This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft
File: OmLEe2ORFPaCyeWihWvA-cM-xkg.mft (raw, json)
Hash identifier: C93UxVSSLNbT+nhsVvLlzDKjwg/OBt/A7zXPiAYZgWE=
Subject key identifier: 2B:BE:FA:32:98:23:BA:2A:5C:09:D9:A4:CB:69:0D:A3:7A:76:B7:7A
Authority key identifier: 3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48
Certificate issuer: /CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648
Certificate serial: 04
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft
Manifest number: DE
Signing time: Sat 20 Dec 2025 06:46:50 +0000
Manifest this update: Sat 20 Dec 2025 06:46:50 +0000
Manifest next update: Sun 04 Jan 2026 06:46:50 +0000
Files and hashes: 1: NDGfuEmDvaCi_GhO61N8J2K1Xng.roa (hash: dsvd77mJ+RQNbqFsTYqI0Pl1NiaCRuf12fOpfk16lNY=)
2: OmLEe2ORFPaCyeWihWvA-cM-xkg.crl (hash: jgfclbBH18mTYgt7bJW2VFBykRwTn1Jw7KJK5p2a4n0=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 07:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648
Validity
Not Before: Dec 15 01:32:22 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=2BBEFA329823BA2A5C09D9A4CB690DA37A76B77A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:3f:36:cd:44:6c:56:f5:2b:3f:47:d1:57:
ff:e7:74:de:11:8f:fa:81:32:c9:96:25:73:7b:46:
58:cf:ec:0e:e7:b5:3e:9e:1a:78:70:e0:2f:16:87:
b9:a1:06:07:20:12:7e:01:fa:a9:11:bf:0f:bd:a0:
33:84:87:e6:58:d4:05:63:3a:ba:dd:1c:f8:ca:6e:
cb:f0:5e:d9:82:ee:2e:c5:86:b7:4a:be:e0:ed:17:
76:81:59:36:05:53:fe:8b:35:88:91:8a:ac:df:d4:
ea:5f:c9:2e:d9:e8:18:89:69:0b:86:30:67:5e:eb:
9e:ff:fc:18:60:13:50:05:e2:c7:f9:06:62:c3:80:
32:d3:1c:b5:7a:d0:91:c6:46:6d:8e:fc:6a:f0:e4:
f6:15:49:ff:94:f5:f8:f2:81:f4:3e:f4:ce:34:1b:
d2:ac:5a:02:23:9b:8b:1e:be:d2:3b:39:20:56:60:
aa:cc:23:f2:e7:8d:ef:2c:c7:14:d4:0a:88:a4:c5:
cd:83:28:6d:19:c0:a6:dd:cb:11:44:61:e1:bf:4a:
6b:17:c1:ef:56:58:78:e4:9e:25:99:3d:94:72:09:
0c:c1:fc:f6:53:55:50:37:53:fb:0c:6a:13:5d:7a:
0e:d3:42:44:2f:39:7c:82:aa:d9:25:2d:9d:ae:a1:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BE:FA:32:98:23:BA:2A:5C:09:D9:A4:CB:69:0D:A3:7A:76:B7:7A
X509v3 Authority Key Identifier:
keyid:3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:1e:18:f6:60:97:ea:51:c4:11:3d:1c:dc:1d:8a:ba:7b:14:
5b:65:8f:8d:c9:8e:70:69:64:83:ea:00:dd:08:3c:66:13:6c:
29:55:25:de:77:79:d4:8f:78:39:d2:34:4a:e1:fe:ad:82:9f:
a6:0e:ff:46:0e:e2:1f:86:81:bd:52:72:4e:4a:70:bb:bb:df:
b7:58:ab:b7:4b:6a:8f:b8:72:8b:f3:8b:44:a1:de:7c:48:65:
d4:40:51:bf:22:a4:e0:29:2c:0f:a5:93:06:08:cf:83:cd:48:
3a:1a:11:da:5b:ac:9c:dd:ec:d3:63:94:2d:36:ea:de:33:71:
7c:fc:ca:15:0e:b0:d0:ce:77:35:07:46:85:88:7e:ac:7f:99:
a3:a0:9c:59:c8:71:f0:fb:25:50:7c:60:31:d5:0d:6e:d6:e2:
fb:f7:46:c7:39:2c:0e:6b:07:6c:77:54:00:cb:ef:59:65:cd:
fb:ca:d4:35:13:d8:dc:25:4a:28:de:60:45:df:c2:a7:f0:6c:
d0:99:b8:16:51:2f:25:82:71:7b:f1:7f:00:d5:fd:00:c6:62:
ea:dd:22:a3:2e:e2:51:0a:18:b6:b7:7f:02:6d:39:b4:4f:2f:
ee:d7:ab:95:a4:54:31:45:e6:4c:f5:9a:fe:8e:18:56:9e:1d:
6c:88:ee:57
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQTYy
QzQ3QjYzOTExNEY2ODJDOUU1QTI4NTZCQzBGOUMzM0VDNjQ4MB4XDTI1MTIxNTAx
MzIyMloXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMkJCRUZBMzI5ODIzQkEy
QTVDMDlEOUE0Q0I2OTBEQTM3QTc2Qjc3QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALquPzbNRGxW9Ss/R9FX/+d03hGP+oEyyZYlc3tGWM/sDue1Pp4a
eHDgLxaHuaEGByASfgH6qRG/D72gM4SH5ljUBWM6ut0c+Mpuy/Be2YLuLsWGt0q+
4O0XdoFZNgVT/os1iJGKrN/U6l/JLtnoGIlpC4YwZ17rnv/8GGATUAXix/kGYsOA
MtMctXrQkcZGbY78avDk9hVJ/5T1+PKB9D70zjQb0qxaAiObix6+0js5IFZgqswj
8ueN7yzHFNQKiKTFzYMobRnApt3LEURh4b9KaxfB71ZYeOSeJZk9lHIJDMH89lNV
UDdT+wxqE116DtNCRC85fIKq2SUtna6hNFUCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBQrvvoymCO6KlwJ2aTLaQ2jena3ejAfBgNVHSMEGDAWgBQ6YsR7Y5EU9oLJ5aKF
a8D5wz7GSDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyODIvT21MRWUyT1JGUGFDeWVXaWhXdkEtY00teGtnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT21MRWUyT1JGUGFDeWVXaWhXdkEt
Y00teGtnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjgyL09tTEVlMk9SRlBhQ3llV2loV3ZBLWNNLXhrZy5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRHhj2YJfqUcQRPRzcHYq6exRbZY+NyY5waWSD6gDdCDxmE2wpVSXe
d3nUj3g50jRK4f6tgp+mDv9GDuIfhoG9UnJOSnC7u9+3WKu3S2qPuHKL84tEod58
SGXUQFG/IqTgKSwPpZMGCM+DzUg6GhHaW6yc3ezTY5QtNureM3F8/MoVDrDQznc1
B0aFiH6sf5mjoJxZyHHw+yVQfGAx1Q1u1uL790bHOSwOawdsd1QAy+9ZZc37ytQ1
E9jcJUoo3mBF38Kn8GzQmbgWUS8lgnF78X8A1f0AxmLq3SKjLuJRChi2t38CbTm0
Ty/u16uVpFQxReZM9Zr+jhhWnh1siO5X
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:22:09 2025 by rpki-client