
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
File: 7hOsz353sCkq4XsFNAIRyPlxdgs.mft (raw, json)
Hash identifier: lF1Ca8GIaAtHRtT7GMjhvO8OiwKkFe5I0lYggFau7dw=
Subject key identifier: A1:57:2E:60:59:AA:59:06:0E:81:A7:95:85:0D:A2:F0:07:C1:3A:A4
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Certificate issuer: /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial: 55
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
Manifest number: 08EE
Signing time: Wed 05 Nov 2025 14:23:28 +0000
Manifest this update: Wed 05 Nov 2025 14:23:28 +0000
Manifest next update: Thu 20 Nov 2025 14:23:28 +0000
Files and hashes: 1: -PNhwY-CTFXNbkCw5hJCg2ul2vY.roa (hash: UlEsdIoEBg/ozDa6A5PrkMwysa3z6Udu3mvwhAghppM=)
2: -dWSZcplAkkVaLrw3-4fA6xILZk.roa (hash: b5XesvpiwLFCjWInyGyISjj0C4cYYXAk+WjS07Sl3l8=)
3: 0-lo3vDW5MFUxpJ61I9Fn9oL790.roa (hash: c4cQFL1RLjPuB3yrsUTE6nO13Wpu9CleUZrgO/EtNmo=)
4: 2DHFSAnBZCnl1dUno4n5m6s3ePQ.roa (hash: ZbkZSpBhHfDj0trMoRTlOKxMpYIg9U8GLLBRB1c9YHo=)
5: 7hOsz353sCkq4XsFNAIRyPlxdgs.crl (hash: fRtFRHKHnd61QijlMGGMPkyfxHR+PNwXNeI4XvRsL9s=)
6: BkA8wyb8wW-wUM7VW6oPScpAa3c.roa (hash: SWTK7ZnqM8yHvUMKBTyOUXDewy5cp5fXqoSaN/6NwFw=)
7: E9Cfwkk7I4Ed2GLUeKe1BBYh1E8.roa (hash: Pjcc1xt1JqcICoEXnHyEDqI2rpaOVHeLOuV6tvPZ+wA=)
8: JZs_gJSmFUdRrEPINLNMDeQ5mfg.roa (hash: qPAfdnse695pbwQEURXXN8DSAMJizwjYaZsxcXgu79U=)
9: WKC66I9GyGwxG7nc_jmRlk8okDI.roa (hash: VOY/oC7HiH9g9Q10MyDIEdxJAri1VguN/mDZK7xEMM0=)
10: aAiPFOXOtgBnt9tATwCsOIScD2Y.roa (hash: 2otb2/fXwO3ZDqK7Ed2Qum2SCLHUMKjtXEfj64hwARQ=)
11: cqRWRI5fGlV0lCiv21ZSnMyeeK4.roa (hash: az91/TW7neaOosGcmRgu+OWLKUCto1S7i+7TPXijYaM=)
12: hHFuTlwo7DH4aE2NTwWoalMa1Gs.roa (hash: P5cSelIHfRErRfSAuqmJayW7X02Wo8RLt7hbsLvmeKs=)
13: x6pG1mwUhjl1eXAI4SzzBTtrKYE.roa (hash: xmXXGF3m6vOT9UuakmjGH1Irfq6dmU5Vkvj3cV5HVnc=)
14: xQ6bWu0BKuQdAIJZG2MMHBdF130.roa (hash: /WO6GXJacN59MeJ391bnvIF+h3itO5C1k1hfLLl8ke0=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Validity
Not Before: Oct 15 01:31:17 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=A1572E6059AA59060E81A795850DA2F007C13AA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:3b:f4:8c:d7:04:25:47:ed:0d:44:65:3e:
85:54:48:9a:0e:b7:4c:3c:5a:2e:3b:7b:2d:aa:bf:
b8:24:01:16:7e:7b:75:fa:9a:36:6d:5e:47:84:d7:
45:a2:e2:60:14:20:1a:2c:0b:a7:77:03:08:b3:b9:
fc:32:03:26:23:2e:dd:e3:e8:ed:f9:cf:f0:9f:ff:
f2:7d:d0:e8:57:ba:bc:03:05:d4:7c:af:c1:32:ed:
fb:b2:cf:01:f1:39:58:ab:aa:6d:df:4d:56:79:89:
af:7a:37:44:b4:7c:78:1e:30:66:75:d3:ce:73:fe:
13:2f:b0:3a:0f:e2:28:aa:14:f8:97:66:78:cc:2f:
56:89:6b:58:f8:15:24:c7:f1:2f:df:11:37:a3:ac:
80:48:1d:b8:a4:4d:fb:ff:cc:27:34:1f:c4:b2:ef:
2c:e5:63:b4:ed:30:5e:ac:0b:8a:38:c9:c8:ac:22:
eb:b2:43:a4:18:7d:a5:cf:96:37:e4:b3:57:54:85:
a3:98:e7:04:a4:13:69:74:8b:24:29:4b:fa:29:f3:
c0:1f:98:6c:07:96:cc:90:d4:35:14:aa:f2:f1:d9:
38:07:d3:1f:4e:57:b2:1a:46:c8:ad:3e:ae:88:8d:
f9:36:88:85:1c:ab:c6:0e:3d:7f:f6:f4:ef:87:4f:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:57:2E:60:59:AA:59:06:0E:81:A7:95:85:0D:A2:F0:07:C1:3A:A4
X509v3 Authority Key Identifier:
keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0f:65:f0:2a:d8:ef:bb:c5:21:83:2c:a7:1c:eb:ee:d6:1b:
b7:c1:e9:60:cd:12:76:80:c9:f5:c3:57:15:70:a4:db:00:11:
c8:8b:f3:51:e4:8a:ff:1a:2e:20:0d:f8:e5:4c:1c:1c:f6:d9:
72:ed:6f:8c:3b:bf:64:9b:ce:0b:76:37:aa:d5:d9:c9:9f:1a:
fa:f3:74:61:1f:8a:4c:69:fa:99:c3:fc:be:3e:49:34:9a:ce:
ec:25:58:42:ea:b9:51:81:a3:14:b5:35:4d:c4:69:40:70:12:
6c:7e:ec:b8:70:50:7b:7b:17:a0:60:12:6e:db:12:f6:38:69:
12:ae:5f:f4:9c:b9:02:48:81:4e:0f:9c:0c:8d:0d:1c:6f:d1:
b9:b1:42:27:26:b7:08:5b:0f:2e:34:5b:ce:45:85:0c:a6:73:
7b:74:41:18:74:92:9a:c4:12:4e:3f:7c:36:ca:5c:7e:2a:99:
0d:b1:7c:f8:78:2c:ea:d2:93:35:52:47:85:4c:50:5d:32:ae:
00:a2:ce:28:0b:45:0e:ac:40:f5:89:2b:e2:94:96:b4:2c:b5:
e1:f8:72:6f:d4:63:c8:29:f3:d9:dc:0d:db:c7:e1:47:c6:af:
2a:4b:ff:25:e5:a2:ba:8a:4c:bf:f3:73:b7:a2:d8:5f:d5:4f:
09:8a:25:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:20:51 2025 by rpki-client