
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
File: qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft (raw, json)
Hash identifier: kgL0q3C/g2r641BXeESbfCpJ85bVn0cIJ1OT/dLV2sQ=
Subject key identifier: 91:34:E8:0D:BF:9D:5A:B3:85:49:CD:9B:8A:33:30:36:49:2A:F7:A0
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Certificate issuer: /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial: 66
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
Manifest number: 097F
Signing time: Wed 05 Nov 2025 18:16:36 +0000
Manifest this update: Wed 05 Nov 2025 18:16:36 +0000
Manifest next update: Thu 20 Nov 2025 18:16:36 +0000
Files and hashes: 1: 5Hi5II5jIayLrKUp-nvrQr3PJF4.roa (hash: S2iXMSjj9YZuM3C436hhhXBzauDLNfMTmCUtl1GyO98=)
2: 77d_NB6-BPsDHNHq1qFbNR29K8s.roa (hash: Dzu83RLk7932jxZ8FAE8Oeltt3fZVWj1s1tyxWnLyjM=)
3: D69mHvRQirzJlu5CJlGLqDEeivw.roa (hash: vZ9rRlYbjtXNGNSSLngyUUKOlziWBYOUehj8Q32V9i8=)
4: O9ilW85m98c7GBKGvfsd54C3KJU.roa (hash: uWJVjR8xcDSJTifBzmQ/E/abNmJ3S5JBewFATcszy8A=)
5: TwJEe3dtoJ8dcxgPHiNAgtKgIZc.roa (hash: L1pqklHPHso3MG1ZJjEtLbApzqIKmAJH/VgTZkq+6Nc=)
6: d_Ug1aibOlfBP6TNC1N_ZM90Pno.roa (hash: 14LCYv+M1QAE6geWjma/muR7/AjjGBrPv4rInpw3ZD4=)
7: nr8eQMTzmU2hQDghfblKV5OLOac.roa (hash: iJU3ECypsH/9BterRqeAFzFbFS6BEAwowMcJ9gvBUkk=)
8: qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl (hash: SCb8LX/iOZy9TzWJsC9H3GnGjh6sUDPnyokxhKTu3Lg=)
9: w1SYH1Ou6UWGsPijFAQXLmGJFdE.roa (hash: NrXGWThrpVkK+Bc8xsOk+91Ng4fWbi8XHrgkLV2OOY0=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
Validity
Not Before: Oct 15 01:33:36 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=9134E80DBF9D5AB38549CD9B8A333036492AF7A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:60:2a:b4:6d:b3:7e:14:b9:dc:cc:59:03:
19:b5:5a:56:18:b0:db:ad:7a:83:0c:9e:39:27:45:
40:ac:bd:24:82:4e:09:ec:67:49:d3:a7:b2:d7:c9:
83:b5:2c:50:95:69:48:65:e2:a9:4b:70:41:5e:7d:
c8:f0:46:62:9c:96:5c:ba:28:f8:a0:97:45:0c:44:
90:2d:44:a6:d2:9d:c4:f7:76:45:48:d3:6d:43:f2:
e8:4f:6b:6b:74:94:c8:ab:07:8a:15:0e:a2:4c:06:
6c:df:a8:27:97:04:48:3c:70:b7:e6:d1:c2:55:f2:
f1:17:af:b8:63:0a:f7:66:d0:e4:43:b4:6a:1b:3e:
2e:5f:95:71:18:88:2f:44:e9:ad:24:7b:f6:f8:fc:
20:46:68:e8:16:12:9e:0a:7c:9c:fa:62:a7:d7:e0:
b4:6d:68:39:2e:2c:89:6f:af:5e:45:8b:ae:69:36:
4b:63:16:2c:94:5b:a1:4d:bc:91:86:a8:30:4b:cb:
a0:68:63:65:06:a6:c1:b7:32:bf:0f:f3:6f:2c:52:
3a:79:bb:a5:89:48:06:d8:f4:a3:05:c7:ae:c2:a5:
cf:69:fa:8d:ae:62:7a:75:66:b8:8a:49:00:79:89:
49:88:97:9a:72:20:bd:87:bc:8f:16:ed:81:08:37:
b1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:34:E8:0D:BF:9D:5A:B3:85:49:CD:9B:8A:33:30:36:49:2A:F7:A0
X509v3 Authority Key Identifier:
keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:27:7c:a1:70:5d:16:60:f9:e0:2e:f9:33:42:c4:d7:ed:4a:
ec:a5:fe:39:38:38:95:89:81:6e:1b:b6:ac:ef:e1:25:cf:41:
ce:64:17:38:f8:58:32:11:44:69:fd:6f:0c:e1:f5:5a:65:0b:
55:fb:e1:fa:f1:d3:19:92:31:69:7e:b8:ff:75:45:46:2c:d7:
7d:d3:3d:60:37:df:a0:b7:c7:a5:5f:d0:32:5a:a6:eb:5c:ee:
ae:2c:47:25:ac:d0:90:13:64:d9:ec:da:ea:a4:97:e3:a4:4a:
6f:43:a6:dd:0a:fb:8a:78:e5:6b:83:a2:79:61:93:ef:ed:f6:
75:95:39:10:a2:1f:57:f1:4e:19:06:cf:a9:58:bf:86:6e:6f:
eb:4c:90:93:02:63:7c:1b:62:ed:f6:b0:bc:0f:51:1c:ac:1c:
a8:d5:bc:57:31:94:5f:af:ad:ab:30:69:50:8e:ec:03:1a:57:
14:1e:ee:d8:c4:7a:4f:c4:c8:7a:7a:e5:b6:99:4e:ac:25:ab:
3f:b9:a5:27:37:40:cc:99:89:c6:b2:32:27:c6:6e:f2:e6:94:
7f:9e:60:81:e6:67:99:15:bb:2a:6b:6f:6d:10:99:9d:45:bc:
82:d4:37:4a:05:8f:90:d6:74:71:ac:0e:bb:cb:20:b8:58:7b:
b1:6e:a5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:12:13 2025 by rpki-client