
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30316/UcKd3QchVSxE2Ly074ZbyhBxIk0.mft
File: UcKd3QchVSxE2Ly074ZbyhBxIk0.mft (raw, json)
Hash identifier: D4d2p6Oz/Odf/FWCgAxytZRkGP3zuE4kIG11XRtz0f8=
Subject key identifier: 76:BF:45:13:8B:6E:33:5F:66:43:E0:47:18:97:A1:37:C6:21:B5:A5
Authority key identifier: 51:C2:9D:DD:07:21:55:2C:44:D8:BC:B4:EF:86:5B:CA:10:71:22:4D
Certificate issuer: /CN=51C29DDD0721552C44D8BCB4EF865BCA1071224D
Certificate serial: 21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UcKd3QchVSxE2Ly074ZbyhBxIk0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/UcKd3QchVSxE2Ly074ZbyhBxIk0.mft
Manifest number: 08AC
Signing time: Wed 05 Nov 2025 10:41:29 +0000
Manifest this update: Wed 05 Nov 2025 10:41:29 +0000
Manifest next update: Thu 20 Nov 2025 10:41:29 +0000
Files and hashes: 1: UcKd3QchVSxE2Ly074ZbyhBxIk0.crl (hash: W1wh38CW+nY19fgmOmsVPUlkbi24C7ziRTtUHj+aTYE=)
2: aXVN6tq9a84GESaT7hBnyJRRDhU.roa (hash: Qbk6SCFEz51JPydGXzdNCBvSYHpxb2QJfterqjhjQts=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/UcKd3QchVSxE2Ly074ZbyhBxIk0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/UcKd3QchVSxE2Ly074ZbyhBxIk0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UcKd3QchVSxE2Ly074ZbyhBxIk0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51C29DDD0721552C44D8BCB4EF865BCA1071224D
Validity
Not Before: Oct 15 01:31:46 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=76BF45138B6E335F6643E0471897A137C621B5A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:64:32:83:a7:bc:57:d9:4b:79:d2:a1:93:
f0:f0:bc:d0:75:67:4d:f6:37:d4:2b:f5:39:01:a9:
e7:7a:ca:0a:42:fa:89:41:14:a3:64:54:4a:54:d8:
dd:49:cd:67:9b:fb:fb:91:c8:c8:24:b2:75:f2:12:
cc:8b:c8:ec:4f:4d:d1:74:73:28:53:88:4c:23:dc:
30:e7:4c:c0:e0:31:38:17:bc:1f:67:d7:02:54:99:
d4:b2:87:80:fa:0a:c5:86:51:6d:fd:0b:2e:21:bb:
a3:79:e0:08:9f:de:db:2c:30:72:22:ac:00:72:4a:
50:14:c6:c5:ce:69:e9:b2:49:84:9b:58:bd:78:0a:
7c:4a:64:18:3e:79:15:8a:83:7b:1a:36:f6:2e:4a:
2e:3a:79:3e:16:38:d2:69:82:e3:fc:4f:08:2d:0e:
47:96:76:c1:76:16:78:3e:5a:e5:e6:44:85:ec:fb:
c6:f7:ac:c5:40:eb:0e:90:86:dc:43:75:cd:47:f9:
04:d2:a9:18:93:e8:af:c2:e4:86:48:1a:f0:0c:0e:
27:d6:01:80:77:28:d9:24:a1:a6:5a:fa:1c:52:68:
dd:48:21:93:31:b1:52:f4:b6:08:82:6f:33:b3:b2:
91:1a:b5:42:a9:9a:5d:34:4d:ee:8c:12:db:cc:b0:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BF:45:13:8B:6E:33:5F:66:43:E0:47:18:97:A1:37:C6:21:B5:A5
X509v3 Authority Key Identifier:
keyid:51:C2:9D:DD:07:21:55:2C:44:D8:BC:B4:EF:86:5B:CA:10:71:22:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/UcKd3QchVSxE2Ly074ZbyhBxIk0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UcKd3QchVSxE2Ly074ZbyhBxIk0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/UcKd3QchVSxE2Ly074ZbyhBxIk0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3a:87:51:21:29:b7:8d:33:3e:6a:8e:73:39:78:48:fc:fd:
5e:26:c3:b4:31:85:0c:32:02:ab:09:8a:48:e5:65:30:6f:70:
01:2a:01:12:4a:53:95:cc:f2:97:3f:6d:dc:a7:b3:1a:5c:8d:
0b:58:81:0b:bf:e1:1c:c7:15:f0:55:65:7a:76:2d:f1:33:94:
2a:a3:76:20:83:bd:43:c7:93:1a:78:17:f8:96:34:02:2a:cf:
4b:f6:3a:dc:44:1e:d7:23:66:fc:a8:84:61:64:5c:b7:8c:ce:
3d:bd:bc:46:8c:29:66:d0:46:50:1e:4e:14:ac:36:61:c1:5c:
19:d1:d0:d6:12:72:e9:0a:ff:ed:57:a0:25:86:8e:cc:be:88:
70:96:8e:99:2d:0c:2c:84:47:bd:73:2e:cc:1c:20:cb:71:58:
a7:da:0e:f7:76:ea:0d:ac:cd:7b:20:64:0a:72:67:83:c7:03:
45:78:87:c1:6f:51:89:d0:9f:0b:f0:cc:68:eb:8b:b5:8d:cf:
00:62:6c:1e:05:c9:9b:4f:0d:38:43:db:ee:1f:95:c2:e8:f3:
b7:1d:84:f0:4f:a8:e6:88:8e:c4:f9:43:a8:3b:6a:c6:5a:94:
e2:1b:6e:da:30:4b:7f:b1:46:52:10:b1:d0:2f:bd:a2:6f:f6:
b0:9d:d2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:52:35 2025 by rpki-client