This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.mft
File: CobmwN1HM8FC8B3VMvs-ruQjsyA.mft (raw, json)
Hash identifier: ef0D6KHPnRQYxNs0ahwPos7O+5VS0sCI3hl7xpNlwOc=
Subject key identifier: 9D:A2:C8:C5:55:91:4B:3D:10:EB:15:B7:C2:78:A0:F9:D0:67:77:A6
Authority key identifier: 0A:86:E6:C0:DD:47:33:C1:42:F0:1D:D5:32:FB:3E:AE:E4:23:B3:20
Certificate issuer: /CN=0A86E6C0DD4733C142F01DD532FB3EAEE423B320
Certificate serial: 33
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CobmwN1HM8FC8B3VMvs-ruQjsyA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.mft
Manifest number: 0A07
Signing time: Mon 22 Dec 2025 11:55:07 +0000
Manifest this update: Mon 22 Dec 2025 11:55:07 +0000
Manifest next update: Tue 06 Jan 2026 11:55:07 +0000
Files and hashes: 1: CobmwN1HM8FC8B3VMvs-ruQjsyA.crl (hash: hEDADZUrxzzuEGEvrXeHs6QjysB48HtgJUo9DnIqop8=)
2: yq9woHc_QybUnRERYK6p3VxzyXg.roa (hash: IltfYlKz2d2zF5Dh5q8MRK1tkyK7AvfuwX/ToFFHfhs=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CobmwN1HM8FC8B3VMvs-ruQjsyA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A86E6C0DD4733C142F01DD532FB3EAEE423B320
Validity
Not Before: Dec 15 01:42:19 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=9DA2C8C555914B3D10EB15B7C278A0F9D06777A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:78:7b:ee:70:81:e9:74:47:eb:05:01:26:
d2:0b:3e:8c:9a:43:37:31:b2:8e:90:b0:03:d1:a5:
a6:15:23:80:e2:43:51:9d:0c:c3:d5:e7:6d:3d:fe:
62:ce:b5:e8:dd:6c:06:0c:73:10:4b:ab:49:fc:20:
1e:04:10:9b:90:04:04:32:2f:8c:7d:26:f3:a3:b2:
9a:e6:32:84:5a:59:fb:1c:41:02:54:f6:33:e3:b1:
a3:45:d0:94:8f:8b:23:37:2c:ab:c5:26:f7:86:c2:
46:d2:70:b5:6f:57:3d:70:81:12:67:d5:e1:1b:df:
89:87:70:59:f3:3d:0e:63:11:64:fb:71:19:f3:fa:
76:29:75:4b:ee:ed:5c:f8:9a:fc:a3:03:3c:cd:af:
6d:df:c7:0e:7f:f1:62:77:54:f8:10:5a:bf:ff:a4:
05:ad:2b:f1:14:79:2f:41:82:46:ab:a2:81:8a:f1:
a6:e1:02:24:3d:75:11:3a:8f:40:3a:51:9c:1c:28:
ce:aa:15:c5:30:e2:e2:01:9b:d5:5f:85:ae:2f:f3:
04:6b:aa:02:43:25:90:f4:9b:b5:a0:04:e4:42:57:
07:42:5a:74:66:06:f5:b5:2e:d4:af:17:45:82:f3:
0f:f9:29:30:38:40:be:bd:28:3a:45:ff:2b:77:d9:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A2:C8:C5:55:91:4B:3D:10:EB:15:B7:C2:78:A0:F9:D0:67:77:A6
X509v3 Authority Key Identifier:
keyid:0A:86:E6:C0:DD:47:33:C1:42:F0:1D:D5:32:FB:3E:AE:E4:23:B3:20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CobmwN1HM8FC8B3VMvs-ruQjsyA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:64:b4:22:fb:5c:1d:a6:2a:9a:7d:a2:a4:c9:cb:59:d9:13:
3d:15:42:39:98:02:f7:45:55:62:9b:e8:84:d8:ca:14:37:8b:
22:fd:53:a3:c7:6f:37:6b:df:49:86:1e:52:aa:6b:1b:9e:ed:
5c:3c:b9:8f:f3:68:1f:d3:24:ea:04:a1:5e:7c:a3:95:6d:66:
06:79:0d:5a:a9:21:83:d8:57:94:9d:f6:7d:ff:f4:57:bc:e9:
05:d0:63:e7:2e:31:5a:ea:75:e9:8d:a9:1f:18:69:ee:91:f5:
18:4f:9d:ec:e8:13:2d:9e:00:32:30:60:b2:b1:95:89:31:77:
d5:8a:1e:14:63:d6:94:6b:7d:d8:d6:ab:76:97:14:ff:79:53:
5e:55:21:2a:11:b8:2f:ae:13:7d:f1:1f:ce:7c:e9:44:90:2d:
40:f9:32:bc:3b:f3:a2:6a:7a:23:0e:dd:f1:5f:c2:70:83:86:
23:96:e4:3b:ca:6f:6a:76:7e:44:65:ad:f3:0d:f8:8c:83:c5:
56:e8:c9:49:e2:1a:9f:b5:86:2b:36:ef:e5:8b:53:09:35:35:
a3:fd:ae:9b:1b:18:db:9f:38:62:18:4e:25:8c:75:01:03:e0:
87:ea:dc:d3:76:3e:b9:59:0d:1d:99:77:9d:65:04:a1:20:8e:
7f:c5:56:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:37 2025 by rpki-client