3:ba:d1:21:84:bb:e7:0c:e1:49:
c0:cc:96:2c:b6:98:42:db:94:ad:57:a0:c8:ed:9d:
98:2f:e8:8a:76:36:1b:4d:12:8a:ae:14:18:be:de:
84:86:67:15:cf:27:b9:42:4a:c2:a4:0a:d3:c9:36:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CA:B7:49:DE:4E:59:7F:1C:94:A0:05:14:9D:51:B3:23:9F:71:69
X509v3 Authority Key Identifier:
keyid:0C:30:D2:0F:56:86:BA:EA:9D:D2:85:78:B2:2B:B2:E1:E8:94:19:89
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DDDSD1aGuuqd0oV4siuy4eiUGYk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:5b:1b:34:5d:df:44:7b:7d:b6:53:cc:64:1d:8c:9d:33:5e:
fb:f9:76:ce:07:d6:1e:2c:1b:0d:c4:34:ec:68:11:38:66:cf:
b7:b3:4d:16:39:aa:b4:16:10:66:d2:6c:e8:c3:46:97:88:bc:
18:51:b3:eb:61:f9:c8:9b:83:7c:c3:9d:98:55:cb:99:55:8b:
cf:37:a8:44:0b:d3:50:88:66:a8:89:93:4d:69:83:af:1f:9a:
77:fa:41:a4:41:fd:5f:57:b7:ef:c8:2a:d6:a8:3c:b5:6e:bb:
f0:74:2d:9d:76:34:19:02:33:df:2c:70:bf:58:31:16:6a:2e:
4f:3f:a9:f8:54:29:b3:52:77:46:f2:36:4e:20:83:d8:28:81:
24:2a:70:30:67:f9:db:a3:c3:f4:9f:ef:bc:ff:34:22:4b:ab:
e2:6e:f4:66:eb:06:43:af:f4:96:29:10:42:33:c3:b1:4e:d7:
b0:8b:14:57:12:d6:d0:78:11:18:f6:6a:36:1e:b9:55:48:4c:
d1:41:30:e3:de:9c:8c:fc:d6:4d:63:6f:07:eb:1f:0c:30:95:
7d:58:a5:f7:43:22:96:a3:aa:b6:08:bf:65:da:32:20:0b:27:
fe:30:b0:b0:a7:61:19:51:96:e8:c6:9d:b7:b3:f1:14:52:a3:
70:8e:2c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:15:57 2025 by rpki-client