
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
File: ygLFxDwA8U6FtbB1me3SZ8WitNI.mft (raw, json)
Hash identifier: Mw2+VwLND5ZsqiVmdH2Ia13zsbm+jR0Omun307ib72o=
Subject key identifier: B6:3C:75:AF:A6:5E:0C:2E:DC:0E:04:CD:20:98:53:55:E1:EE:34:9D
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Certificate issuer: /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial: 8A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
Manifest number: 135F
Signing time: Fri 24 Jul 2026 08:30:18 +0000
Manifest this update: Fri 24 Jul 2026 08:30:18 +0000
Manifest next update: Sun 23 Aug 2026 08:30:18 +0000
Files and hashes: 1: -i4o0Sn3S_DfAaAuY3hGCQZB-58.roa (hash: HCMUonc0pHxNjrvWzB6IH9l+I/3yWJDz5/rD8k3+iFM=)
2: 24YjU1RanktGAQXfn15shy2vzhQ.roa (hash: +gS2LRx3BxIvOgFAr8nDA3xDCv+FA6JHrLyBqM9L51U=)
3: 4rp_kzmuCsTFSF79KM0E2s8TRRA.roa (hash: /sWVxodHmUW4o9fGfenCiWQ8Iz1pRbW+OKOeYSpw/FY=)
4: ZCB0V614s4hm4UDrVpTDXF9ydNs.roa (hash: K3gIpKFOYghu8iR6c00YasJoi3JdjDG+yf4sN8kzW7M=)
5: vV7AoLFlTWrCFY6hwXHgkxFLAws.roa (hash: URPr3pWkqf5DBiYyXoH7RFxU+85SFP0jFgfVXWAKE8g=)
6: ygLFxDwA8U6FtbB1me3SZ8WitNI.crl (hash: fdv2Y6wzXJ3lmIEOZCSYDQOOKqJ0KVAN0AbJtkXA8yQ=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 08:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Validity
Not Before: Jul 15 01:43:47 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=B63C75AFA65E0C2EDC0E04CD20985355E1EE349D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:98:f2:00:37:59:b2:b2:f3:89:59:0b:91:
dc:70:f2:57:71:f1:f1:f0:6f:88:01:5e:91:90:43:
c8:91:42:cf:6a:c8:6b:9a:cc:a1:68:0a:1e:93:10:
71:bb:50:f6:35:3c:fb:1c:00:6f:c5:ea:cf:cd:65:
14:8e:d6:61:da:78:19:cf:17:65:e2:83:ed:15:78:
28:1c:0f:cc:52:9d:40:5d:00:15:ed:a1:35:d0:ac:
c2:f7:bf:82:c3:88:3d:ed:ae:42:76:f7:3a:7a:3f:
91:a7:02:2c:6f:d3:c8:09:a9:18:0e:b8:71:b8:44:
4e:6b:15:43:05:3e:41:04:18:ae:aa:e4:2a:25:6e:
90:e2:8e:3e:44:20:96:7a:b2:7a:5e:d8:88:c6:88:
62:c4:bd:cb:4d:c9:97:06:5d:f8:d3:ff:62:44:3c:
b8:63:56:0d:ae:3e:90:2a:44:7a:8a:83:c5:0c:f1:
ae:d2:e7:b7:78:f5:a5:56:a5:b9:02:30:47:bb:15:
fc:f9:25:3b:7d:bd:23:e4:6e:23:e6:e3:36:a2:4e:
1f:f4:04:3a:24:5b:ae:ee:1c:79:bf:0b:52:a7:84:
40:60:b2:cb:80:5e:9f:98:a3:12:57:de:cc:fe:84:
b6:5e:f3:40:f7:b9:9c:1d:84:48:cc:cf:68:a5:6d:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:75:AF:A6:5E:0C:2E:DC:0E:04:CD:20:98:53:55:E1:EE:34:9D
X509v3 Authority Key Identifier:
keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7f:f9:04:91:ef:7e:8b:37:12:88:eb:14:5a:7e:1c:a4:49:
e9:40:a7:11:66:b1:f8:d9:24:a6:84:2a:d3:e7:51:85:a8:64:
5e:04:80:ad:37:c3:e6:57:8c:c1:27:d4:50:fb:08:27:b2:94:
6e:61:80:f6:5e:f8:98:96:bd:62:50:bf:d2:3c:aa:57:23:7d:
7a:3f:ae:80:91:0d:9b:61:69:81:f2:88:d2:24:d9:18:54:83:
71:45:8a:98:8a:80:5d:21:1f:47:3d:7c:64:68:4e:d0:77:7f:
87:c8:b6:79:12:8a:df:88:fe:70:66:17:a1:d8:9b:3a:b1:5f:
a4:a6:b6:a3:7c:78:ec:9c:54:9c:71:01:cf:e8:2d:ad:0c:15:
dd:4e:07:a3:a6:37:56:dd:12:0d:95:da:92:2d:e6:6d:a6:11:
5d:86:79:d2:5b:61:0d:81:bc:b4:dd:07:e0:a8:c1:50:52:f6:
1a:21:c5:b1:b3:84:05:03:68:37:12:04:65:b9:2b:9f:bb:b0:
74:c0:50:a2:6d:66:22:c8:97:ba:8f:87:0f:ba:14:3e:b8:b1:
ff:96:97:b0:0b:8a:48:53:60:4d:93:87:c0:a4:3e:4e:ac:2d:
d5:60:45:4d:b1:72:5d:da:27:26:48:ab:50:ad:f9:21:13:5b:
d8:2b:b9:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:15:57 2026 by rpki-client