
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
File: ygLFxDwA8U6FtbB1me3SZ8WitNI.mft (raw, json)
Hash identifier: E8nPKptpc4dUSXCThvn9F6YbJx0IO/vGzBHGGjL9S/E=
Subject key identifier: B6:3C:75:AF:A6:5E:0C:2E:DC:0E:04:CD:20:98:53:55:E1:EE:34:9D
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Certificate issuer: /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial: 87
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
Manifest number: 1116
Signing time: Fri 17 Apr 2026 02:12:03 +0000
Manifest this update: Fri 17 Apr 2026 02:12:03 +0000
Manifest next update: Sat 02 May 2026 02:12:03 +0000
Files and hashes: 1: -i4o0Sn3S_DfAaAuY3hGCQZB-58.roa (hash: HCMUonc0pHxNjrvWzB6IH9l+I/3yWJDz5/rD8k3+iFM=)
2: 24YjU1RanktGAQXfn15shy2vzhQ.roa (hash: +gS2LRx3BxIvOgFAr8nDA3xDCv+FA6JHrLyBqM9L51U=)
3: 4rp_kzmuCsTFSF79KM0E2s8TRRA.roa (hash: /sWVxodHmUW4o9fGfenCiWQ8Iz1pRbW+OKOeYSpw/FY=)
4: ZCB0V614s4hm4UDrVpTDXF9ydNs.roa (hash: K3gIpKFOYghu8iR6c00YasJoi3JdjDG+yf4sN8kzW7M=)
5: vV7AoLFlTWrCFY6hwXHgkxFLAws.roa (hash: URPr3pWkqf5DBiYyXoH7RFxU+85SFP0jFgfVXWAKE8g=)
6: ygLFxDwA8U6FtbB1me3SZ8WitNI.crl (hash: mKCpLUlRDbQgx6yfggv76S/rIhhqZgX8Zr9G5UBbfZI=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Validity
Not Before: Apr 15 01:34:40 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=B63C75AFA65E0C2EDC0E04CD20985355E1EE349D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:98:f2:00:37:59:b2:b2:f3:89:59:0b:91:
dc:70:f2:57:71:f1:f1:f0:6f:88:01:5e:91:90:43:
c8:91:42:cf:6a:c8:6b:9a:cc:a1:68:0a:1e:93:10:
71:bb:50:f6:35:3c:fb:1c:00:6f:c5:ea:cf:cd:65:
14:8e:d6:61:da:78:19:cf:17:65:e2:83:ed:15:78:
28:1c:0f:cc:52:9d:40:5d:00:15:ed:a1:35:d0:ac:
c2:f7:bf:82:c3:88:3d:ed:ae:42:76:f7:3a:7a:3f:
91:a7:02:2c:6f:d3:c8:09:a9:18:0e:b8:71:b8:44:
4e:6b:15:43:05:3e:41:04:18:ae:aa:e4:2a:25:6e:
90:e2:8e:3e:44:20:96:7a:b2:7a:5e:d8:88:c6:88:
62:c4:bd:cb:4d:c9:97:06:5d:f8:d3:ff:62:44:3c:
b8:63:56:0d:ae:3e:90:2a:44:7a:8a:83:c5:0c:f1:
ae:d2:e7:b7:78:f5:a5:56:a5:b9:02:30:47:bb:15:
fc:f9:25:3b:7d:bd:23:e4:6e:23:e6:e3:36:a2:4e:
1f:f4:04:3a:24:5b:ae:ee:1c:79:bf:0b:52:a7:84:
40:60:b2:cb:80:5e:9f:98:a3:12:57:de:cc:fe:84:
b6:5e:f3:40:f7:b9:9c:1d:84:48:cc:cf:68:a5:6d:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:75:AF:A6:5E:0C:2E:DC:0E:04:CD:20:98:53:55:E1:EE:34:9D
X509v3 Authority Key Identifier:
keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ca:1e:54:a3:77:9c:ad:1d:14:eb:1c:c5:71:a9:97:a3:7c:
a8:36:ef:59:af:b5:b9:53:f8:08:04:e2:e2:49:6c:72:ea:c8:
d3:5b:16:f2:3b:60:0a:5c:ea:f4:4b:7b:28:ab:31:f1:c1:a8:
20:d0:3d:55:99:fc:2d:f6:7c:d5:fb:d6:e3:30:5f:1f:81:03:
24:fd:be:b8:fb:0d:dc:b7:58:4f:a7:44:84:28:63:2c:0d:b6:
03:ff:92:1a:28:12:76:06:aa:86:7f:44:b4:1d:cd:5e:ff:bb:
e8:c4:3b:1f:a7:fa:14:b3:e5:84:0d:4f:b5:17:f2:ef:fc:d5:
44:d5:85:db:f1:73:04:4a:b3:34:1d:56:d2:05:d4:27:3e:d7:
e5:f1:e6:2c:2a:1e:a7:3f:9f:eb:a1:19:d8:da:da:09:97:ef:
28:91:26:56:34:b4:5a:01:c0:04:c1:b8:ee:15:31:2b:c7:87:
e5:77:3a:03:c0:1f:96:bf:d5:7c:76:fc:98:fb:c5:6b:a3:85:
ab:26:cb:af:2e:6c:76:14:ce:54:18:90:75:d4:d1:99:86:a0:
2b:dc:cd:d1:45:3d:72:03:84:6c:ee:a7:f7:5b:c0:89:a0:b0:
81:5a:ee:8f:4e:c3:45:d3:02:de:3a:11:35:2b:83:d9:3c:19:
b1:c5:4e:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:29 2026 by rpki-client