
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
File: ygLFxDwA8U6FtbB1me3SZ8WitNI.mft (raw, json)
Hash identifier: /sQ6knDYe04bVNuEXbhCSal+BCDYMpAobhtv4l/oWok=
Subject key identifier: B6:3C:75:AF:A6:5E:0C:2E:DC:0E:04:CD:20:98:53:55:E1:EE:34:9D
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Certificate issuer: /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial: 88
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
Manifest number: 11C8
Signing time: Sat 16 May 2026 22:17:09 +0000
Manifest this update: Sat 16 May 2026 22:17:09 +0000
Manifest next update: Sun 31 May 2026 22:17:09 +0000
Files and hashes: 1: -i4o0Sn3S_DfAaAuY3hGCQZB-58.roa (hash: HCMUonc0pHxNjrvWzB6IH9l+I/3yWJDz5/rD8k3+iFM=)
2: 24YjU1RanktGAQXfn15shy2vzhQ.roa (hash: +gS2LRx3BxIvOgFAr8nDA3xDCv+FA6JHrLyBqM9L51U=)
3: 4rp_kzmuCsTFSF79KM0E2s8TRRA.roa (hash: /sWVxodHmUW4o9fGfenCiWQ8Iz1pRbW+OKOeYSpw/FY=)
4: ZCB0V614s4hm4UDrVpTDXF9ydNs.roa (hash: K3gIpKFOYghu8iR6c00YasJoi3JdjDG+yf4sN8kzW7M=)
5: vV7AoLFlTWrCFY6hwXHgkxFLAws.roa (hash: URPr3pWkqf5DBiYyXoH7RFxU+85SFP0jFgfVXWAKE8g=)
6: ygLFxDwA8U6FtbB1me3SZ8WitNI.crl (hash: 4kTLyoefBRmjpghgS7l1iTnF8CEZBxkKyDrNrcVnuN8=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Validity
Not Before: May 15 01:39:17 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=B63C75AFA65E0C2EDC0E04CD20985355E1EE349D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:98:f2:00:37:59:b2:b2:f3:89:59:0b:91:
dc:70:f2:57:71:f1:f1:f0:6f:88:01:5e:91:90:43:
c8:91:42:cf:6a:c8:6b:9a:cc:a1:68:0a:1e:93:10:
71:bb:50:f6:35:3c:fb:1c:00:6f:c5:ea:cf:cd:65:
14:8e:d6:61:da:78:19:cf:17:65:e2:83:ed:15:78:
28:1c:0f:cc:52:9d:40:5d:00:15:ed:a1:35:d0:ac:
c2:f7:bf:82:c3:88:3d:ed:ae:42:76:f7:3a:7a:3f:
91:a7:02:2c:6f:d3:c8:09:a9:18:0e:b8:71:b8:44:
4e:6b:15:43:05:3e:41:04:18:ae:aa:e4:2a:25:6e:
90:e2:8e:3e:44:20:96:7a:b2:7a:5e:d8:88:c6:88:
62:c4:bd:cb:4d:c9:97:06:5d:f8:d3:ff:62:44:3c:
b8:63:56:0d:ae:3e:90:2a:44:7a:8a:83:c5:0c:f1:
ae:d2:e7:b7:78:f5:a5:56:a5:b9:02:30:47:bb:15:
fc:f9:25:3b:7d:bd:23:e4:6e:23:e6:e3:36:a2:4e:
1f:f4:04:3a:24:5b:ae:ee:1c:79:bf:0b:52:a7:84:
40:60:b2:cb:80:5e:9f:98:a3:12:57:de:cc:fe:84:
b6:5e:f3:40:f7:b9:9c:1d:84:48:cc:cf:68:a5:6d:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:75:AF:A6:5E:0C:2E:DC:0E:04:CD:20:98:53:55:E1:EE:34:9D
X509v3 Authority Key Identifier:
keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ac:9d:2d:97:2c:9c:e1:e8:c1:fa:2b:26:9c:d3:3f:6c:0c:
