
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.mft
File: 2zuIrk16jERG-aguEsb9kWvoRaw.mft (raw, json)
Hash identifier: nylcoEmQYXQe2lEsP3gjsJx+oVO2rIauKItCfoUtMP8=
Subject key identifier: CE:11:AD:B7:00:82:51:49:60:B1:4B:A2:52:CB:74:18:D7:A4:D1:FF
Authority key identifier: DB:3B:88:AE:4D:7A:8C:44:46:F9:A8:2E:12:C6:FD:91:6B:E8:45:AC
Certificate issuer: /CN=DB3B88AE4D7A8C4446F9A82E12C6FD916BE845AC
Certificate serial: 08
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.mft
Manifest number: 033F
Signing time: Wed 05 Nov 2025 15:20:03 +0000
Manifest this update: Wed 05 Nov 2025 15:20:03 +0000
Manifest next update: Thu 20 Nov 2025 15:20:03 +0000
Files and hashes: 1: 2zuIrk16jERG-aguEsb9kWvoRaw.crl (hash: 8rhdedvsec3rP4hvOEcRS0m1YI0D6m/R7jhn8y3JjLE=)
2: w58ZEx12K4igsXALMZytyuSX7bo.roa (hash: m0JRwbsjHHSqVnqw9z0olXm9gs5iH6L30fsEWoguAfM=)
3: wghH3pFHDcdVZB63cJZaX-PKgA8.roa (hash: PkEdWuf5SZj7o5WAo8nE/wDExC5MtekKNPmnzi34WtY=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB3B88AE4D7A8C4446F9A82E12C6FD916BE845AC
Validity
Not Before: Oct 15 01:44:31 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=CE11ADB70082514960B14BA252CB7418D7A4D1FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:7e:ed:81:98:b7:88:1b:ea:ba:5b:a0:ea:
a6:06:3f:e4:fc:89:e9:1e:2c:d6:cf:52:5a:7b:f8:
61:43:d0:8e:17:91:48:9a:59:26:b6:53:42:b7:b9:
cd:f5:5b:e3:41:a1:91:37:b9:d6:25:1d:63:96:62:
e4:c1:60:4a:f4:15:34:6b:5a:a9:1b:a8:14:dc:92:
b2:64:bd:5c:d6:8c:5b:cb:e7:f2:d1:55:d3:26:ed:
c9:24:bf:ad:19:98:40:58:be:22:18:70:25:89:87:
14:72:61:cb:50:1d:f6:27:78:cd:a2:0f:2d:4f:74:
4b:77:b0:54:15:0c:a2:33:06:c0:91:04:9d:d1:ff:
56:ce:14:2e:3a:41:00:e0:c0:5b:b4:f0:cf:4c:97:
38:87:ef:d1:b9:ee:bd:af:2b:b3:dd:73:94:7f:a6:
ed:d9:07:7c:7e:7c:d3:f7:7e:13:9b:fd:5a:cd:b0:
38:31:00:4f:5e:49:04:a6:6d:a9:4e:c5:92:f0:92:
88:b4:ec:4d:ca:b6:05:d2:8d:70:2b:d2:9f:a2:79:
bf:6b:f9:59:be:87:6b:37:44:b8:2c:0a:ee:f4:7e:
b0:26:28:23:d1:26:a4:db:a6:3a:24:d5:d9:56:4f:
4f:ea:b8:b3:c3:ce:5f:70:95:60:af:92:25:08:1a:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:11:AD:B7:00:82:51:49:60:B1:4B:A2:52:CB:74:18:D7:A4:D1:FF
X509v3 Authority Key Identifier:
keyid:DB:3B:88:AE:4D:7A:8C:44:46:F9:A8:2E:12:C6:FD:91:6B:E8:45:AC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:68:5e:4d:7b:f2:49:c8:6e:d3:64:de:20:3f:72:38:5c:9e:
05:c2:9c:da:31:75:2c:e1:21:74:c1:42:0b:c3:eb:9e:b1:de:
1e:fc:ec:ab:03:f1:1b:c0:d3:20:f6:7a:e8:bc:a3:35:f9:e2:
47:0b:d8:04:9f:1f:4f:b4:d1:b8:59:ba:10:30:62:bb:47:86:
58:86:43:47:e4:88:cb:04:0f:d8:32:4c:d9:97:e5:cf:c0:1f:
3a:e0:00:94:7a:d3:57:b1:0d:b2:bd:89:39:d9:77:15:f5:a1:
19:f1:4f:c3:13:6d:bb:08:04:ef:1d:e8:cf:bb:8a:c8:b0:66:
22:27:c3:35:7b:88:ae:e7:b1:d8:47:cb:31:d0:1f:fc:51:ba:
a4:dd:2c:4e:22:2c:c3:22:a3:b6:a1:62:b1:89:0b:3f:db:8b:
76:a8:17:d9:41:06:31:42:1c:56:87:f4:07:f3:d5:b0:2a:9e:
74:eb:32:18:cd:39:14:0e:fd:82:50:87:1a:b3:57:c5:29:9b:
27:de:60:45:37:18:f4:a1:07:a4:02:7c:12:a8:17:6f:d8:a9:
7e:35:ea:47:f4:37:28:c0:9f:41:15:f0:e3:bb:94:b8:ad:ad:
8b:1a:c9:b9:12:df:1c:d2:a7:de:df:a3:03:99:0e:63:22:e9:
cf:7d:2c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:34:44 2025 by rpki-client