
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
File: ygLFxDwA8U6FtbB1me3SZ8WitNI.mft (raw, json)
Hash identifier: sO8PlTDqrxG7CPUGhP7SFmd54r4sj8kx0AQzrkkgLlA=
Subject key identifier: B6:3C:75:AF:A6:5E:0C:2E:DC:0E:04:CD:20:98:53:55:E1:EE:34:9D
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Certificate issuer: /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial: 80
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
Manifest number: 1094
Signing time: Thu 26 Mar 2026 08:05:18 +0000
Manifest this update: Thu 26 Mar 2026 08:05:18 +0000
Manifest next update: Fri 10 Apr 2026 08:05:18 +0000
Files and hashes: 1: 4ps5b4fgp712QuX0-_Jw6oxJGQ8.roa (hash: oja6K9/dAAA+w7/F/mbjg2MUNDdrmr7ZRh5gPXqKolI=)
2: 8StdLscRUcS4pDqNLXAhffV1Jtg.roa (hash: ttmUBeFzyT1xx3vDhQqICdGqKQgQLlkvyX4iexmk8JQ=)
3: K-gilyGi84prYEAFKRlz5ey90cY.roa (hash: yK45x49xV/vyR2AOstfJL2mecq7IebjuwnByZdApm78=)
4: d9sCeFewwsymVrumYvSQiJ3HKRE.roa (hash: /7FomMacdZxJDoqAlCI9s1vHxT3MEWL72eKSR0o0Ygc=)
5: rpbD43wsF05woA_KyyAXP3Z4O-s.roa (hash: sVGUGhl1L1vS6XI8Ps2KDKLdNNPmFJOFf8H4UhREMto=)
6: ygLFxDwA8U6FtbB1me3SZ8WitNI.crl (hash: CrrVdLfeo4+aakhMca5pu0LqvCPRUtfkulIARikgk+8=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Validity
Not Before: Mar 15 01:33:00 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B63C75AFA65E0C2EDC0E04CD20985355E1EE349D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:98:f2:00:37:59:b2:b2:f3:89:59:0b:91:
dc:70:f2:57:71:f1:f1:f0:6f:88:01:5e:91:90:43:
c8:91:42:cf:6a:c8:6b:9a:cc:a1:68:0a:1e:93:10:
71:bb:50:f6:35:3c:fb:1c:00:6f:c5:ea:cf:cd:65:
14:8e:d6:61:da:78:19:cf:17:65:e2:83:ed:15:78:
28:1c:0f:cc:52:9d:40:5d:00:15:ed:a1:35:d0:ac:
c2:f7:bf:82:c3:88:3d:ed:ae:42:76:f7:3a:7a:3f:
91:a7:02:2c:6f:d3:c8:09:a9:18:0e:b8:71:b8:44:
4e:6b:15:43:05:3e:41:04:18:ae:aa:e4:2a:25:6e:
90:e2:8e:3e:44:20:96:7a:b2:7a:5e:d8:88:c6:88:
62:c4:bd:cb:4d:c9:97:06:5d:f8:d3:ff:62:44:3c:
b8:63:56:0d:ae:3e:90:2a:44:7a:8a:83:c5:0c:f1:
ae:d2:e7:b7:78:f5:a5:56:a5:b9:02:30:47:bb:15:
fc:f9:25:3b:7d:bd:23:e4:6e:23:e6:e3:36:a2:4e:
1f:f4:04:3a:24:5b:ae:ee:1c:79:bf:0b:52:a7:84:
40:60:b2:cb:80:5e:9f:98:a3:12:57:de:cc:fe:84:
b6:5e:f3:40:f7:b9:9c:1d:84:48:cc:cf:68:a5:6d:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:75:AF:A6:5E:0C:2E:DC:0E:04:CD:20:98:53:55:E1:EE:34:9D
X509v3 Authority Key Identifier:
keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a3:a3:1e:1c:d7:95:52:61:3f:de:6b:e9:51:09:5b:db:eb:
cb:48:ac:24:dc:bc:d4:e5:c3:ea:e7:e1:4d:7d:c6:2b:db:d6:
24:6e:9b:26:dd:2d:34:30:76:4a:10:7b:cf:84:54:ba:c0:04:
96:b1:6a:05:c4:9c:36:d5:5f:a5:49:38:c9:0f:b6:32:d1:8f:
f1:78:42:ad:7e:99:82:37:2c:65:6d:5c:d2:aa:94:67:e3:3f:
92:08:d9:f3:ac:cd:8f:4a:ea:65:fd:e3:3d:b3:3e:8e:6c:77:
99:5e:3d:8d:2e:06:66:d6:e0:0d:b7:30:74:ab:36:39:75:2d:
7a:55:a3:54:e3:ba:39:f6:f6:38:16:f2:49:e3:7f:ce:05:74:
ff:7a:bd:a4:a5:19:53:d9:0f:a1:9c:ea:21:1d:11:aa:a7:89:
a7:92:83:c1:94:58:e9:fb:8c:7c:02:2a:38:9d:64:e0:68:a3:
dd:3e:ab:d1:55:e6:3b:59:67:a2:c1:d1:e7:72:e7:d7:84:1e:
cd:a8:2c:4c:20:05:84:06:80:08:96:ff:bb:8d:ee:b0:7a:c2:
86:0f:57:06:59:eb:34:96:d1:87:f6:52:ea:65:99:9a:52:3b:
59:ab:d7:8e:3f:41:94:b4:35:d5:5e:f7:ae:45:e8:09:eb:09:
47:f7:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:14 2026 by rpki-client