60:50:00:3a:0b:bb:c8:63:2f:95:78:fb:9a:26:68:0d:93:b7:
31:a0:b4:4c:4f:66:91:a4:d6:64:23:f7:80:e5:95:84:7d:e1:
87:fe:37:e7:22:8a:42:c8:75:58:56:c3:ce:d3:33:61:67:ee:
4b:21:25:25:ef:81:4b:aa:a6:bf:d2:3b:7b:b1:55:4c:af:cc:
41:8b:eb:96:c6:ab:de:f9:69:61:20:fa:a9:c6:fb:a9:8e:2a:
77:34:bd:a1:02:0b:a5:7f:ca:b0:93:5c:8b:29:7d:b3:bb:86:
b7:7a:ac:22:93:91:49:1f:9e:b8:cb:5c:74:0b:e5:c4:72:30:
78:11:12:57:17:87:0f:85:6b:9d:0c:49:7e:df:a1:96:19:3d:
9d:37:34:cf:ad:c7:f7:73:bc:30:71:4a:c2:ed:3a:9f:2d:88:
86:9c:fc:01:da:f4:93:54:bb:e5:48:44:03:e7:1e:19:0b:8e:
ae:12:0b:8d:8b:c9:0b:ee:1e:20:cb:0c:bb:3b:fa:db:22:51:
27:4a:d7:67:48:6d:4d:4d:f8:eb:7f:c0:ad:35:a2:d1:b6:1a:
9b:1d:c0:ef:76:94:79:2b:b2:99:29:78:75:d2:73:42:23:d1:
14:b7:f9:67
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ew
MkM1QzQzQzAwRjE0RTg1QjVCMDc1OTlFREQyNjdDNUEyQjREMjAeFw0yNjA1MTUw
MTM5MTdaFw0yNzA1MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI2M0M3NUFGQTY1RTBD
MkVEQzBFMDRDRDIwOTg1MzU1RTFFRTM0OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRz5jyADdZsrLziVkLkdxw8ldx8fHwb4gBXpGQQ8iRQs9qyGua
zKFoCh6TEHG7UPY1PPscAG/F6s/NZRSO1mHaeBnPF2Xig+0VeCgcD8xSnUBdABXt
oTXQrML3v4LDiD3trkJ29zp6P5GnAixv08gJqRgOuHG4RE5rFUMFPkEEGK6q5Col
bpDijj5EIJZ6snpe2IjGiGLEvctNyZcGXfjT/2JEPLhjVg2uPpAqRHqKg8UM8a7S
57d49aVWpbkCMEe7Ffz5JTt9vSPkbiPm4zaiTh/0BDokW67uHHm/C1KnhEBgssuA
Xp+YoxJX3sz+hLZe80D3uZwdhEjMz2ilbYRZAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUtjx1r6ZeDC7cDgTNIJhTVeHuNJ0wHwYDVR0jBBgwFoAUygLFxDwA8U6FtbB1
me3SZ8WitNIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMDY4L3lnTEZ4RHdBOFU2RnRiQjFtZTNTWjhXaXROSS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3lnTEZ4RHdBOFU2RnRiQjFtZTNT
WjhXaXROSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDA2OC95Z0xGeER3QThVNkZ0YkIxbWUzU1o4V2l0TkkubWZ0
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB
BQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqydLZcsnOHowforJpzTP2wM
YFAAOgu7yGMvlXj7miZoDZO3MaC0TE9mkaTWZCP3gOWVhH3hh/435yKKQsh1WFbD
ztMzYWfuSyElJe+BS6qmv9I7e7FVTK/MQYvrlsar3vlpYSD6qcb7qY4qdzS9oQIL
pX/KsJNciyl9s7uGt3qsIpORSR+euMtcdAvlxHIweBESVxeHD4VrnQxJft+hlhk9
nTc0z63H93O8MHFKwu06ny2Ihpz8Adr0k1S75UhEA+ceGQuOrhILjYvJC+4eIMsM
uzv62yJRJ0rXZ0htTU3463/ArTWi0bYamx3A73aUeSuymSl4ddJzQiPRFLf5Zw==
-----END CERTIFICATE-----
Generated at Sun May 17 02:06:05 2026 by rpki-client