
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
File: EGsfPWSeWiWqE0DBi9anwkzzavY.mft (raw, json)
Hash identifier: 0vEcPHKJP8K/AC2vDHI0RJjGisLkva9h77s0WYGadsY=
Subject key identifier: 9F:43:94:A1:74:51:28:07:29:79:62:39:15:2E:4F:FC:37:A6:46:D7
Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
Certificate issuer: /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Certificate serial: 7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
Manifest number: 1B1F
Signing time: Wed 05 Nov 2025 16:48:25 +0000
Manifest this update: Wed 05 Nov 2025 16:48:25 +0000
Manifest next update: Thu 20 Nov 2025 16:48:25 +0000
Files and hashes: 1: EGsfPWSeWiWqE0DBi9anwkzzavY.crl (hash: jPI57aLKFNvN6u4zP6LeGzJOe4pLgjEzQml78byjYaY=)
2: YWd22z7LkVnQ86yvKuf6YaTPKaY.roa (hash: MqEa+DXNOZq+Xq84zBDHoPCWVp4C0Z78MnsOFgSiseQ=)
3: gtQK8JECG-3DawQ4sBR8H346b_4.roa (hash: UiJpUdwK/ebHHAOpREeiNfhkvcS1zlhxLYITgAv6PtA=)
4: yi4SZ1tm2kyicQrYGj3wDznRMzg.roa (hash: BnVqRLbuzInCNkeTTMDnTo4Dcaa1Et7JdOMqmTpy6gA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Validity
Not Before: Oct 15 01:40:48 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=9F4394A17451280729796239152E4FFC37A646D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ff:8a:3d:4c:8f:7c:33:f5:32:0e:54:25:b7:
62:b1:9c:7b:f5:e0:99:fb:4b:b7:43:0c:6b:5f:9c:
3a:4f:fb:ed:39:aa:01:c6:96:1a:a6:9f:69:6b:04:
2c:6c:fb:3d:08:05:bb:4f:9b:df:b3:f6:26:fa:f0:
f2:a4:00:bf:a6:e5:2c:f3:73:13:3a:ce:25:27:3b:
39:67:64:71:bb:7d:86:36:77:79:ed:09:49:b0:e3:
1e:d7:58:49:d5:18:d1:13:1a:95:b0:ef:86:ef:e5:
42:8f:41:29:23:44:ad:64:21:29:7f:12:8a:35:5f:
f8:be:f1:1d:92:7e:83:40:6f:ad:13:7c:d5:c6:43:
b3:df:03:5b:70:58:9b:fb:b8:62:95:2f:6d:0b:41:
6f:5f:09:10:23:aa:9c:f7:0a:1c:37:a6:b5:72:99:
53:54:3f:97:f9:79:8b:d0:17:b1:dd:f8:f1:a0:e3:
cf:c3:9d:d9:d4:92:50:f4:fe:96:89:a3:6d:bd:9f:
35:55:f0:4c:df:74:1d:13:10:9a:b1:ee:d0:f4:40:
2d:6b:19:14:78:a9:39:57:3a:5d:2d:62:a5:d4:34:
88:f0:da:db:48:5f:aa:6e:d1:ec:a8:8c:48:26:b2:
c8:f5:d5:1f:66:d3:81:56:24:55:69:65:67:8d:46:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:43:94:A1:74:51:28:07:29:79:62:39:15:2E:4F:FC:37:A6:46:D7
X509v3 Authority Key Identifier:
keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:00:92:0f:6e:be:5b:80:86:e9:f5:c5:5c:93:26:91:ec:4f:
f8:13:92:7d:88:2d:6c:32:f3:32:6b:79:69:cd:f6:d6:06:e6:
57:73:52:f9:13:27:64:12:d8:4d:af:8b:c5:c2:56:e2:42:b1:
76:7e:ec:62:c2:4d:fd:35:2a:93:96:4e:c1:74:53:79:14:f1:
fd:a7:61:cf:d4:71:11:a0:a5:6d:80:69:92:1b:81:60:c6:f7:
b2:6c:5a:02:8b:96:c6:64:14:78:35:5d:c4:68:5c:fd:7d:8b:
74:bd:cf:1d:18:e1:39:59:d1:c5:43:59:ca:b2:74:47:fa:6b:
0f:ed:7e:8c:cf:8e:3f:8f:94:63:0c:be:71:17:83:8b:b6:be:
9f:e8:8b:33:8c:b5:ce:f9:a0:a9:63:f1:71:97:56:48:96:fa:
00:59:d4:d3:b5:70:3a:8e:3b:f9:15:80:ac:d5:7e:ec:8b:61:
e3:90:9f:a6:f5:7b:a7:97:a1:99:4e:db:cb:06:91:50:34:7b:
f3:4d:0b:ac:d6:68:12:ef:00:07:ef:c7:98:08:18:94:71:4b:
46:e8:83:21:58:6e:d2:c1:4a:c6:3e:cc:ca:0b:50:d5:6d:09:
c9:6e:c9:b3:09:a5:d8:e3:e1:c8:a1:bc:50:b6:8c:59:5f:da:
f9:a4:6e:3b
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMDZC
MUYzRDY0OUU1QTI1QUExMzQwQzE4QkQ2QTdDMjRDRjM2QUY2MB4XDTI1MTAxNTAx
NDA0OFoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoOUY0Mzk0QTE3NDUxMjgw
NzI5Nzk2MjM5MTUyRTRGRkMzN0E2NDZENzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPP/ij1Mj3wz9TIOVCW3YrGce/XgmftLt0MMa1+cOk/77TmqAcaW
GqafaWsELGz7PQgFu0+b37P2Jvrw8qQAv6blLPNzEzrOJSc7OWdkcbt9hjZ3ee0J
SbDjHtdYSdUY0RMalbDvhu/lQo9BKSNErWQhKX8SijVf+L7xHZJ+g0BvrRN81cZD
s98DW3BYm/u4YpUvbQtBb18JECOqnPcKHDemtXKZU1Q/l/l5i9AXsd348aDjz8Od
2dSSUPT+lomjbb2fNVXwTN90HRMQmrHu0PRALWsZFHipOVc6XS1ipdQ0iPDa20hf
qm7R7KiMSCayyPXVH2bTgVYkVWllZ41GTpcCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBSfQ5ShdFEoByl5YjkVLk/8N6ZG1zAfBgNVHSMEGDAWgBQQax89ZJ5aJaoTQMGL
1qfCTPNq9jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMDMvRUdzZlBXU2VXaVdxRTBEQmk5YW53a3p6YXZZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRUdzZlBXU2VXaVdxRTBEQmk5YW53
a3p6YXZZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDAzL0VHc2ZQV1NlV2lXcUUwREJpOWFud2t6emF2WS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA0AJIPbr5bgIbp9cVckyaR7E/4E5J9iC1sMvMya3lpzfbWBuZXc1L5
EydkEthNr4vFwlbiQrF2fuxiwk39NSqTlk7BdFN5FPH9p2HP1HERoKVtgGmSG4Fg
xveybFoCi5bGZBR4NV3EaFz9fYt0vc8dGOE5WdHFQ1nKsnRH+msP7X6Mz44/j5Rj
DL5xF4OLtr6f6IszjLXO+aCpY/Fxl1ZIlvoAWdTTtXA6jjv5FYCs1X7si2HjkJ+m
9Xunl6GZTtvLBpFQNHvzTQus1mgS7wAH78eYCBiUcUtG6IMhWG7SwUrGPszKC1DV
bQnJbsmzCaXY4+HIobxQtoxZX9r5pG47
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:16:16 2025 by rpki-client