This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.mft
File: vbi4EKqFGPGejqHuFTlmJzas8Os.mft (raw, json)
Hash identifier: Ls8Wo28MEp0iYPmhHLuciQI7v1uzwN0VWRSOpBuxg6c=
Subject key identifier: 96:ED:5A:BA:4A:6A:F6:57:B0:18:94:4F:EF:2C:E4:7F:30:7A:EF:10
Authority key identifier: BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB
Certificate issuer: /CN=BDB8B810AA8518F19E8EA1EE1539662736ACF0EB
Certificate serial: 33
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.mft
Manifest number: 0A08
Signing time: Mon 22 Dec 2025 11:59:25 +0000
Manifest this update: Mon 22 Dec 2025 11:59:25 +0000
Manifest next update: Tue 06 Jan 2026 11:59:25 +0000
Files and hashes: 1: q0yknwtLnYXRZaJHbuIIwWje6fA.roa (hash: s5cl18Pgbp1T/W8CcZSXNjDo46X77pj+6qzV44teZaw=)
2: vbi4EKqFGPGejqHuFTlmJzas8Os.crl (hash: 7d0COJItQ/rqd4Ktq0E0QFl9UgGsCILM5Hm4EjWrfYs=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDB8B810AA8518F19E8EA1EE1539662736ACF0EB
Validity
Not Before: Dec 15 01:42:11 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=96ED5ABA4A6AF657B018944FEF2CE47F307AEF10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d6:4d:59:6e:22:e7:97:d6:55:1d:bd:29:0c:
af:ca:25:1b:c2:f5:76:6d:fb:d3:27:61:ed:c7:f2:
dd:1b:ad:fd:44:44:21:a9:55:fb:0a:50:d4:08:81:
58:ce:6b:a7:a7:50:33:63:fb:72:24:5a:60:e6:d7:
a9:a3:9b:02:40:eb:43:e8:0b:35:38:39:4e:12:67:
6d:69:3d:33:68:19:8a:a5:7e:84:b1:d3:e4:0d:1d:
06:74:5e:7c:b7:28:23:00:af:10:12:ee:3d:c7:7b:
80:e0:8c:b5:7f:95:17:ea:98:d7:78:6e:c7:f6:c9:
45:22:e4:3f:a6:09:4e:39:ea:c1:1d:09:09:9d:02:
0c:b1:4b:9f:92:36:5d:5b:8b:df:ca:38:95:7a:3c:
35:a2:39:d4:40:6b:b6:d9:db:7f:27:1e:15:7d:be:
b8:3d:0c:82:f3:1d:21:d9:72:1b:70:c1:53:9c:65:
b5:98:73:59:bd:e7:16:d4:7a:13:b1:42:a4:4b:29:
9a:d7:54:b2:64:ba:48:84:17:b2:92:62:0e:85:52:
01:fa:49:a7:60:d4:7b:26:74:8b:a0:48:b8:8e:01:
ea:28:1a:40:6a:98:bf:42:a4:3a:92:d1:79:91:39:
5a:8b:59:3e:89:a5:f8:3c:c9:a2:59:83:c4:f8:f1:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:ED:5A:BA:4A:6A:F6:57:B0:18:94:4F:EF:2C:E4:7F:30:7A:EF:10
X509v3 Authority Key Identifier:
keyid:BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:5b:55:f5:b4:d3:59:3b:ba:c5:6e:84:51:36:ea:39:1f:85:
59:4f:5b:0c:f7:13:c1:20:8e:b4:a9:97:59:87:33:72:8c:eb:
77:49:48:3e:e5:85:bf:62:cd:ee:fd:48:43:40:f6:44:b1:0a:
fb:2b:63:df:6f:82:cb:86:47:98:c9:1c:c0:41:f7:d5:fe:dd:
4c:28:0e:0d:4b:dc:5d:b3:03:de:9f:ba:bb:07:e9:ea:66:cb:
58:51:97:a7:21:23:9a:62:17:54:1a:dd:aa:b1:51:f9:c6:47:
c2:46:57:8c:85:bd:9a:a5:07:e8:57:20:78:b2:dc:00:99:4c:
d3:d9:42:fc:70:b7:81:e4:70:6e:62:72:2a:b5:94:fe:f6:e6:
d7:1f:41:86:68:47:5e:35:16:e8:9c:b2:d8:32:01:13:5a:ee:
a4:76:b3:42:9a:1f:dd:b0:e1:6a:d3:59:5a:2c:e5:bd:b5:37:
81:2d:ef:04:5d:12:a2:3e:df:19:ce:70:ae:69:15:41:f5:71:
79:7a:57:69:65:9b:34:fb:75:23:ff:79:51:3e:6a:17:ff:cd:
dc:26:53:cf:db:a2:b0:82:7f:ab:b1:30:23:74:19:87:ea:52:
ff:fe:6c:f1:7f:ac:ef:5b:ad:94:89:97:da:6b:78:fa:68:e8:
1d:f7:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:29 2025 by rpki-client