This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.mft
File: wO3ow4eQgROPlJUwa-ee9zQKlFE.mft (raw, json)
Hash identifier: hP3BiosyTfldLe9nSU5badeVGXwUFYBXbLfIkjrRPUw=
Subject key identifier: 20:DC:89:B6:FD:2E:D0:2D:E9:D7:6B:D5:29:AE:C9:D2:84:D7:CB:4F
Authority key identifier: C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51
Certificate issuer: /CN=C0EDE8C3879081138F9495306BE79EF7340A9451
Certificate serial: 66
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.mft
Manifest number: 1C27
Signing time: Mon 22 Dec 2025 14:56:18 +0000
Manifest this update: Mon 22 Dec 2025 14:56:18 +0000
Manifest next update: Tue 06 Jan 2026 14:56:18 +0000
Files and hashes: 1: 7NWJnS8oPxaAw6Dh9y89xbttV2w.roa (hash: /YVrSb9gppTGswU7lY9yInFeGyG7NqUf4+mpY/8IJDI=)
2: wO3ow4eQgROPlJUwa-ee9zQKlFE.crl (hash: IFliNmFxY5CWYuLycPwx07rJHz5VXdgeLcyz1zW8cDg=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0EDE8C3879081138F9495306BE79EF7340A9451
Validity
Not Before: Dec 15 01:32:49 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=20DC89B6FD2ED02DE9D76BD529AEC9D284D7CB4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:17:b5:d7:53:60:94:2e:dc:42:9a:ec:95:b5:
f5:99:2d:24:37:2f:9d:15:f7:37:b8:49:55:fb:74:
2e:e7:94:3a:3b:ef:9b:34:9a:9c:c3:f6:c5:bb:d4:
23:ad:5e:96:92:af:9d:ab:e0:c1:c1:27:63:9d:90:
49:4b:ec:24:dd:4b:d3:a7:7e:e7:f6:21:8f:25:84:
50:51:1d:01:91:ca:d5:0e:2c:d7:a3:7e:2c:7d:d1:
0e:05:43:2b:94:5e:27:26:c8:7e:5a:d4:71:18:4f:
6d:41:8e:60:3c:53:46:4d:1a:ba:07:2d:63:4c:41:
a3:3d:aa:ee:ac:1d:d4:54:33:63:34:f0:4b:63:34:
d6:67:10:64:b4:b3:02:2a:ea:4e:66:72:4b:ef:54:
22:ff:4e:49:2f:49:96:6a:b2:45:2b:12:d7:6f:95:
a7:11:2c:ee:05:df:ae:76:8b:e0:cd:e2:f8:b2:22:
ec:e1:3c:af:35:0e:b0:fd:23:09:32:96:1f:3d:be:
b2:7f:0f:88:0c:95:6a:da:40:5c:85:fd:2f:78:03:
71:72:ba:b5:88:b1:3c:b5:8c:bd:70:f8:74:52:00:
cc:72:d4:c6:f9:24:15:62:ba:cf:35:d0:65:fc:07:
16:8e:bd:1c:28:be:ee:16:93:db:cc:24:8e:7d:a2:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DC:89:B6:FD:2E:D0:2D:E9:D7:6B:D5:29:AE:C9:D2:84:D7:CB:4F
X509v3 Authority Key Identifier:
keyid:C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e8:34:61:84:1f:19:d6:18:f1:c1:6e:f1:c2:cd:48:79:78:
4d:09:98:13:c5:e5:65:a6:fd:63:e8:55:fd:1a:08:08:2b:c4:
50:18:ca:79:df:9a:7f:5f:f4:89:c3:e6:9e:cb:57:5e:68:f7:
24:b5:c6:07:7f:3e:82:70:09:4f:84:cc:ee:cd:fa:32:ff:13:
8d:29:fa:78:b8:24:2c:af:7d:33:01:b5:5f:c5:a6:22:2c:8f:
b3:7f:2c:f3:51:ae:f9:ba:f8:b0:4b:74:b3:06:d0:ea:ca:de:
e5:84:bd:8b:ae:c1:50:84:9a:6c:90:71:1a:73:5d:ed:51:6d:
67:42:7b:82:44:a9:63:13:b8:62:57:0e:d9:39:e0:92:e1:82:
c4:68:d4:8d:8d:8c:fb:62:84:77:a7:9b:84:a9:c7:29:1a:53:
94:f0:ed:88:e3:d5:d6:1c:0f:11:d0:6c:d1:8b:05:14:a9:91:
1a:07:90:ca:f5:41:0b:e1:c6:9d:95:01:91:c4:43:04:70:b1:
c2:21:ff:85:39:2d:7f:37:4f:f4:71:fa:34:8c:ac:96:9e:e0:
21:5b:e6:95:0b:91:99:a9:a1:52:cd:c7:27:4b:f1:7c:5a:89:
a8:87:ac:2b:71:76:e2:fc:67:39:1f:37:c0:71:b0:74:29:2e:
0c:11:6e:fe
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMEVE
RThDMzg3OTA4MTEzOEY5NDk1MzA2QkU3OUVGNzM0MEE5NDUxMB4XDTI1MTIxNTAx
MzI0OVoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMjBEQzg5QjZGRDJFRDAy
REU5RDc2QkQ1MjlBRUM5RDI4NEQ3Q0I0RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANMXtddTYJQu3EKa7JW19ZktJDcvnRX3N7hJVft0LueUOjvvmzSa
nMP2xbvUI61elpKvnavgwcEnY52QSUvsJN1L06d+5/YhjyWEUFEdAZHK1Q4s16N+
LH3RDgVDK5ReJybIflrUcRhPbUGOYDxTRk0augctY0xBoz2q7qwd1FQzYzTwS2M0
1mcQZLSzAirqTmZyS+9UIv9OSS9JlmqyRSsS12+VpxEs7gXfrnaL4M3i+LIi7OE8
rzUOsP0jCTKWHz2+sn8PiAyVatpAXIX9L3gDcXK6tYixPLWMvXD4dFIAzHLUxvkk
FWK6zzXQZfwHFo69HCi+7haT28wkjn2i0f0CAwEAAaOCAj8wggI7MB0GA1UdDgQW
BBQg3Im2/S7QLenXa9UprsnShNfLTzAfBgNVHSMEGDAWgBTA7ejDh5CBE4+UlTBr
5573NAqUUTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYzOS93TzNvdzRlUWdST1BsSlV3YS1lZTl6UUtsRkUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC93TzNvdzRlUWdST1BsSlV3YS1lZTl6
UUtsRkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYzOS93TzNvdzRlUWdST1BsSlV3YS1lZTl6UUtsRkUubWZ0
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAGug0YYQfGdYY8cFu8cLNSHl4TQmYE8XlZab9Y+hV/RoICCvEUBjKed+a
f1/0icPmnstXXmj3JLXGB38+gnAJT4TM7s36Mv8TjSn6eLgkLK99MwG1X8WmIiyP
s38s81Gu+br4sEt0swbQ6sre5YS9i67BUISabJBxGnNd7VFtZ0J7gkSpYxO4YlcO
2TngkuGCxGjUjY2M+2KEd6ebhKnHKRpTlPDtiOPV1hwPEdBs0YsFFKmRGgeQyvVB
C+HGnZUBkcRDBHCxwiH/hTktfzdP9HH6NIyslp7gIVvmlQuRmamhUs3HJ0vxfFqJ
qIesK3F24vxnOR83wHGwdCkuDBFu/g==
-----END CERTIFICATE-----
Generated at Mon Dec 22 19:32:32 2025 by rpki-client