
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
File: KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft (raw, json)
Hash identifier: V0ehT8fCPkBGQi2TQnNt4KDQZrFpjImhy7O+/RwZzcU=
Subject key identifier: C9:89:E7:EA:9B:CF:0E:1F:C5:B6:BF:5C:D8:FE:A5:D2:5C:90:F5:D6
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Certificate issuer: /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial: 8B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
Manifest number: 098C
Signing time: Wed 05 Nov 2025 21:16:50 +0000
Manifest this update: Wed 05 Nov 2025 21:16:50 +0000
Manifest next update: Thu 20 Nov 2025 21:16:50 +0000
Files and hashes: 1: 3zQtAw9jg_YjFUZXJ5jabQWVU-Y.roa (hash: WOg8pZpeBwWcHTGDw+eperbpIqldjkFRfWWJJ5K8PoA=)
2: 8-FtJZyc33tyi1ErBmKML8gni4Y.roa (hash: snWUMcVXZqnX2l1AhxUWqtbxNa6sWExT9F4UHmliem8=)
3: FuxGLaA94WhfEvoz_O4eFKXg77k.roa (hash: y9dHa+dbvX6SMmCbiHozamHBhC78HFFSM+nDuH6u0WQ=)
4: KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl (hash: 00HqhLubyEmTjZhSmzdZ0NcYHi9uXYM4eD99IcbBmYs=)
5: VmR_5R2yk7W-TPr3cIK0QzDhtw8.roa (hash: dk0+Aree0UJjiDa8xC/ENF3SJV8pl823nMtC2HuU/uI=)
6: W-E-RE1kW9xtWaAw5VLdNOl_ogM.roa (hash: alzCUj2VVUit+5t4ptmvtkMS2feTecDCgi9wQPlA/gY=)
7: jHKCTpUAqhDeBXY2ABJvTIEwzm0.roa (hash: KHJssq5TGW0O2DVhPG+QOLdmXIMxowX4A+oALDtE48o=)
8: nOr_eDWcT5_nwH4V5MlTHFsvH1s.roa (hash: O48gmSpP8fTHPk77jtQolo49y0IKcrCKvC0WXmogSO0=)
9: ryU8g5LonAEuIKsNIEjYFfZe7h0.roa (hash: As/EaBYCkr8s9gzSqfW64gFifN1DLsn35We7Lhw66Uw=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
Validity
Not Before: Oct 15 01:34:47 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=C989E7EA9BCF0E1FC5B6BF5CD8FEA5D25C90F5D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:fb:6c:bd:4d:3a:51:a6:62:c9:24:9a:64:
7f:1b:0f:1f:86:b7:98:6f:33:d2:3a:44:d9:92:89:
57:2f:13:18:2b:d1:b0:fc:d4:b5:75:85:56:c8:74:
12:b3:18:a1:1c:56:ec:3d:a6:4b:c3:66:ae:95:02:
df:51:cb:dd:65:6e:f8:31:44:25:2d:a6:e0:71:bb:
72:71:32:0b:3a:15:ba:6d:fe:8a:15:d6:23:11:e8:
0a:03:56:9b:51:d4:7a:77:88:2f:aa:4e:10:6f:16:
08:48:70:ee:df:6b:b1:ad:e5:25:91:5f:4a:c3:30:
d8:4d:24:6f:47:b8:9d:f7:6e:81:ba:2b:21:40:a8:
6a:2c:9b:4a:35:d4:52:65:5c:87:01:d8:51:1a:f1:
3f:62:cd:65:f0:d2:ba:e1:8e:1c:ac:55:d9:db:1c:
07:da:09:6b:3f:56:a0:52:ee:e7:c5:de:1e:68:5c:
f1:6e:9d:6b:63:58:e7:73:d1:a0:5d:8a:72:6a:f3:
6e:df:e5:85:d2:36:58:13:93:b6:16:aa:77:ba:ec:
f2:e1:95:1a:06:bd:fd:99:2f:87:1f:f1:7f:7b:db:
ee:6c:04:bf:62:0e:fd:3f:ee:ca:0d:28:6b:29:68:
f8:99:1c:1f:e8:9c:9d:d5:e1:ee:ca:6e:f7:af:4e:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:89:E7:EA:9B:CF:0E:1F:C5:B6:BF:5C:D8:FE:A5:D2:5C:90:F5:D6
