This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
File: 7HBrbRGl7MjB9otL6m6OmoKgOv0.mft (raw, json)
Hash identifier: jnqDvTX+/FJzQEExmQFuGGf5aewYc950/sPJbcWQ6Fs=
Subject key identifier: 29:59:DC:4E:B0:C9:AD:EF:A8:D7:DF:7A:4C:54:E9:36:45:BE:B8:EC
Authority key identifier: EC:70:6B:6D:11:A5:EC:C8:C1:F6:8B:4B:EA:6E:8E:9A:82:A0:3A:FD
Certificate issuer: /CN=EC706B6D11A5ECC8C1F68B4BEA6E8E9A82A03AFD
Certificate serial: 4D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
Manifest number: 0A97
Signing time: Mon 22 Dec 2025 10:42:17 +0000
Manifest this update: Mon 22 Dec 2025 10:42:17 +0000
Manifest next update: Tue 06 Jan 2026 10:42:17 +0000
Files and hashes: 1: 7HBrbRGl7MjB9otL6m6OmoKgOv0.crl (hash: Ot+6vIl0LQNbBWZK0CRtWuSMvF1NjGv6vsiwcIAdfc0=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 10:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC706B6D11A5ECC8C1F68B4BEA6E8E9A82A03AFD
Validity
Not Before: Dec 15 01:34:09 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=2959DC4EB0C9ADEFA8D7DF7A4C54E93645BEB8EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:92:3e:f8:4b:13:2b:40:7e:43:99:98:60:d2:
7c:18:9a:07:55:34:4a:7f:f9:d2:d2:28:7f:e1:37:
41:30:58:31:63:52:0a:1c:7c:19:a0:e7:ed:fe:29:
80:df:cc:60:88:71:7e:ae:3c:ba:7c:23:52:d9:52:
9d:82:65:09:3b:84:c7:2c:24:76:3c:05:c1:db:2a:
56:ca:18:ed:b0:04:15:9c:08:25:7f:36:a8:e7:d8:
33:2f:37:39:84:71:10:9d:5e:cd:d5:89:9c:50:e6:
c1:57:a8:85:60:62:a3:2c:06:55:8c:32:52:51:f8:
98:78:c5:fe:17:9a:d4:1b:62:7d:a8:2c:57:1a:9e:
91:b2:60:62:97:41:1f:e7:f2:0a:8f:cb:5c:46:f9:
5c:40:0c:73:25:4d:c9:05:76:77:56:6f:20:02:2e:
f9:b9:1b:84:68:23:a3:af:68:a4:f6:28:c6:d1:5d:
35:12:cc:3a:0a:9e:13:d1:e5:62:8b:9a:2d:16:88:
a6:c3:71:3b:c2:7d:8f:69:3a:05:48:08:13:f5:1a:
77:26:0a:60:76:f7:fd:01:3e:08:e1:47:6a:79:67:
44:a3:85:e3:f1:5b:30:22:d3:f7:f6:bc:d4:56:ea:
0b:d5:53:5f:73:fe:af:dc:ae:f7:45:8a:40:19:e0:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:59:DC:4E:B0:C9:AD:EF:A8:D7:DF:7A:4C:54:E9:36:45:BE:B8:EC
X509v3 Authority Key Identifier:
keyid:EC:70:6B:6D:11:A5:EC:C8:C1:F6:8B:4B:EA:6E:8E:9A:82:A0:3A:FD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:02:a1:85:0c:61:c1:4b:45:f7:0e:44:ba:ea:b4:45:1c:73:
c9:9d:cc:3d:ee:ab:9c:1f:e6:99:36:1d:ba:c5:6e:d8:f7:a6:
55:92:bc:3f:42:71:c0:3d:48:0d:e4:ea:7d:02:9e:21:44:6f:
9b:73:bb:ff:5c:cb:1e:f2:ca:45:3f:1a:ee:3e:66:81:67:99:
7a:06:56:b8:98:97:22:28:b7:b5:df:62:7c:23:b3:9b:66:52:
0e:3d:ea:f1:50:7d:7a:75:6f:b3:37:e5:e8:46:d0:45:21:cd:
d5:fc:fc:7d:6e:09:83:e3:94:cd:3d:6c:fd:86:f6:26:31:5d:
c5:65:bc:20:0c:35:85:2d:d0:27:ca:c0:4a:30:b2:72:e2:ad:
cb:07:bb:7d:ad:dd:31:90:ac:f4:12:d6:5f:65:2d:d3:2c:4e:
db:fa:e3:5d:ef:2f:6e:4d:46:0f:85:7f:39:bd:4e:13:f2:08:
71:be:82:1c:47:8b:c8:ce:17:c0:2d:1d:66:40:4c:d4:c9:63:
22:35:32:ac:53:61:c2:35:61:74:b4:e6:46:ea:4e:c8:e0:15:
60:d8:06:02:cc:4f:51:a0:0a:bd:31:b7:23:2a:3e:bf:9f:f7:
5b:bc:68:22:17:1b:64:66:e9:b9:e7:e6:5e:78:ec:f0:ea:96:
1f:91:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:40:01 2025 by rpki-client