
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.mft
File: t3OuK5dasuTu_5sXnVolmgyklBc.mft (raw, json)
Hash identifier: I4Uq81YGFbOKCxmULXmzUeNlz8PURbyS6Ns3TXEqxBQ=
Subject key identifier: 1C:DF:29:79:79:4B:A7:39:B6:3B:A3:31:14:6E:81:1B:B9:1A:34:44
Authority key identifier: B7:73:AE:2B:97:5A:B2:E4:EE:FF:9B:17:9D:5A:25:9A:0C:A4:94:17
Certificate issuer: /CN=B773AE2B975AB2E4EEFF9B179D5A259A0CA49417
Certificate serial: 1C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t3OuK5dasuTu_5sXnVolmgyklBc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.mft
Manifest number: 088B
Signing time: Wed 05 Nov 2025 10:01:19 +0000
Manifest this update: Wed 05 Nov 2025 10:01:19 +0000
Manifest next update: Thu 20 Nov 2025 10:01:19 +0000
Files and hashes: 1: 0qbhTrTjhY3huzk5wmqmS67CZxE.roa (hash: Umkljr5Un/JfDGcBvhG3M+BKcW5h4hu4Xz6gdFrLpK8=)
2: 87nuI3Dkk9Afr4DCX_Q1vbbYWhc.roa (hash: edcwT8U/Bq7s7OT5z3s/12fJO+gqyF2mm99ZQ0vjQPM=)
3: DHT-x1TkOwOKsXKXdzSVFdyZOiA.roa (hash: zrUVj4d8FBjsvJ5bVQ0qZBibqZQG/2ABvTWkanKUpZA=)
4: t3OuK5dasuTu_5sXnVolmgyklBc.crl (hash: FptbapiNL9n/675seFMnGDHo5/qUxu9RxHyWCNcSEW8=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t3OuK5dasuTu_5sXnVolmgyklBc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 11:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B773AE2B975AB2E4EEFF9B179D5A259A0CA49417
Validity
Not Before: Oct 15 01:36:40 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=1CDF2979794BA739B63BA331146E811BB91A3444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:3c:60:d9:d4:95:70:23:21:61:de:d4:52:
09:f2:40:07:24:6b:74:55:49:38:f5:94:be:2c:75:
95:1e:79:e5:44:47:2f:93:b8:73:83:22:55:95:f3:
ce:8e:4c:c4:31:35:d3:5c:81:6e:64:ec:00:3e:2c:
37:09:c5:14:e9:4e:99:b1:55:9d:27:67:a5:6f:83:
87:78:d2:fe:f1:64:96:69:4d:23:38:d1:46:66:17:
f3:2a:0e:47:55:2f:fa:5a:dd:38:cd:11:68:b3:4d:
b7:4f:53:c0:23:ea:d0:9c:83:97:d9:b2:ec:63:b4:
f0:5a:ed:c1:ab:7e:b6:83:49:ef:b3:ef:e7:fc:24:
df:0e:66:33:94:90:e4:2d:09:ac:79:b7:10:c6:33:
c3:fc:b5:8d:52:18:8a:e3:1a:36:4c:91:5b:7c:1c:
b9:4c:08:c9:c4:74:e3:2b:1e:74:90:43:5d:d8:43:
0d:1d:ea:fd:ac:a5:47:87:1d:5c:d8:5f:4c:f8:f4:
8e:a8:ab:af:8c:21:31:2b:3f:d9:2f:d5:25:03:9c:
3e:91:fa:56:38:52:5f:31:88:93:aa:4f:bc:d5:4a:
b5:ad:6d:d8:4d:7d:55:50:fd:66:c9:19:a7:4d:01:
8c:5a:2c:b7:f1:70:7f:07:18:c9:d6:9d:c4:aa:75:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DF:29:79:79:4B:A7:39:B6:3B:A3:31:14:6E:81:1B:B9:1A:34:44
X509v3 Authority Key Identifier:
keyid:B7:73:AE:2B:97:5A:B2:E4:EE:FF:9B:17:9D:5A:25:9A:0C:A4:94:17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t3OuK5dasuTu_5sXnVolmgyklBc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:a8:a4:ce:c9:88:c2:53:50:c2:f7:f4:bf:b5:c6:9d:72:55:
1f:a3:ee:e2:31:35:a5:3c:90:dc:78:17:dc:cb:85:bb:af:a4:
7f:6b:aa:b2:db:13:94:d0:c3:8f:4c:93:1a:7b:3d:68:5f:c8:
7f:98:b9:c3:8d:ed:5b:85:bb:2d:92:1c:b5:ea:24:14:d8:31:
36:ea:0b:4f:fe:bb:56:7f:7b:29:5d:ad:c3:fb:62:6c:04:fa:
e9:6c:3c:94:e0:46:b0:2c:66:31:13:ae:0f:10:a1:9b:b5:54:
e9:0c:26:b9:f1:8e:d9:d2:d4:da:98:a1:9a:66:cb:30:11:56:
65:0a:5d:1d:70:3e:68:a2:f1:3a:06:bb:09:86:e1:f9:97:03:
a3:56:02:23:90:f4:9d:00:6f:4d:ce:7e:84:ce:f5:92:7c:30:
f2:6d:2c:53:6d:17:81:28:40:58:9b:ff:28:e4:0a:b8:6d:8c:
80:70:f2:5e:08:ec:28:19:f7:1e:47:68:df:31:ae:2a:b1:2d:
a4:0a:fa:c2:4c:f0:28:9d:85:58:b5:ed:51:79:56:95:60:14:
aa:86:9b:d9:c6:69:22:8b:19:32:a8:c9:7f:34:5e:1a:af:c9:
e4:0d:a4:da:d4:b4:bc:f1:90:08:69:7b:00:55:2f:f1:38:c4:
5e:0d:43:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:35:12 2025 by rpki-client