X509v3 Authority Key Identifier:
keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:4d:33:0b:2a:1e:4c:e6:80:66:37:4f:fb:29:fa:d2:ef:bf:
80:22:bf:79:0a:ff:1c:e4:1b:7d:95:66:44:59:1e:d2:c8:67:
c1:64:ac:2c:5f:94:cf:74:ad:3b:93:5a:5e:11:78:82:15:d4:
88:b4:d0:73:8b:17:17:15:9f:69:bd:fb:30:7e:ed:b0:b7:60:
f5:ac:c6:ac:14:40:39:83:ac:f7:37:49:f4:22:bb:93:80:90:
26:49:5c:fa:7c:89:46:52:18:d3:ed:a7:04:04:33:44:f1:4b:
5d:9e:7e:1a:bd:5b:da:6d:78:00:5c:87:67:03:e0:31:40:12:
b4:2e:06:14:9e:dc:2a:4c:23:2a:45:44:ca:53:64:5d:28:d5:
7d:a9:6c:75:ba:79:46:b0:a6:0e:95:7a:65:73:2a:1c:e4:e8:
f3:6f:8c:c7:10:f3:01:a7:01:9c:0d:04:ab:49:d2:a0:05:ed:
b2:e4:e9:81:d7:a6:64:7e:cc:c0:d5:b8:27:37:38:26:c3:52:
8e:7f:00:cd:29:02:9c:54:36:ef:3e:61:21:c6:19:e2:0d:10:
2e:04:77:ba:99:fc:4c:0f:da:96:e2:85:4b:7e:d4:c4:52:ec:
81:14:10:a8:fd:11:db:84:8c:4a:4f:fd:6d:b1:29:2e:13:3f:
0e:2a:b9:19
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgICAIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjgz
OTNGQUUxMjlCNTAxODI0Njk2QkFFMjRCNjQ3MzRBMjAzQzM3NjAeFw0yNTEwMTUw
MTM0NDdaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM5ODlFN0VBOUJDRjBF
MUZDNUI2QkY1Q0Q4RkVBNUQyNUM5MEY1RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChCPtsvU06UaZiySSaZH8bDx+Gt5hvM9I6RNmSiVcvExgr0bD8
1LV1hVbIdBKzGKEcVuw9pkvDZq6VAt9Ry91lbvgxRCUtpuBxu3JxMgs6Fbpt/ooV
1iMR6AoDVptR1Hp3iC+qThBvFghIcO7fa7Gt5SWRX0rDMNhNJG9HuJ33boG6KyFA
qGosm0o11FJlXIcB2FEa8T9izWXw0rrhjhysVdnbHAfaCWs/VqBS7ufF3h5oXPFu
nWtjWOdz0aBdinJq827f5YXSNlgTk7YWqne67PLhlRoGvf2ZL4cf8X972+5sBL9i
Dv0/7soNKGspaPiZHB/onJ3V4e7KbvevTs0zAgMBAAGjggJBMIICPTAdBgNVHQ4E
FgQUyYnn6pvPDh/Ftr9c2P6l0lyQ9dYwHwYDVR0jBBgwFoAUKDk/rhKbUBgkaWuu
JLZHNKIDw3YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwNzYyL0tEa19yaEtiVUJna2FXdXVKTFpITktJRHczWS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0tEa19yaEtiVUJna2FXdXVKTFpI
TktJRHczWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDc2Mi9LRGtfcmhLYlVCZ2thV3V1SkxaSE5LSUR3M1ku
bWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0B
AQsFAAOCAQEARE0zCyoeTOaAZjdP+yn60u+/gCK/eQr/HOQbfZVmRFke0shnwWSs
LF+Uz3StO5NaXhF4ghXUiLTQc4sXFxWfab37MH7tsLdg9azGrBRAOYOs9zdJ9CK7
k4CQJklc+nyJRlIY0+2nBAQzRPFLXZ5+Gr1b2m14AFyHZwPgMUAStC4GFJ7cKkwj
KkVEylNkXSjVfalsdbp5RrCmDpV6ZXMqHOTo82+MxxDzAacBnA0Eq0nSoAXtsuTp
gdemZH7MwNW4Jzc4JsNSjn8AzSkCnFQ27z5hIcYZ4g0QLgR3upn8TA/aluKFS37U
xFLsgRQQqP0R24SMSk/9bbEpLhM/Diq5GQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:49:03 2025 by rpki-client