
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft
File: uOU8UkS3-adtX535-69h5XsuqTs.mft (raw, json)
Hash identifier: yToFEZUdsbCzkaqVbPmgEbCo5A90TtNQAvARUOwjnkM=
Subject key identifier: EF:2F:4A:82:80:F3:AC:92:05:AF:4C:D7:11:C6:3E:3E:68:98:A1:E7
Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
Certificate issuer: /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
Certificate serial: 6C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft
Manifest number: 1ABC
Signing time: Wed 22 Oct 2025 14:56:42 +0000
Manifest this update: Wed 22 Oct 2025 14:56:42 +0000
Manifest next update: Thu 06 Nov 2025 14:56:42 +0000
Files and hashes: 1: O_RGIZAFz59qyCcmCLBPl1x1ut8.roa (hash: R+L0on/bfCIEZAYHyqZG+zyOXNhRamkO2cZdwmqe8Qc=)
2: X6bdYSXuTkb3OLZsF_J9hZVrWEk.roa (hash: BiAErEwTz9R+bJw7vxAhfQxs3AjtUAUXChLhrDrbHH8=)
3: nwhcBCNxX68lWdfehoInri0a1Fg.roa (hash: daBUu7L35iQhp1AGXZNYZT5U+jEeZARAW6XIjoLgPmM=)
4: pIHKM4G6po9acqaquHNuyVnX_uk.roa (hash: oOp0rnmHS75/WbdGfJ31w2jWHEddI4Mb+GQ1pEOIOtM=)
5: pM6tY8tuDj3VZpt0QsWcQ1Yrk7I.roa (hash: MN2d/F1BeVohp7Dfzg/+VmUkYJI9SDpUzMvqwMY4YGw=)
6: sCf0qI8J32zZgs2le8XWbpU5Z8U.roa (hash: ee+t4f12JejZkzbKEdtD1jC+Per9DG0K10/ArJ8rocg=)
7: tc9YL4JAXC3NqASONMQz7PScN58.roa (hash: FdZIpga27RivdGUq73NDukdkrlhxwjwgigUav316iRI=)
8: uOU8UkS3-adtX535-69h5XsuqTs.crl (hash: CRaI7NMnCl3K1mvIz1eQYaTXZuopaAmuVANz0lfqoxw=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 15:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
Validity
Not Before: Oct 15 01:40:38 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=EF2F4A8280F3AC9205AF4CD711C63E3E6898A1E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:43:4c:8b:23:50:f5:6f:ea:0d:b1:01:c5:
ec:2d:8f:2f:be:07:e8:cc:e0:0f:38:8a:47:86:a5:
d4:cd:05:3a:f2:bd:74:31:69:0b:8a:7a:f4:4a:25:
68:e4:eb:2b:0c:68:33:71:0f:e3:06:97:fe:49:f5:
48:db:bb:ec:db:14:de:aa:e0:0a:05:03:fd:1f:8d:
ae:ea:3b:74:d2:e8:49:9e:16:60:b5:8d:bd:0b:f1:
0f:6a:3e:9b:72:92:6a:a5:c8:e5:60:28:dd:08:dd:
ba:b8:19:df:30:a3:18:a7:e6:2f:ee:17:61:08:01:
a7:94:86:7a:27:0f:83:00:11:67:17:a8:c4:b9:5c:
f8:94:c9:ee:e3:27:83:be:3f:f9:ad:32:11:61:a7:
2c:29:77:1d:40:3f:d3:f6:be:f4:64:38:94:e5:62:
43:de:55:08:7e:ea:f0:2d:f5:24:5f:69:fb:38:2a:
f3:77:16:a8:2a:23:c4:77:8f:6a:d7:33:0a:b1:3f:
bb:32:3d:95:75:68:80:f2:81:08:12:68:bf:b1:1e:
ff:e3:ec:1a:10:dd:29:76:71:f3:19:f0:01:85:6d:
ba:f2:77:23:ca:3d:62:e8:d8:67:4f:3d:f6:a9:52:
2b:e9:aa:f4:f2:7e:a3:d7:8d:5a:10:6f:2c:9e:07:
96:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2F:4A:82:80:F3:AC:92:05:AF:4C:D7:11:C6:3E:3E:68:98:A1:E7
X509v3 Authority Key Identifier:
keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:ab:90:7a:a0:2b:20:2c:56:11:e0:ab:94:30:e0:e6:98:6c:
bd:a1:99:fb:53:4f:92:cc:5a:d1:81:72:f4:0c:db:e5:3e:a2:
13:54:c2:75:18:40:a9:23:c2:5c:d9:79:d5:81:ac:4a:eb:bb:
15:d2:04:8b:78:cf:d2:ec:b2:ae:14:f5:c4:bf:42:d7:34:11:
48:f0:e2:b4:94:29:9d:f4:72:d0:d7:8e:8e:31:60:81:ee:b7:
9b:e8:2c:1e:a4:5e:5e:11:57:fc:6e:ba:c9:f2:b7:51:93:01:
0d:48:fb:1e:cd:67:57:ed:95:38:4e:6d:74:cb:89:82:84:22:
b7:d2:6b:4e:b3:5a:0d:37:47:9c:6a:d0:a6:0a:f5:a8:aa:ff:
d8:d3:b4:70:c4:90:2e:8a:41:96:a3:1d:b8:86:23:e9:bc:92:
a0:6d:3c:d1:a4:e7:4d:c9:e2:80:88:82:b6:85:e7:fe:54:cb:
f5:4b:ab:3f:30:ba:ca:12:e2:0a:81:bd:f3:5c:82:29:04:e1:
1b:93:e3:fb:94:78:c5:66:9d:2c:8c:5d:a5:06:df:f8:53:b9:
05:7b:f5:fc:77:68:23:0f:04:a3:18:21:9a:44:d9:4a:0e:92:
2f:76:c4:8b:89:98:0c:89:1f:93:ae:a7:81:d7:ae:89:65:4d:
23:9b:7f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:19:20 2025 by rpki-client