This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
File: JFBahrANzQW6NgvKZq3_YCvZWqg.mft (raw, json)
Hash identifier: KgB4KKckuA1HxPQcLD3+9ptiNiXP2x6Ivsej7rvE1uE=
Subject key identifier: 37:54:72:5C:CF:50:D9:28:FB:7B:09:EA:73:AD:61:6E:C2:6B:18:2A
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Certificate issuer: /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial: 85
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
Manifest number: 1C25
Signing time: Mon 22 Dec 2025 10:56:07 +0000
Manifest this update: Mon 22 Dec 2025 10:56:07 +0000
Manifest next update: Tue 06 Jan 2026 10:56:07 +0000
Files and hashes: 1: 9LzZ6itj0-XE7xid-GvA2cN24jY.roa (hash: hmAJNcO+Y9kpkfI2EclwSmKm3FKDveuciI0Oyebf+cs=)
2: BLMB65YKDilSH2-ivPU31QSZJnI.roa (hash: THgO3N5FUnlH3Uo1kiIYx+DO/Mj2TaUZULagIphNwj0=)
3: DGtrIHfUxKyle1Ld7ooXa6MBuFU.roa (hash: BTsVDDcZ0Wqr48K2JkZUod6kC2JTarmjwBJNCwF4PvA=)
4: JFBahrANzQW6NgvKZq3_YCvZWqg.crl (hash: RKczWKUSAytYBgHxdmbzoPehiD78vK0irxGOjldiS4M=)
5: UWP5aFt5WfIDsDftrt0pnMBrRp8.roa (hash: IK9+a0NJqHMg1dH5NccdFL402pRGKPoT23G1LDPOC2Y=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Validity
Not Before: Dec 15 01:32:50 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=3754725CCF50D928FB7B09EA73AD616EC26B182A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:a7:b6:7f:99:b5:66:a9:91:70:29:1c:4f:
2b:39:f8:f8:29:34:1e:9c:dc:b1:a9:cc:ac:0d:58:
60:69:40:fd:75:c4:76:eb:52:3f:94:29:4b:c2:70:
12:1d:07:95:a4:8a:92:95:20:95:64:f0:6b:57:88:
f9:87:6d:95:d7:e9:9f:cc:a8:3c:d7:c4:11:81:5e:
d2:80:80:11:e2:38:7f:65:21:6f:80:44:6a:47:63:
3c:8a:91:62:42:c0:cd:70:ee:07:e4:ce:d5:80:e0:
0c:71:34:ed:e3:7b:e1:67:e1:55:21:6b:39:5b:58:
aa:5d:66:a4:2d:d0:ee:ae:6f:02:65:ee:6f:1a:c9:
e8:4d:2f:3f:6e:f9:12:21:aa:52:db:5e:ed:9c:75:
6d:ad:01:49:e2:bd:f1:2d:2e:12:99:4a:6f:1a:92:
b7:20:55:11:71:8c:6a:fb:ef:42:d8:c4:3a:17:8c:
67:5e:6d:42:3f:65:a3:b2:2f:5f:48:78:7f:18:f6:
65:0f:02:3e:5b:ac:3c:d4:d2:38:ed:45:6a:62:87:
a9:e3:b2:fe:83:30:b0:e1:ff:04:8c:ab:c6:11:aa:
c3:83:65:60:58:88:c7:94:e7:35:a4:67:57:99:f3:
1f:68:9b:7a:40:9b:51:70:94:ac:ef:cd:04:7d:97:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:54:72:5C:CF:50:D9:28:FB:7B:09:EA:73:AD:61:6E:C2:6B:18:2A
X509v3 Authority Key Identifier:
keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fd:ce:2d:45:53:60:91:8b:29:18:76:9e:ed:6a:89:51:e6:
