
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.mft
File: FOzeMx2z7RRZ2eR41zAXD0xw6bc.mft (raw, json)
Hash identifier: f5WNUTEIENfjLcbTH7bq5/3eUSyufpk8eM1JJWxm6vY=
Subject key identifier: B7:6F:50:E3:B8:1C:8B:CA:EF:5B:23:A3:27:69:0B:F1:F3:E9:40:9C
Authority key identifier: 14:EC:DE:33:1D:B3:ED:14:59:D9:E4:78:D7:30:17:0F:4C:70:E9:B7
Certificate issuer: /CN=14ECDE331DB3ED1459D9E478D730170F4C70E9B7
Certificate serial: 18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.mft
Manifest number: 0884
Signing time: Wed 05 Nov 2025 10:47:25 +0000
Manifest this update: Wed 05 Nov 2025 10:47:25 +0000
Manifest next update: Thu 20 Nov 2025 10:47:25 +0000
Files and hashes: 1: 42nt_a5zxcbW2NmMx-fiXc0zeYo.roa (hash: Wl0+GVezb3R/gQPgkIXP0sr0U/s8osL/FRnzm79Eouw=)
2: FOzeMx2z7RRZ2eR41zAXD0xw6bc.crl (hash: pBzLoCBfCSBmyvq2G5IrUdI2+r1ll4HC2xGKDm3fu6I=)
3: pYe2umhsUNZG0IMZMPV0S7vNLHg.roa (hash: X/2FztzywbduOahkbJpGYwaP25DU6GX5RCMMhXdEUbs=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 11:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ECDE331DB3ED1459D9E478D730170F4C70E9B7
Validity
Not Before: Oct 15 01:43:30 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=B76F50E3B81C8BCAEF5B23A327690BF1F3E9409C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:54:9a:5e:cc:9b:f0:77:c1:79:00:09:88:
c3:0a:25:64:ac:b4:57:c4:8f:66:95:64:b1:65:a4:
46:16:96:38:ec:b5:4c:11:48:76:b2:61:25:ef:06:
57:e5:2d:2d:28:a5:2b:e9:31:2c:45:b6:81:5e:04:
d5:9f:ce:47:b9:82:ba:78:8a:60:7c:a9:29:d8:f6:
96:f7:89:ab:90:02:17:6a:f2:b4:e6:51:bc:42:1e:
a5:e6:07:92:e6:71:4c:d8:53:7e:32:db:32:4b:8d:
82:c2:91:9a:6e:77:05:15:aa:50:b0:12:a6:5c:cd:
d2:15:99:85:e2:17:0f:e6:08:72:45:ef:29:34:a3:
58:a6:82:c5:eb:d4:a0:9b:c9:4e:fb:60:68:48:04:
94:e9:dc:47:07:a6:74:c6:b0:9b:53:e5:12:8e:69:
79:aa:79:36:7a:c4:d0:6b:04:b1:33:82:1a:2d:a9:
34:56:86:52:b9:43:0b:41:a6:c9:8b:28:fb:8c:32:
83:ca:61:5d:d6:93:05:c9:fb:c1:24:53:77:b7:83:
ce:6d:50:88:5c:b0:3b:4c:4e:6c:5b:1e:1f:19:6e:
d6:eb:7a:b5:0c:4d:1e:78:79:69:ce:9b:82:da:85:
3f:ac:54:39:5a:d5:5e:e8:bb:ab:80:fa:37:89:a6:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6F:50:E3:B8:1C:8B:CA:EF:5B:23:A3:27:69:0B:F1:F3:E9:40:9C
X509v3 Authority Key Identifier:
keyid:14:EC:DE:33:1D:B3:ED:14:59:D9:E4:78:D7:30:17:0F:4C:70:E9:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:00:c5:15:4d:5a:34:74:f3:9c:25:0f:80:b0:9e:34:bb:1a:
82:9b:fe:2c:91:ee:56:3c:84:58:90:33:27:a3:5a:19:15:3e:
89:72:17:35:e4:a1:81:a0:fa:17:24:12:a4:59:0a:89:4f:65:
d3:ae:5e:c2:49:5f:9d:85:67:67:bd:13:df:ad:8e:12:65:37:
75:e0:98:ae:17:ce:c1:a3:35:08:2c:e5:1b:72:30:b3:58:39:
fd:74:1e:bd:c1:66:da:b3:20:25:a4:de:94:f6:a3:04:29:ac:
4a:83:7e:01:60:f8:85:36:88:03:4f:e2:3a:8d:0c:2f:27:e6:
de:21:16:88:ff:dc:ab:23:df:7c:84:f9:63:ca:b1:d0:82:81:
ce:0b:f4:5f:e1:f5:c4:fa:40:5c:de:bc:8b:ec:80:ab:7a:46:
8c:2a:62:51:cc:60:cb:03:90:74:8d:6b:87:9d:ca:84:ba:0b:
93:f2:4e:05:f9:4d:66:80:ab:a6:5d:7e:03:7f:10:d3:f1:51:
ac:cd:d2:f8:dd:5b:5a:fb:37:d1:57:07:a4:93:96:02:f5:6c:
65:6a:94:ef:eb:f0:5e:f1:4e:1a:7d:d6:ad:41:ba:1e:ff:27:
3e:90:5d:9a:f7:bc:c3:aa:60:0e:69:13:db:b3:c2:09:f4:83:
ed:f0:d6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:33:28 2025 by rpki-client