
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.mft
File: V028Ks3NaYbcc3-y1cgQOUxMB00.mft (raw, json)
Hash identifier: Y7EaQHlZXQrXwYuCBBcfM0tJ6NIYaT+/9kapgPdbjI8=
Subject key identifier: 14:F1:90:2D:FC:E5:A8:D3:13:E9:1C:DE:4F:54:55:53:F1:25:C3:CB
Authority key identifier: 57:4D:BC:2A:CD:CD:69:86:DC:73:7F:B2:D5:C8:10:39:4C:4C:07:4D
Certificate issuer: /CN=574DBC2ACDCD6986DC737FB2D5C810394C4C074D
Certificate serial: 17
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/V028Ks3NaYbcc3-y1cgQOUxMB00.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.mft
Manifest number: 0883
Signing time: Wed 05 Nov 2025 09:41:17 +0000
Manifest this update: Wed 05 Nov 2025 09:41:17 +0000
Manifest next update: Thu 20 Nov 2025 09:41:17 +0000
Files and hashes: 1: OPS6tBILszkGZ2qWvzNn_ja2jLM.roa (hash: 0pElB1Y67dEtnbZgm3pbPkBvEkcCAWDrRuCf5RiXpuY=)
2: V028Ks3NaYbcc3-y1cgQOUxMB00.crl (hash: 88VujC0q3TCN9giYmHDmKMoHpGpRgBmVJgNotSHUeDo=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/V028Ks3NaYbcc3-y1cgQOUxMB00.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574DBC2ACDCD6986DC737FB2D5C810394C4C074D
Validity
Not Before: Oct 15 01:43:21 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=14F1902DFCE5A8D313E91CDE4F545553F125C3CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:ee:d6:a2:b4:93:9f:2f:54:ec:1f:7e:2d:
61:35:67:0b:51:d3:70:65:81:12:ea:a8:c4:54:41:
f5:fa:67:98:9a:1f:f3:77:4b:25:cb:ef:e7:d6:0d:
eb:9a:b4:48:34:6a:36:9e:ec:c4:b6:a4:93:2f:3c:
72:86:ec:ee:bc:6c:f3:e3:69:ee:1b:be:06:bb:87:
ed:fc:98:d2:36:f3:bd:04:de:5c:87:86:09:22:5d:
29:95:72:da:2f:c0:08:33:17:e2:42:d0:00:a9:ec:
55:70:bd:8a:18:63:1c:0b:f8:2f:14:29:46:23:5d:
61:e4:1e:4b:5c:6c:96:b3:ef:12:77:b6:5b:9b:12:
3e:48:07:58:4c:50:91:46:cc:42:42:ee:3a:da:dc:
7d:27:57:a9:56:2d:bd:3b:75:4d:59:ec:da:92:c5:
13:22:3b:50:eb:bd:6b:d9:02:e7:5a:bd:b7:3c:79:
f2:04:ca:b5:2f:e0:eb:94:f2:77:f2:98:86:d1:f5:
11:73:1c:c8:8a:6f:9a:c3:fd:b8:fd:30:3f:80:ba:
c5:e3:c9:5f:a3:06:34:32:93:0d:1c:f4:52:a6:76:
46:de:d9:03:68:fd:b9:38:5d:d7:f9:3c:b7:aa:99:
6b:72:bb:b5:ce:b0:da:c1:c1:a7:43:06:d6:c0:cf:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F1:90:2D:FC:E5:A8:D3:13:E9:1C:DE:4F:54:55:53:F1:25:C3:CB
X509v3 Authority Key Identifier:
keyid:57:4D:BC:2A:CD:CD:69:86:DC:73:7F:B2:D5:C8:10:39:4C:4C:07:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/V028Ks3NaYbcc3-y1cgQOUxMB00.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:ff:92:86:cb:2a:77:a9:c6:bc:d2:45:c6:89:3d:bb:59:0f:
51:0c:d8:b8:b5:97:50:4d:93:e5:af:ed:6b:bb:92:de:57:04:
2b:2b:58:af:cc:11:77:2d:28:4f:c8:56:98:bf:ce:43:6f:82:
2e:0d:21:fb:af:03:24:78:ca:07:66:8c:91:74:77:e3:f5:bc:
f2:87:f9:df:ca:76:e8:93:5f:ce:52:72:e4:cf:68:51:03:d4:
18:4a:26:ce:7e:1d:88:a4:86:72:74:41:8f:25:bc:fa:fa:dd:
7f:d8:13:4b:4b:dd:fb:af:15:fb:f0:fb:1b:9e:7c:84:96:16:
69:b5:b5:c8:1e:02:6e:17:92:66:af:61:ae:65:76:2b:3f:cf:
0c:01:41:ba:a9:5e:ff:fd:3f:65:3e:43:00:a6:a0:81:92:5b:
fd:2b:c9:c7:2d:ff:56:6f:b0:8f:a8:17:f3:51:ac:88:0a:02:
9c:e1:c5:aa:05:57:1a:df:c2:9a:ba:1f:83:83:34:02:f4:56:
88:48:16:52:98:3b:ec:b1:39:f4:b2:2d:4f:56:f5:87:98:d1:
e3:7d:6e:c5:05:b4:98:af:52:7a:a2:6d:a0:60:b4:ca:19:67:
9f:04:0e:41:f7:8d:64:f3:ba:6a:be:d6:f6:b1:a3:29:55:9f:
a2:4b:46:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:56:43 2025 by rpki-client