d6:34:28:21:c7:de:6c:c6:4e:b7:ce:da:25:0e:b0:bf:42:91:
06:33:97:0e:92:b7:94:22:fd:31:ea:85:a5:5b:5c:16:a6:26:
8f:1c:df:f5:c3:a4:49:b4:3c:27:56:6c:7c:82:89:56:df:61:
a1:f8:08:ce:f6:a4:05:ba:f8:33:6c:1a:c0:3f:09:57:4e:58:
cd:26:72:42:d6:10:ef:95:3d:7f:c7:a7:2e:e8:28:95:05:d9:
b2:8e:14:83:02:4b:41:de:3d:2d:a2:3b:55:20:55:88:68:0f:
02:51:df:8b:43:4b:bd:80:15:e1:3a:72:5c:a5:3a:52:f4:c0:
c8:32:ce:c4:b7:37:af:69:14:1a:95:89:df:13:34:96:1b:4f:
d1:c1:14:0b:2e:16:3d:f9:f2:d4:16:45:26:71:e9:b2:a8:12:
da:99:c9:06:c6:8e:83:e3:db:da:9a:a2:9b:b3:0e:70:03:1d:
9f:ca:50:e8:f6:98:45:d8:28:e1:dc:55:c0:77:38:38:e4:c7:
d8:43:7b:f5:90:db:d2:86:ae:74:89:ac:a4:11:f5:b4:9d:b6:
e0:53:cb:b6:88:30:ff:4a:d7:f4:a2:3e:1e:6c:e1:3e:a3:0a:
b7:cb:a5:ee
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQ1
MDVBODZCMDBEQ0QwNUJBMzYwQkNBNjZBREZGNjAyQkQ5NUFBODAeFw0yNTEyMTUw
MTMyNTBaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM3NTQ3MjVDQ0Y1MEQ5
MjhGQjdCMDlFQTczQUQ2MTZFQzI2QjE4MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpeKe2f5m1ZqmRcCkcTys5+PgpNB6c3LGpzKwNWGBpQP11xHbr
Uj+UKUvCcBIdB5WkipKVIJVk8GtXiPmHbZXX6Z/MqDzXxBGBXtKAgBHiOH9lIW+A
RGpHYzyKkWJCwM1w7gfkztWA4AxxNO3je+Fn4VUhazlbWKpdZqQt0O6ubwJl7m8a
yehNLz9u+RIhqlLbXu2cdW2tAUnivfEtLhKZSm8akrcgVRFxjGr770LYxDoXjGde
bUI/ZaOyL19IeH8Y9mUPAj5brDzU0jjtRWpih6njsv6DMLDh/wSMq8YRqsODZWBY
iMeU5zWkZ1eZ8x9om3pAm1FwlKzvzQR9lyAvAgMBAAGjggI/MIICOzAdBgNVHQ4E
FgQUN1RyXM9Q2Sj7ewnqc61hbsJrGCowHwYDVR0jBBgwFoAUJFBahrANzQW6NgvK
Zq3/YCvZWqgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MzkvSkZCYWhyQU56UVc2Tmd2S1pxM19ZQ3ZaV3FnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSkZCYWhyQU56UVc2Tmd2S1pxM19Z
Q3ZaV3FnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbwGCCsGAQUFBwELBIGvMIGsMGIG
CCsGAQUFBzALhlZyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzE2MzkvSkZCYWhyQU56UVc2Tmd2S1pxM19ZQ3ZaV3FnLm1m
dDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKb9zi1FU2CRiykYdp7taolR5tY0KCHH3mzGTrfO2iUOsL9CkQYzlw6S
t5Qi/THqhaVbXBamJo8c3/XDpEm0PCdWbHyCiVbfYaH4CM72pAW6+DNsGsA/CVdO
WM0mckLWEO+VPX/Hpy7oKJUF2bKOFIMCS0HePS2iO1UgVYhoDwJR34tDS72AFeE6
clylOlL0wMgyzsS3N69pFBqVid8TNJYbT9HBFAsuFj358tQWRSZx6bKoEtqZyQbG
joPj29qaopuzDnADHZ/KUOj2mEXYKOHcVcB3ODjkx9hDe/WQ29KGrnSJrKQR9bSd
tuBTy7aIMP9K1/SiPh5s4T6jCrfLpe4=
-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:52 2025 by rpki-client