
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39067/iO29iHNLjbs1hqbQWbimV7-zohg.mft
File: iO29iHNLjbs1hqbQWbimV7-zohg.mft (raw, json)
Hash identifier: yGFh/2Nhf/miOOa49ZRhHyuVQ7WQEHEg1da5jOvOn1A=
Subject key identifier: B7:97:1C:6B:F8:55:DE:C8:E0:81:D1:49:0F:AB:C0:6F:B8:15:CB:AC
Authority key identifier: 88:ED:BD:88:73:4B:8D:BB:35:86:A6:D0:59:B8:A6:57:BF:B3:A2:18
Certificate issuer: /CN=88EDBD88734B8DBB3586A6D059B8A657BFB3A218
Certificate serial: 24
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iO29iHNLjbs1hqbQWbimV7-zohg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/iO29iHNLjbs1hqbQWbimV7-zohg.mft
Manifest number: 08B2
Signing time: Wed 05 Nov 2025 07:35:15 +0000
Manifest this update: Wed 05 Nov 2025 07:35:15 +0000
Manifest next update: Thu 20 Nov 2025 07:35:15 +0000
Files and hashes: 1: Xr7e2ET1HkWuFM2jbdaM9bLSd10.roa (hash: K/oKWAVwlCWal01ggpcxJkKGp+Rl3OVPevL1KE/PiRg=)
2: iO29iHNLjbs1hqbQWbimV7-zohg.crl (hash: rsCVkmcvJq/WReQr3s/pkEUGqlnklv5Pd+FQCFhzapI=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/iO29iHNLjbs1hqbQWbimV7-zohg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/iO29iHNLjbs1hqbQWbimV7-zohg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iO29iHNLjbs1hqbQWbimV7-zohg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88EDBD88734B8DBB3586A6D059B8A657BFB3A218
Validity
Not Before: Oct 15 01:31:30 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=B7971C6BF855DEC8E081D1490FABC06FB815CBAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:31:f9:37:84:af:85:18:df:67:14:e5:e4:
e5:9d:d3:23:f4:88:07:95:e2:a6:6a:44:46:23:cd:
19:5c:07:0f:a7:67:5c:11:f5:fb:e5:ea:4e:46:4c:
77:40:e6:1a:53:42:3d:b0:c2:91:b5:f9:fb:4a:bb:
af:00:3f:16:1b:88:a8:2b:76:03:5b:54:fd:7b:30:
52:4e:c2:af:b3:98:7f:ff:fc:b7:78:09:27:d2:44:
78:5a:f0:60:58:c4:1c:44:c4:cb:83:38:8c:b4:d0:
b5:91:77:39:8a:59:3d:98:e1:b9:d9:81:3b:98:42:
8d:17:45:f2:b0:c7:b1:55:5b:a9:07:6d:5b:ff:ac:
8d:43:a7:d4:82:0c:02:60:d1:8b:d7:18:fe:f2:6e:
44:cc:09:bf:13:30:24:11:e6:48:b7:5c:cf:fb:0f:
b9:c9:28:4f:6a:5d:53:be:5d:2c:b8:8e:97:45:86:
74:31:32:01:37:35:3a:64:99:50:80:29:7a:ee:e0:
57:b2:b0:aa:a6:77:77:b0:9e:6b:e5:d8:f5:28:00:
ad:24:c8:c4:f3:c3:40:bc:fc:a5:f7:a8:78:53:82:
16:7c:39:4a:50:f2:cd:e7:a2:65:c0:44:9f:c7:b0:
f0:14:92:3e:c5:11:e2:3b:3d:20:86:fb:74:a6:ca:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:97:1C:6B:F8:55:DE:C8:E0:81:D1:49:0F:AB:C0:6F:B8:15:CB:AC
X509v3 Authority Key Identifier:
keyid:88:ED:BD:88:73:4B:8D:BB:35:86:A6:D0:59:B8:A6:57:BF:B3:A2:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/iO29iHNLjbs1hqbQWbimV7-zohg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iO29iHNLjbs1hqbQWbimV7-zohg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/iO29iHNLjbs1hqbQWbimV7-zohg.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:14:12:8e:a3:83:b1:eb:c8:eb:e3:f4:3b:47:56:de:b9:d5:
35:84:72:05:ea:b1:6e:09:88:c6:6f:e9:a5:9b:ee:c0:8b:97:
3e:f7:3e:bf:09:8e:2d:66:98:1f:5d:56:ee:43:18:bd:26:cd:
85:c9:0b:2c:9c:d8:6b:a7:81:3b:95:74:38:8d:d5:6d:81:82:
0f:1f:c3:bb:e4:03:e4:2f:71:3b:29:79:9c:9a:b8:f1:a8:a4:
f8:57:8b:90:81:09:ae:31:3b:64:12:f8:d0:0d:6f:e6:23:09:
8a:26:c0:bb:64:20:38:86:0b:6b:44:db:0f:5f:24:08:cd:6c:
ae:18:b1:ce:ee:5f:1d:a3:7e:9d:1b:fa:4c:4c:95:f3:0a:e8:
67:3c:cb:d9:42:4d:07:18:05:9e:2a:af:7d:2e:eb:d5:13:5f:
ca:5a:c6:d2:cb:f5:40:12:a1:6b:3f:80:67:b2:1e:45:f3:54:
d3:c0:9c:de:3a:1f:0c:20:fd:84:55:f8:cf:e4:7b:58:82:a9:
3f:d5:e8:e7:a6:04:32:84:12:f2:6b:82:82:62:1b:e4:1e:92:
d0:77:3d:17:a6:12:33:d0:97:c4:2e:b8:74:c5:ad:5d:c3:5d:
33:f7:7a:70:6d:a8:6e:83:59:a6:36:72:fc:20:9e:7e:3c:0d:
86:5c:fc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:20:52 2025 by rpki-client