
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
File: ygLFxDwA8U6FtbB1me3SZ8WitNI.mft (raw, json)
Hash identifier: KbB4J3Bmg3yOozCWk7hzsOwZDPUJcdz2JKjg+sDenNs=
Subject key identifier: B6:3C:75:AF:A6:5E:0C:2E:DC:0E:04:CD:20:98:53:55:E1:EE:34:9D
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Certificate issuer: /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial: 7F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
Manifest number: 1006
Signing time: Mon 02 Mar 2026 12:33:35 +0000
Manifest this update: Mon 02 Mar 2026 12:33:35 +0000
Manifest next update: Tue 17 Mar 2026 12:33:35 +0000
Files and hashes: 1: 4ps5b4fgp712QuX0-_Jw6oxJGQ8.roa (hash: oja6K9/dAAA+w7/F/mbjg2MUNDdrmr7ZRh5gPXqKolI=)
2: 8StdLscRUcS4pDqNLXAhffV1Jtg.roa (hash: ttmUBeFzyT1xx3vDhQqICdGqKQgQLlkvyX4iexmk8JQ=)
3: K-gilyGi84prYEAFKRlz5ey90cY.roa (hash: yK45x49xV/vyR2AOstfJL2mecq7IebjuwnByZdApm78=)
4: d9sCeFewwsymVrumYvSQiJ3HKRE.roa (hash: /7FomMacdZxJDoqAlCI9s1vHxT3MEWL72eKSR0o0Ygc=)
5: rpbD43wsF05woA_KyyAXP3Z4O-s.roa (hash: sVGUGhl1L1vS6XI8Ps2KDKLdNNPmFJOFf8H4UhREMto=)
6: ygLFxDwA8U6FtbB1me3SZ8WitNI.crl (hash: QvTVDTqkh2aqIVkaFni6uYA6+Wu+NOxMs3QsvLpIEGc=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Validity
Not Before: Feb 15 01:32:00 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=B63C75AFA65E0C2EDC0E04CD20985355E1EE349D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:98:f2:00:37:59:b2:b2:f3:89:59:0b:91:
dc:70:f2:57:71:f1:f1:f0:6f:88:01:5e:91:90:43:
c8:91:42:cf:6a:c8:6b:9a:cc:a1:68:0a:1e:93:10:
71:bb:50:f6:35:3c:fb:1c:00:6f:c5:ea:cf:cd:65:
14:8e:d6:61:da:78:19:cf:17:65:e2:83:ed:15:78:
28:1c:0f:cc:52:9d:40:5d:00:15:ed:a1:35:d0:ac:
c2:f7:bf:82:c3:88:3d:ed:ae:42:76:f7:3a:7a:3f:
91:a7:02:2c:6f:d3:c8:09:a9:18:0e:b8:71:b8:44:
4e:6b:15:43:05:3e:41:04:18:ae:aa:e4:2a:25:6e:
90:e2:8e:3e:44:20:96:7a:b2:7a:5e:d8:88:c6:88:
62:c4:bd:cb:4d:c9:97:06:5d:f8:d3:ff:62:44:3c:
b8:63:56:0d:ae:3e:90:2a:44:7a:8a:83:c5:0c:f1:
ae:d2:e7:b7:78:f5:a5:56:a5:b9:02:30:47:bb:15:
fc:f9:25:3b:7d:bd:23:e4:6e:23:e6:e3:36:a2:4e:
1f:f4:04:3a:24:5b:ae:ee:1c:79:bf:0b:52:a7:84:
40:60:b2:cb:80:5e:9f:98:a3:12:57:de:cc:fe:84:
b6:5e:f3:40:f7:b9:9c:1d:84:48:cc:cf:68:a5:6d:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:75:AF:A6:5E:0C:2E:DC:0E:04:CD:20:98:53:55:E1:EE:34:9D
X509v3 Authority Key Identifier:
keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b8:3e:4b:2a:ad:88:30:b3:32:d8:6a:18:a7:0a:85:46:86:
44:3f:70:fb:44:84:95:45:5c:73:7d:7d:bd:b2:b3:4b:d2:54:
43:62:19:ea:1b:60:32:3f:15:44:ce:c3:bb:9f:f4:35:0e:49:
74:40:22:1c:57:93:50:f5:2b:bf:3c:8b:2e:a0:fe:77:a0:0b:
d8:44:90:bd:5f:b7:e8:73:19:b7:ea:ba:64:b0:65:3f:7d:20:
30:56:81:70:97:b9:29:76:b0:6b:32:17:ea:96:49:7d:b7:3d:
ee:ca:13:b3:8e:ff:c7:18:4d:14:91:eb:0d:33:c7:4e:d4:70:
8f:e6:5f:3d:54:73:ef:1d:96:d8:c9:e4:79:5a:54:8b:ea:d7:
de:e2:5a:ad:91:94:ea:8f:cb:57:39:85:16:ad:16:cb:4b:14:
77:0a:69:16:c8:81:fc:b7:4f:04:53:a1:c6:0b:fa:bd:ce:7f:
7a:c4:05:4d:6e:ad:09:ec:f6:fe:b5:f8:f9:1d:0c:2c:f0:e1:
c7:43:8b:f8:e5:3e:bd:6d:92:e6:39:33:d3:96:6c:24:01:53:
d9:c5:b7:74:5a:42:30:91:1e:e3:b4:6d:59:b4:04:f5:5c:df:
5a:f1:2f:11:d5:9d:13:f8:cc:01:20:30:cf:03:e0:bb:8c:db:
45:13:cb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:41 2026 by rpki-client