
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft
File: gf7ENcw7DVXepAW2GL1BjhrlZIE.mft (raw, json)
Hash identifier: IqeCQwTSCu8GdbFVW8gOH9nbQVrTzVhiKrKKggvbwKs=
Subject key identifier: 41:1C:8E:C9:6E:B2:3D:E3:47:25:44:5E:ED:1F:2F:32:62:95:B8:9F
Authority key identifier: 81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81
Certificate issuer: /CN=81FEC435CC3B0D55DEA405B618BD418E1AE56481
Certificate serial: 16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft
Manifest number: 0886
Signing time: Wed 05 Nov 2025 19:25:50 +0000
Manifest this update: Wed 05 Nov 2025 19:25:50 +0000
Manifest next update: Thu 20 Nov 2025 19:25:50 +0000
Files and hashes: 1: gf7ENcw7DVXepAW2GL1BjhrlZIE.crl (hash: NWT2o3djuQVX0vQEzuNiD3S1QjiqIW7njCG5hJrEHSA=)
2: x4apSZ7TGJaw6MPYuqY07mklkt0.roa (hash: 4TDP7PW2OqSMHenkcxixcOIODjjozfCq0VfZI2McdRg=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81FEC435CC3B0D55DEA405B618BD418E1AE56481
Validity
Not Before: Oct 15 01:39:43 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=411C8EC96EB23DE34725445EED1F2F326295B89F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:b4:95:e5:11:5e:2b:7a:1a:4a:96:eb:f3:
e7:1f:2f:e1:b3:6e:25:51:4b:45:ca:35:fd:17:98:
b2:cc:1b:55:4d:e8:0d:90:24:68:88:07:61:10:a3:
d6:1c:6e:44:9e:8d:3d:60:4a:87:73:e2:1b:1e:0e:
14:3a:15:6c:26:bd:74:65:99:f7:2f:dc:09:15:95:
c2:99:ee:4c:ff:5f:76:db:ca:ed:77:70:7e:18:da:
a2:b8:19:20:e2:a2:e6:c6:d4:c3:d9:22:17:fa:10:
4b:ed:aa:89:66:7b:66:4e:a9:38:d2:f2:71:49:12:
29:d2:f0:35:fd:d8:40:95:62:f2:af:ee:ab:4e:13:
c8:cd:16:27:c5:b3:ce:82:9d:2c:fe:ba:75:3b:b9:
55:61:5f:f0:04:25:e8:e9:84:a2:96:0b:f4:79:eb:
10:49:05:3d:b9:2f:ed:78:12:63:e2:f9:ea:c9:09:
e8:16:5f:27:f5:49:52:34:86:91:97:97:d2:fa:2d:
0c:a5:d8:eb:b9:7d:dc:7e:75:d3:ce:3d:be:a1:1c:
ac:74:20:a7:db:48:c2:1e:83:81:55:b6:1f:86:7c:
b8:bf:f8:49:ca:61:69:6e:46:41:1b:5b:eb:59:4e:
5a:b1:c1:6f:0b:86:f9:39:f6:ff:08:7c:7b:f9:ef:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1C:8E:C9:6E:B2:3D:E3:47:25:44:5E:ED:1F:2F:32:62:95:B8:9F
X509v3 Authority Key Identifier:
keyid:81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:05:e2:80:57:ae:85:4e:f4:2a:31:5f:a4:c9:6b:c7:30:24:
b6:d0:13:f4:56:3a:78:d9:92:7a:9e:cb:a0:2b:9d:3a:f0:82:
05:c5:f6:ad:30:7f:2c:1a:2a:92:c9:d1:a6:97:82:c4:e8:de:
39:57:5f:43:4b:35:30:44:19:6b:9e:0c:c8:7c:85:eb:bb:66:
8a:39:ea:85:7a:27:37:16:a7:0c:08:8c:1d:70:55:66:fb:1c:
55:35:a6:03:88:f1:cf:71:e8:d4:6d:78:5f:68:79:1f:6b:80:
7b:d7:fc:4b:77:40:eb:3e:d6:8e:d3:a3:98:ee:ff:4d:44:77:
52:2f:fb:74:66:93:7a:d8:b3:29:ab:5c:e4:43:cf:d3:55:65:
3f:74:66:1e:44:42:8b:5e:80:eb:f6:74:74:67:06:3d:da:a8:
f2:77:e6:c7:26:07:2f:8f:fb:70:25:c7:23:4f:a1:14:98:a8:
83:f8:56:3d:bb:e5:c7:c7:ae:d9:71:d3:d4:d1:28:fe:27:9e:
8c:fb:7a:35:c4:03:a6:0d:4e:12:55:44:98:05:60:1f:d7:b1:
f3:44:31:e3:96:54:52:0e:37:6c:65:05:db:da:97:a6:1a:73:
0f:38:cd:08:eb:f2:4e:1d:87:8c:e3:e7:3e:e0:27:44:ef:4c:
09:45:50:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:13:07 2025 by rpki-client