
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
File: yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft (raw, json)
Hash identifier: hqiYMiDIfFD3vEQzmb7eQgFQQQqismPb204t+bJtvNA=
Subject key identifier: 0D:39:7B:1E:74:5D:6D:F4:6E:3B:8E:CD:FE:54:C9:3F:66:DD:53:EA
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial: 84
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
Manifest number: 095D
Signing time: Wed 05 Nov 2025 05:26:28 +0000
Manifest this update: Wed 05 Nov 2025 05:26:28 +0000
Manifest next update: Thu 20 Nov 2025 05:26:28 +0000
Files and hashes: 1: 9OtReXpivMF1cpyFDnNFGM7ijcA.roa (hash: OR7CPwZ6MpHkZuOGG+e93YJLPJuneOSY4zyIdDNWnNQ=)
2: CDAwG6xx4G2yuH4jPsgXz2yDfuI.roa (hash: RBaBTPGeeD45uOTMFp+wq/rQCA3uDtcIdv8QYeJkeK8=)
3: SmpCeMzzEWGEIEcZUdh3lt8oa80.roa (hash: /Uox37FoYXH6eNTNB86Q4PbWJAKl1oSK7OCOLMxNbwk=)
4: bS-dW7McKcQWfsSCZKsKYJB7ivw.roa (hash: 6YggiAWt57JhOAVIjv8pworKPUEyvDQE3G1yWLj4gL0=)
5: gW0SUSx1KCDaQhK-dVpgtj9eUnU.roa (hash: AHOSoN/02Ut56nGoIwJCmjGgur2VYxhNH9yRofdyQ2M=)
6: ozQSdbcao1q2XLbqse6ejvXOC6o.roa (hash: KNxPC3AZLEybBjmnYWu2kx8x+IogZDif+Wq7bNzorEk=)
7: t2BnTgSFvmQuOG4nOvoz5VJHPR8.roa (hash: wU/5iSSqYGZKC2AHSc5jcwCDSZN+OgbZrIcAqX5i5fs=)
8: tmRXDBNLCSsrdJNLWdAlGLTpQpI.roa (hash: GhAaPEG/2cFDEhuE3hcsyBAwA7J82m48rmpOcH2NMJA=)
9: wc5lF7KvljLd2cELNKI-qEhSbis.roa (hash: vb4zNPPWYjlyqaH0oWjHMtjItqakcYwrEK2xf/zICyg=)
10: yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl (hash: Y61UrbMnFNT2fRQiNVPlELYyWWaSG6aIgnSn5CwdHf4=)
11: yRslL42OrEG4wOocLeHugfdI5BM.roa (hash: jeXJjoXurOcXAlphxRZAZ+q4l7fzMqsWwHH+toAhSAI=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Validity
Not Before: Oct 15 01:35:51 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=0D397B1E745D6DF46E3B8ECDFE54C93F66DD53EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:5c:88:61:a5:35:ad:2d:b1:ad:46:dc:9e:
ea:07:f0:d8:12:ab:1f:79:83:85:cd:88:dc:8e:a9:
1d:bd:2d:53:48:06:a9:f2:0a:07:2d:6a:a1:32:d7:
93:38:be:1a:eb:c9:46:19:9f:c9:53:4d:ae:be:8b:
14:7f:72:11:79:bc:7a:f7:ff:5c:50:e4:55:f2:77:
29:83:eb:7b:c7:73:91:15:9e:23:69:d7:b9:49:fa:
b7:1b:8f:d8:e8:56:61:c1:09:b3:cc:8c:35:72:3c:
6b:fa:c3:40:60:9b:75:b6:62:66:60:f1:07:03:e3:
5b:ea:3b:bf:e5:fc:e3:0b:f9:a1:52:80:c8:8d:a4:
e6:24:bb:77:15:fa:9e:1f:42:89:46:65:32:54:6c:
7f:08:1c:e7:fa:fc:0c:15:ae:52:c9:7e:a3:41:42:
40:af:9a:b8:f1:65:66:2f:1a:c3:d8:d0:0d:3e:04:
f3:70:a9:55:e0:25:c3:9d:46:46:89:8f:43:21:d8:
1a:4c:74:de:fc:fd:82:fd:13:76:96:da:bf:fb:a1:
fa:a9:40:46:f2:1d:be:4e:0d:cc:c1:3f:9d:09:63:
27:cd:6d:11:f8:de:e6:d8:48:1a:90:42:57:04:74:
35:fe:e1:a2:b7:a2:f4:fc:d1:0f:5d:65:f6:ce:16:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:39:7B:1E:74:5D:6D:F4:6E:3B:8E:CD:FE:54:C9:3F:66:DD:53:EA
X509v3 Authority Key Identifier:
keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:23:c9:aa:a7:49:8d:39:dd:ba:fc:f7:e9:ee:a0:00:55:50:
81:7d:54:bb:01:0a:e5:72:ce:54:e4:bd:95:66:30:af:69:db:
ba:a1:08:cc:76:cb:2d:26:9d:6b:ae:1b:b5:96:11:19:14:a2:
57:db:3d:e2:54:5a:55:49:b6:a8:36:cd:b4:81:b3:91:32:16:
41:b1:33:d5:58:db:4f:b8:34:2c:96:f0:ca:2d:ed:74:1a:22:
0e:ce:59:e3:94:1f:c3:ee:73:f9:a6:95:35:33:66:4b:fc:c6:
08:97:c6:d9:8d:ae:80:66:e3:72:10:72:18:82:9c:e3:8b:da:
7c:ce:90:97:ea:30:f2:b4:6b:df:fe:1a:3c:06:55:91:f5:08:
9b:92:e2:99:a4:06:4a:ce:a4:46:43:3d:f0:55:dd:88:54:04:
3f:f6:ae:05:42:92:43:ce:7a:6e:c0:00:b0:e3:80:9e:6b:f5:
16:27:db:b5:4c:9f:43:16:db:61:d7:aa:7c:7a:7a:61:4c:2d:
e4:f5:4d:7f:97:63:36:3d:13:de:93:97:42:73:46:30:f6:0a:
94:f1:35:52:ce:dd:5d:e5:25:91:b3:0c:c8:83:fd:24:b8:b6:
9e:29:2b:75:fe:3f:63:63:33:ea:6c:35:a5:59:fd:ec:7d:a4:
8b:63:df:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:13 2025 by rpki-client