
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
File: aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft (raw, json)
Hash identifier: yXwmKXljdDMQV806OL3jIUMv8YshkleRBi2uuqBvXU8=
Subject key identifier: 18:B3:2B:E5:02:65:19:B2:A4:C2:5B:34:D0:B7:D8:9E:D9:18:81:AB
Authority key identifier: 68:EF:44:0A:A3:60:C0:D2:10:35:A8:1A:D2:C2:33:39:D2:23:3F:86
Certificate issuer: /CN=68EF440AA360C0D21035A81AD2C23339D2233F86
Certificate serial: 07
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
Manifest number: 037A
Signing time: Wed 05 Nov 2025 19:20:00 +0000
Manifest this update: Wed 05 Nov 2025 19:20:00 +0000
Manifest next update: Thu 20 Nov 2025 19:20:00 +0000
Files and hashes: 1: aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl (hash: w9JHhZn7fB2sr4edWGQidnDAoFCpHKTWw1cEcUbK2xg=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68EF440AA360C0D21035A81AD2C23339D2233F86
Validity
Not Before: Oct 15 01:44:20 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=18B32BE5026519B2A4C25B34D0B7D89ED91881AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a3:00:31:ed:57:d5:b7:27:a5:af:c9:43:42:
df:b4:e6:be:4f:08:0b:f6:10:ee:7f:3a:e9:fe:6b:
a7:84:b0:a9:bf:a5:50:0d:ad:7e:53:f3:05:96:3c:
27:e9:03:d9:a6:49:fd:56:ff:65:d4:bc:4d:0e:f1:
5c:c7:b9:7f:9d:9b:c7:27:da:ed:c1:af:31:b1:9f:
56:67:3b:f3:91:7d:dd:42:44:a6:56:e0:c3:66:31:
b5:0f:89:4c:03:eb:c4:9d:45:f7:35:88:f6:b1:cf:
6f:00:68:c7:00:01:d9:b1:1b:67:6e:a1:bb:70:43:
d5:70:48:00:4e:34:67:64:f3:af:72:8a:97:6d:ab:
54:f3:09:4c:09:6d:8e:22:b9:f5:21:02:2c:03:e2:
06:bd:be:7b:8b:f9:81:4d:0e:9b:3c:65:88:b9:9d:
a2:d6:7a:9a:78:18:02:78:97:c7:d1:9d:f0:f6:07:
16:6c:66:02:29:77:64:5f:0e:53:97:d6:f2:b2:3f:
b2:1b:81:ca:a0:8d:36:18:53:3b:db:d7:47:d9:95:
fa:a5:2c:6a:7d:10:91:65:ef:ee:5c:cb:51:a7:e5:
60:f2:a0:81:f6:e0:ba:ea:71:c2:2b:cc:ab:fc:fe:
7b:b5:50:01:02:12:3f:51:33:e5:b7:29:29:f3:ec:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B3:2B:E5:02:65:19:B2:A4:C2:5B:34:D0:B7:D8:9E:D9:18:81:AB
X509v3 Authority Key Identifier:
keyid:68:EF:44:0A:A3:60:C0:D2:10:35:A8:1A:D2:C2:33:39:D2:23:3F:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a1:fa:b7:38:5f:1a:e8:33:07:7c:f4:4b:cb:fe:e4:8d:3f:
9c:16:7d:91:ec:5e:1b:64:58:fd:8f:0a:12:ba:da:4f:61:d8:
9b:83:86:61:93:b1:22:4d:30:5b:2b:dc:8a:a3:cb:2c:34:57:
dc:32:21:13:01:d7:dd:58:e6:25:7d:f9:b4:4c:ea:fc:65:68:
78:bc:a5:99:ec:ed:16:46:05:2e:cb:f7:0f:9e:ed:c2:9e:08:
03:21:0f:18:d9:38:1a:b7:46:69:af:58:a8:6c:65:33:c8:12:
a1:73:af:ff:a6:11:fe:47:70:c1:17:c2:41:f1:16:3b:0d:eb:
58:25:6d:21:40:df:f4:38:82:62:52:90:98:72:cc:db:55:13:
30:a4:4c:5d:8d:c1:b9:41:92:45:5c:47:58:18:d6:9c:96:57:
b3:22:1f:f1:13:15:2f:4f:a5:f5:45:7d:ba:ca:46:63:08:62:
cb:26:6a:0c:f4:cd:90:0f:e2:60:83:9d:19:49:2d:35:25:6f:
93:ae:2d:28:2e:7f:c1:b7:3b:16:be:bb:bf:87:90:43:32:f7:
fe:a4:42:e5:b0:19:73:fd:63:60:6b:d9:56:6b:ed:99:46:f0:
48:ad:26:ae:89:64:26:d4:59:cb:25:c5:28:09:26:5f:6a:04:
52:4c:ab:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:46:51 2025 by rpki-client