
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft
File: 4sshHyk-VOhOPL2dIrCIRnW7HGM.mft (raw, json)
Hash identifier: RRk+Ixb2t4XnuMPmpYsmuXhndQnh4ySb/MIMhtOURoY=
Subject key identifier: 7C:62:18:37:61:D8:73:BF:23:C8:28:A2:16:BC:E2:11:3D:D8:E6:73
Authority key identifier: E2:CB:21:1F:29:3E:54:E8:4E:3C:BD:9D:22:B0:88:46:75:BB:1C:63
Certificate issuer: /CN=E2CB211F293E54E84E3CBD9D22B0884675BB1C63
Certificate serial: 29
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft
Manifest number: 08D2
Signing time: Wed 05 Nov 2025 23:26:55 +0000
Manifest this update: Wed 05 Nov 2025 23:26:55 +0000
Manifest next update: Thu 20 Nov 2025 23:26:55 +0000
Files and hashes: 1: 4sshHyk-VOhOPL2dIrCIRnW7HGM.crl (hash: 6y702nQQuVIa9Rcx79zqkqjMNI3oeN2FcEbA4IEbVPc=)
2: zzZErtNTULQ2uoC7X82asqhqcrM.roa (hash: ImdLOupiDXgN1tZoM7LptMrV8F/hhEW4SWrSti478SA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Nov 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2CB211F293E54E84E3CBD9D22B0884675BB1C63
Validity
Not Before: Oct 15 01:37:48 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=7C62183761D873BF23C828A216BCE2113DD8E673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:83:2f:41:c9:a5:54:99:3e:2f:ac:f4:fe:ed:
59:a2:65:4e:98:e3:0d:f9:28:8a:8c:3c:9a:9b:4c:
49:65:5d:b6:5d:02:ed:51:3f:78:e7:e6:8f:bf:a6:
c0:bc:7d:44:ff:33:27:8b:a6:41:47:06:49:1a:28:
d9:6c:35:a7:34:3e:97:37:95:90:14:e5:fd:88:6f:
be:83:2d:ba:8d:94:b6:50:a6:10:c2:a0:d3:23:68:
5b:65:26:ce:6d:9b:13:c7:d0:d1:9e:15:1f:14:25:
3b:20:58:41:f4:de:30:62:fc:42:6c:fa:1e:4c:ca:
ac:8b:2d:15:fd:93:b9:73:0d:0e:4e:31:01:cc:d8:
14:79:c7:96:2d:af:34:65:4e:3b:bf:aa:20:62:77:
b7:5d:b4:56:cc:43:f5:d8:a4:2a:ec:7f:a4:c6:78:
58:08:5d:64:50:15:8c:6b:54:b5:6a:39:5b:96:2e:
2d:91:8c:cd:94:cf:a2:9b:dd:1c:ef:11:ce:02:c6:
56:9c:40:59:3b:49:a9:b9:4d:50:d8:43:63:94:98:
57:88:6b:b1:2d:5b:93:1c:4d:c8:15:78:ac:f6:57:
8f:cb:29:00:7e:a5:b4:14:e1:55:9b:e2:f2:9c:61:
ac:78:c8:0d:c8:17:da:9a:0a:49:3d:da:5a:34:36:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:62:18:37:61:D8:73:BF:23:C8:28:A2:16:BC:E2:11:3D:D8:E6:73
X509v3 Authority Key Identifier:
keyid:E2:CB:21:1F:29:3E:54:E8:4E:3C:BD:9D:22:B0:88:46:75:BB:1C:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:74:48:fd:30:22:1c:da:41:42:7e:a1:08:35:08:02:38:5e:
63:e2:dc:87:41:5c:eb:70:21:54:ec:28:e8:aa:18:d6:cd:e3:
03:15:04:88:ba:d2:5c:59:9b:2e:aa:f6:df:16:28:32:f4:84:
89:7d:e9:aa:41:71:65:fb:f5:00:71:e2:c8:4a:17:7b:f6:3b:
5e:78:19:af:93:98:b3:29:df:8d:10:4d:95:d2:78:60:9f:b7:
a3:25:27:c2:53:95:7f:3e:f8:4f:f5:d2:06:2b:0b:9c:20:9f:
f8:43:76:70:90:38:df:b8:8d:6a:41:10:af:5c:dd:b7:ac:50:
5a:96:08:c4:61:f8:e4:2a:9f:c0:2f:9a:fb:08:cd:a2:45:ff:
79:c9:1e:fc:c9:a1:b9:05:96:58:82:29:14:d9:e6:af:56:47:
99:f8:92:68:db:a7:92:d6:fe:c5:55:65:69:e8:53:bf:d4:f3:
51:f7:00:75:14:b4:e1:df:67:23:3a:c3:b2:60:cb:45:92:81:
cf:43:04:5f:46:4c:b9:b8:c9:90:5a:ca:d7:2a:bd:78:04:6f:
64:0b:09:d1:bf:49:95:92:26:30:4f:52:79:ec:41:11:7d:a4:
56:89:5a:72:ea:4e:2f:1d:6f:e2:1c:c4:5a:3c:1c:59:08:4c:
82:dd:cf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 04:44:16 2025 by rpki-client