This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
File: GbT9rpYvSWBYix0r5qHtQvE3CY4.mft (raw, json)
Hash identifier: PHaXaD0DzBSz7PstS/hul8SLX7+h95g1sd/qoR/rcz0=
Subject key identifier: D1:75:0D:07:33:AA:16:84:F4:CE:10:B9:17:B0:62:CC:41:00:D2:E9
Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
Certificate issuer: /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Certificate serial: 65
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
Manifest number: 0E46
Signing time: Sun 21 Dec 2025 10:53:36 +0000
Manifest this update: Sun 21 Dec 2025 10:53:36 +0000
Manifest next update: Mon 05 Jan 2026 10:53:36 +0000
Files and hashes: 1: 5NtwJDKw7aN72kMkAGdME-Bkdyk.roa (hash: aih7U5A2ZYFvePC46lOc+jI2bSCubcVA4ehSKk8NqCc=)
2: GbT9rpYvSWBYix0r5qHtQvE3CY4.crl (hash: 9D1KNTNOMyG3qmtkMJChOlxKdk73JJ68sBOd/sMepww=)
3: l0PUhy1nNlcP8HolNU1vhMOFAlg.roa (hash: Nz9gT8j2GGsLLXJZaom54oiuFfawP/x6IgvrtmRs86g=)
4: mXzII3oOUttKbVZDlW8wqKiJtE4.roa (hash: +J8bYpFVueGlE80XHvoQ2fPKenZcmTxcvDkswv2KJDs=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 06:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Validity
Not Before: Dec 15 01:32:57 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=D1750D0733AA1684F4CE10B917B062CC4100D2E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:e5:21:f4:cd:32:dd:b0:8f:ac:e3:88:d9:
47:e2:4c:cf:5d:7a:74:c5:77:e8:83:20:c1:06:74:
2e:ae:69:58:ce:3c:56:74:11:ff:62:e6:71:25:55:
3e:05:e5:cf:47:56:3e:96:db:eb:6c:8a:f7:0c:2e:
80:41:ea:2a:72:97:19:e9:17:9c:31:6b:ea:9e:f0:
16:0a:88:ec:9d:84:22:a2:2f:a6:a1:04:dd:ad:e8:
a5:8d:a9:ea:49:f8:25:51:89:30:cd:51:e8:78:20:
fc:90:72:59:fd:a4:76:e2:26:38:50:fd:78:40:13:
c4:65:91:a8:d7:f8:8a:8c:b3:58:96:ee:ac:d9:d8:
8c:cf:6a:e3:8c:b6:50:a8:ec:d8:c3:15:05:7b:16:
45:ac:13:36:c7:f0:e5:af:3f:18:77:60:a9:2c:9c:
cd:19:a2:c2:92:c5:7c:92:b6:54:8a:98:b3:45:36:
f0:af:66:4c:e4:e1:9a:45:10:63:a8:60:1d:e1:63:
aa:9d:17:c8:4d:f3:8a:f6:0a:b5:d9:0b:e2:ee:ac:
f6:34:38:75:81:02:b3:7b:7a:5c:d5:21:3c:d7:5e:
fc:a8:4c:5c:5e:38:03:15:5a:d1:78:a5:47:aa:77:
38:b1:d3:37:24:cb:93:a3:fe:c5:96:ff:0b:fb:72:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:75:0D:07:33:AA:16:84:F4:CE:10:B9:17:B0:62:CC:41:00:D2:E9
X509v3 Authority Key Identifier:
keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:fb:80:8a:85:de:08:98:11:16:f4:fd:3a:49:45:3b:a1:99:
c7:22:98:4c:66:7d:00:51:c2:2d:3e:a3:a7:b3:a6:0e:2b:09:
ca:b2:32:93:8f:33:4c:76:0f:80:3e:16:fd:db:57:df:de:a5:
73:66:e2:32:87:33:84:ac:4a:a9:68:60:f3:61:e1:cf:e4:55:
3d:e4:65:1e:06:75:ff:bf:22:48:41:25:be:e8:8f:c4:dc:cf:
23:df:84:fb:e2:63:a2:ab:15:3f:e8:b3:2c:77:85:a0:37:34:
12:42:93:19:de:a4:5c:2b:78:09:9d:97:0b:02:a2:d7:67:f8:
75:af:82:35:b2:19:3e:6c:6c:b6:29:6e:3e:4b:0e:b8:1f:33:
1b:72:00:fb:8b:b3:22:7d:33:fd:b4:62:53:be:8f:df:26:36:
49:7d:2e:c7:c2:c3:f4:da:c8:d3:38:04:c2:b4:45:36:cf:ae:
68:cd:3e:65:37:8f:ca:11:50:e8:fd:a0:56:6b:6e:a6:6a:17:
89:1d:f5:bf:a2:18:4a:70:18:2c:21:c1:50:ca:bd:42:1e:df:
5a:22:14:2a:ec:f0:26:9d:97:6a:8d:3a:ea:51:22:a4:ff:3f:
cd:7f:da:3e:70:e5:be:95:58:31:4f:f2:98:53:53:e8:a7:c4:
7b:6e:7a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 14:14:29 2025 by rpki-client