
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.mft
File: uu0ONae1jawhWffxzXQKVLnotAc.mft (raw, json)
Hash identifier: C+aVz3IDGSPzBYgU7UzPNadu5Wl2r4Wev0g1/1rL/mY=
Subject key identifier: 88:02:F3:77:6B:AF:FB:03:19:47:C1:83:28:C9:5D:53:D8:AB:21:44
Authority key identifier: BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07
Certificate issuer: /CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
Certificate serial: 3F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.mft
Manifest number: 08F4
Signing time: Wed 05 Nov 2025 11:21:17 +0000
Manifest this update: Wed 05 Nov 2025 11:21:17 +0000
Manifest next update: Thu 20 Nov 2025 11:21:17 +0000
Files and hashes: 1: R53rS6GslAA14Wl0i509bDI4Fco.roa (hash: HpOAMB8ZGv46vUXQZhpYEMcUPD5y4467Mn2BvlUq0HE=)
2: oyVLhwG0E7bcRX-swQcNbzGBmEI.roa (hash: nc28MAjwpQzybYQOnUvJLVudPA63PZmsIe0mAOOwtB8=)
3: tPjYG2DjHTPRmCaEKmR01qrC_HY.roa (hash: 1PTNGOxN8q5M5q7pkkUyE2u7L4fWMvuFu+G/GqGFl8Y=)
4: uu0ONae1jawhWffxzXQKVLnotAc.crl (hash: Ky/a8qKP2nI6xHFyYfUk8ZfFxCx4MGTRfE4/AjxnDsk=)
5: xJGz7jpi6zfMq66yIRgle-hq_IQ.roa (hash: r6PuAufHFFqGpkZvPTbHyGxxmAA0/Xr5hFsuAqhlGGo=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
Validity
Not Before: Oct 15 01:37:11 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=8802F3776BAFFB031947C18328C95D53D8AB2144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0f:8e:eb:fc:ae:51:42:a0:be:33:a4:78:b5:
37:47:fd:65:30:88:65:db:3e:71:bf:39:91:78:d7:
38:ab:98:df:a3:20:46:1e:7d:36:6f:9b:5e:5d:43:
67:f0:3b:6d:17:36:51:49:c0:b2:12:21:01:76:10:
c6:fb:1f:47:a3:37:06:ed:5d:7d:00:56:19:fa:d6:
e5:85:9d:a9:64:1a:a8:e9:d4:e8:8b:f7:27:86:0b:
9d:82:be:db:33:fb:70:83:96:c2:5b:c6:14:a8:10:
3d:3e:4b:0b:ca:f2:92:cc:d2:42:a6:ba:ad:31:b4:
f1:05:14:4a:a1:29:e4:7b:b4:04:f5:e8:27:f3:74:
6e:6b:66:6b:84:ca:94:ed:c5:5f:ba:f4:77:3f:eb:
15:a5:47:c8:e9:01:ab:21:df:a9:8a:b4:5b:ad:8d:
13:4f:5a:a9:9c:06:0a:6d:db:94:22:46:f2:ca:63:
5d:f8:5e:87:9a:f8:33:4b:d3:a1:f3:48:ba:c1:ae:
b7:05:24:63:3c:b0:af:15:b8:31:d3:82:30:79:00:
d1:3c:3b:9b:2e:58:e0:79:54:96:94:c3:68:61:ea:
8e:75:a1:dc:18:b4:65:a2:86:7c:c0:23:94:54:09:
48:59:a9:e9:d7:b4:81:89:59:08:ce:6f:fa:6c:9d:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:02:F3:77:6B:AF:FB:03:19:47:C1:83:28:C9:5D:53:D8:AB:21:44
X509v3 Authority Key Identifier:
keyid:BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a5:f0:dc:63:1d:2c:6d:2b:9e:4f:7c:8f:cf:a7:95:b4:d9:
bc:0b:af:b7:15:d5:18:8b:47:8d:41:54:61:4b:38:64:42:d5:
f3:0f:2b:08:42:6e:a0:36:a1:50:62:6a:08:f3:70:da:a1:05:
8c:69:c1:b0:30:21:f7:02:03:4c:7a:e7:db:64:d3:61:62:3e:
d3:9f:e1:7c:2f:26:4d:be:57:6b:20:2b:d4:44:dc:b2:c2:b7:
bb:92:40:59:c2:97:c0:f8:aa:47:23:90:22:b7:0f:2e:e7:4b:
67:30:65:3b:df:1b:c6:a2:5f:9b:84:ef:dd:5d:97:89:23:f3:
d2:1d:b3:32:4e:37:99:7a:fb:28:f2:cb:5e:2b:3f:77:66:f1:
6c:f3:49:31:18:db:ab:a9:d5:dc:7e:a6:b7:6c:57:4e:6a:23:
1a:3d:d1:4f:e1:48:5e:06:3e:40:2b:68:76:e8:54:47:3c:3c:
b2:1f:93:6c:9b:0a:0d:3e:fa:d2:07:0a:84:4f:96:fe:30:a0:
e3:77:30:2c:5d:85:5b:80:90:05:d2:6b:4c:db:30:fe:ba:17:
59:20:91:1f:14:08:f7:21:9f:40:61:a5:5a:37:c0:d4:7b:41:
5f:5a:a6:8f:5f:3a:2e:5c:4b:45:81:52:a4:d0:c3:88:8e:71:
f2:b5:55:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:43:24 2025 by rpki-client