
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
File: KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft (raw, json)
Hash identifier: 2ubSkgeFgMHJxGdkfDuNEruXQSfBqv1kmSWB054IqCE=
Subject key identifier: F9:AC:90:D3:EE:BB:83:9F:20:C6:52:E4:82:F6:A1:B5:B1:1D:92:96
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial: 89
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
Manifest number: 10F5
Signing time: Sat 25 Oct 2025 19:20:15 +0000
Manifest this update: Sat 25 Oct 2025 19:20:15 +0000
Manifest next update: Sun 09 Nov 2025 19:20:15 +0000
Files and hashes: 1: KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl (hash: z+UOEOgcFbTQEejMilkvz6mg2yPxGkWIRSk5VT8QSZE=)
2: P8rTet0Yl5aAdhQXIvdfTEbAS00.roa (hash: qYyC7BEh5ztU3VOjXn8NSp0KXJm2NHYlzd/WGz2Ibc4=)
3: W7-jB7TlCHzYPXEvluRvHW3c-YM.roa (hash: zkpvWqt1+x7ZRaML9Dc0qHmfSJDPd30rHUm0Lk5DXcE=)
4: ccMndzJgtkTXfhMpOCs75U7IW90.roa (hash: yTJL/Uncs0Sbvbafe1cZL24s4eAxvGIlhtovgco/dzE=)
5: dTsxizJsPojPIjPFUwohUewsros.roa (hash: JlMk3vnEJpdv0iQYVq6drCt9XND0ozM12AC6golHdJ8=)
6: e9gLAol1q7kBhLRQioZiBJYa_Pg.roa (hash: VAiYbbVv/xkOEytt8h70yV2oPrETc6G1Wd2eM1smgZE=)
7: shcaRon1lwsJwBq4yOSy_I_7STg.roa (hash: BXY9dnOfYqiD7KG7KmpneYkhzR4OrPK0MeJf2q5BN0A=)
8: t4vV_cGkrftHf6-FUIhxZQTw4sc.roa (hash: gzOlpDUgx3CAbdmvmj2ZeixVEjWckDZ68shVKUgW1l8=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 18:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Validity
Not Before: Oct 15 01:33:49 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=F9AC90D3EEBB839F20C652E482F6A1B5B11D9296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:9c:e1:19:64:37:4c:1f:f0:7f:ef:10:dc:
0b:54:fb:cf:76:2c:da:5b:9f:2e:22:1b:24:09:4c:
fa:cc:f4:1e:78:d2:76:43:b1:a8:cc:a7:58:f6:86:
22:48:39:e2:48:2d:fb:7f:cd:7d:a9:45:31:7b:b3:
e2:17:d6:63:c6:59:04:ec:33:df:e3:7d:d2:4f:3e:
e7:df:15:67:e1:df:1c:95:2f:a7:09:19:15:6c:68:
72:6e:22:a6:c2:95:74:eb:af:f8:c0:b5:86:58:95:
bc:4d:47:9e:36:bd:e7:15:59:f4:9a:b6:71:05:33:
f6:42:82:2c:3a:83:c4:d2:de:79:46:ef:4e:f0:cf:
73:40:fc:57:4c:fd:42:74:33:1a:a9:12:cb:1e:62:
22:19:bc:38:ff:a0:d7:1b:f8:fd:bf:70:52:f4:33:
06:79:52:e1:91:0a:fa:33:6b:a9:8a:78:af:bc:f4:
c1:31:81:79:5b:32:7d:ae:b8:ec:84:5b:e8:8c:20:
99:cf:4c:04:f1:d6:0d:e3:f3:9d:54:9f:41:f4:51:
13:2a:0f:77:f3:07:f4:ad:7c:55:48:04:91:39:46:
79:37:d8:d2:52:8a:d0:01:58:b5:89:54:03:12:5d:
5b:d4:77:89:d4:9f:46:82:91:99:f2:db:5c:c1:6b:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AC:90:D3:EE:BB:83:9F:20:C6:52:E4:82:F6:A1:B5:B1:1D:92:96
X509v3 Authority Key Identifier:
keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:a0:3a:13:d2:24:3c:fc:66:d0:41:ea:ba:9e:53:ef:b7:69:
c7:45:76:7a:47:f5:e0:b1:51:3f:50:8e:74:3e:12:d8:e8:52:
ed:32:e5:0d:fc:ed:3c:65:1a:07:4a:71:6e:62:f6:31:3c:d4:
08:94:ae:b7:bb:6f:ee:bf:51:34:55:87:cb:b4:c6:8b:f4:3d:
70:c4:43:ee:26:45:7b:71:98:63:e1:0c:9f:5e:87:8b:c5:63:
23:bf:1c:60:d1:24:b7:1f:13:72:a2:3e:d0:07:5b:87:6a:3a:
33:e7:4b:6d:5f:fe:36:6d:d3:9d:7d:90:d8:7b:b1:fd:83:62:
03:fc:73:33:19:14:d6:84:78:4e:07:80:73:c8:66:41:eb:95:
f1:85:70:cf:83:b1:d9:b5:2d:c0:94:66:dd:f2:1e:a1:05:98:
c8:3d:91:30:7a:54:2f:32:11:5d:89:0a:e8:4e:3e:17:19:4c:
b3:f5:a2:eb:3b:51:ab:38:09:21:31:dd:83:7f:f1:ae:ad:c0:
43:b0:90:77:dc:e0:28:17:76:16:3b:a2:62:f4:89:90:d8:bf:
64:c2:1c:eb:af:94:13:41:00:52:ea:28:61:13:0f:82:bc:7f:
bd:82:fc:ae:a1:04:37:05:07:13:c5:10:79:e1:b9:89:74:74:
0d:e4:6e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:52:49 2025 by rpki-client