This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.mft
File: A2FO6cJj1BxMb07JdrGHIXyzkRI.mft (raw, json)
Hash identifier: CLf3O2jgG9AxDHb01cEIsiyX+FJEKyQ2/j4l0eM8gy0=
Subject key identifier: F4:D3:19:EA:A1:42:F4:F1:0C:2E:AB:9B:59:8C:17:AA:37:68:67:C3
Authority key identifier: 03:61:4E:E9:C2:63:D4:1C:4C:6F:4E:C9:76:B1:87:21:7C:B3:91:12
Certificate issuer: /CN=03614EE9C263D41C4C6F4EC976B187217CB39112
Certificate serial: 46
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A2FO6cJj1BxMb07JdrGHIXyzkRI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.mft
Manifest number: 0A5D
Signing time: Sun 21 Dec 2025 11:26:12 +0000
Manifest this update: Sun 21 Dec 2025 11:26:12 +0000
Manifest next update: Mon 05 Jan 2026 11:26:12 +0000
Files and hashes: 1: A2FO6cJj1BxMb07JdrGHIXyzkRI.crl (hash: bHoO3IlarSdZgfw4kSyQefm3/q43dndRawQPb/XSiKo=)
2: palEWz74XBOxEJ5sU61_O5pfu_8.roa (hash: Lvh+cFrwusu0QaKkuDKRrlvo86h/D2d8JyFn5u/i0ug=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A2FO6cJj1BxMb07JdrGHIXyzkRI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 06:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03614EE9C263D41C4C6F4EC976B187217CB39112
Validity
Not Before: Dec 15 01:41:03 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=F4D319EAA142F4F10C2EAB9B598C17AA376867C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:4a:77:1e:fb:26:2d:74:6b:1c:86:06:dd:
63:4b:6c:a2:22:e4:3d:b8:6f:44:5e:d6:dc:ce:fb:
00:39:87:7c:aa:52:59:36:13:1a:4c:be:1b:f0:0a:
6e:6d:d7:16:0b:63:63:c6:60:72:40:fa:50:3f:3f:
3a:5d:b7:b5:cb:b6:6b:69:dd:71:21:27:30:30:7d:
46:18:88:c4:6d:55:b4:39:57:63:7c:69:c7:3b:84:
f8:92:de:4d:06:0b:f9:47:3f:65:51:d9:96:7b:d0:
4d:a5:b2:ad:c8:84:20:07:19:67:c6:e9:ba:d3:0c:
6b:ee:b2:73:fe:91:a5:c7:32:94:f9:d6:e4:3c:27:
b8:7e:f9:f2:ec:1f:09:c4:3c:97:7b:a2:55:18:56:
51:6c:19:6f:46:2e:f0:9b:ef:5c:10:1b:c3:ea:f1:
ef:8b:64:d7:34:23:a6:fd:2e:9e:86:82:01:02:88:
9c:b3:6f:2b:a5:0b:49:ba:c1:7f:d6:81:2d:89:33:
5f:b0:70:e6:da:7e:3d:7d:98:d7:38:c9:4a:65:d1:
4c:e5:6f:a3:51:bf:c5:e7:8e:51:20:ff:a5:e9:64:
2d:9a:2a:48:d7:0c:b7:0d:78:3e:51:ee:41:0d:49:
d9:be:25:2b:b1:57:40:36:c3:dd:a1:9e:06:c0:bd:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D3:19:EA:A1:42:F4:F1:0C:2E:AB:9B:59:8C:17:AA:37:68:67:C3
X509v3 Authority Key Identifier:
keyid:03:61:4E:E9:C2:63:D4:1C:4C:6F:4E:C9:76:B1:87:21:7C:B3:91:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A2FO6cJj1BxMb07JdrGHIXyzkRI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b4:d9:3f:7f:b9:b7:e5:90:f3:3a:60:fe:99:d9:ce:49:30:
ee:ac:b6:f2:b6:a9:7e:2e:0f:bc:0f:23:d3:e2:f6:33:b2:5e:
d9:5e:b5:29:03:8f:69:20:02:da:51:69:6e:a6:e8:57:e1:8e:
1e:08:1a:ce:3d:5d:29:8f:61:20:31:74:5a:c1:95:dc:87:c3:
3a:32:f9:04:a2:2f:cf:4c:ed:83:fd:19:8a:89:dc:07:d8:78:
32:d6:4c:ac:f3:13:ce:e9:13:60:cd:76:58:b3:54:44:96:72:
a2:41:8f:43:2b:60:2c:ff:a3:fc:8c:69:c8:a6:9a:91:b0:d9:
1b:e6:84:fe:b5:1f:b8:43:69:62:88:17:b3:db:ca:ae:52:cd:
08:c5:27:47:a8:b8:e2:ea:cb:48:02:02:52:61:70:7f:12:42:
16:41:0c:6a:82:ea:d1:4c:2a:75:26:d9:6e:bf:4f:41:5b:bc:
95:c6:08:36:2a:79:4a:57:49:7b:0e:97:5c:2c:7b:7c:b9:20:
2f:b0:02:6c:f2:ad:d6:21:32:b0:a2:60:74:56:d8:5c:a2:b0:
4d:22:f3:c1:04:c1:d3:ee:e2:b4:fe:57:6e:45:34:61:3e:4b:
b6:8d:85:d0:d7:e4:cd:c7:c2:08:d4:28:c7:2d:f2:1b:45:57:
e2:c7:94:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:05:36 2025 by rpki-client