This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft
File: Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft (raw, json)
Hash identifier: xG8D2S0X7rdaEm4SNuDH3y/51cyYkvCZShi7iZqsRQ4=
Subject key identifier: E5:32:D3:8B:39:0B:A2:38:55:C2:1F:28:10:72:D1:62:26:4A:81:9D
Authority key identifier: 63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC
Certificate issuer: /CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC
Certificate serial: 49
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft
Manifest number: 0A39
Signing time: Sun 21 Dec 2025 10:58:08 +0000
Manifest this update: Sun 21 Dec 2025 10:58:08 +0000
Manifest next update: Mon 05 Jan 2026 10:58:08 +0000
Files and hashes: 1: TT_BZ8pmbIhoVz56QzsvQx-q7Fc.roa (hash: oeHuQ/TlsrBDOZdW2TE9FBUX8pboDLwqzh2KD9bMHH8=)
2: Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl (hash: mZMGkGLn+dljjcd8pEbtJVW/SSKsvCLC7nhRyjzrAsk=)
3: jEHASG6O5skxtj5vpaEneXrBNJo.roa (hash: D13UhKbKPo+umuI1+i9fzsvVDTM2mrThlP3bOAy/Jtw=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 06:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC
Validity
Not Before: Dec 15 01:40:57 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=E532D38B390BA23855C21F281072D162264A819D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:77:3c:7f:7e:8d:6e:0d:b2:e7:4d:bc:63:
ea:6d:08:76:b0:c8:a6:77:a9:83:24:5c:c8:c2:d6:
a8:ee:e5:6a:f2:3e:ac:c7:93:32:58:77:25:62:b4:
a8:ea:26:67:5c:4c:81:8d:63:75:17:bc:65:50:d5:
5e:c3:36:ba:ca:86:87:c1:3c:31:4c:47:08:08:5a:
16:51:3c:dc:ec:97:ad:5b:c0:65:9e:0b:66:df:5e:
0c:ee:0e:1a:04:40:d8:d6:72:28:32:f5:90:2d:ac:
56:89:67:7e:64:8d:36:f3:de:32:ea:a8:66:99:ff:
37:d3:ab:0a:11:7d:3c:65:d0:15:07:6c:ba:e3:ee:
84:51:4b:36:bb:25:b8:56:92:5b:1c:c6:88:75:58:
50:f4:72:10:ab:36:ec:a2:bb:77:b6:7b:cf:d6:f5:
62:cb:5a:13:bd:55:c5:c7:3d:d8:67:91:2c:ed:87:
21:d9:96:52:75:9a:b7:91:0a:9c:0c:25:e1:a3:b9:
7d:9c:61:c8:40:6f:25:07:8a:0f:d2:fd:5d:bc:e5:
86:7d:a9:12:47:34:9a:5f:16:2a:c2:85:99:4d:a7:
9b:25:ae:c9:be:47:a4:98:e5:7f:fa:1e:b5:3f:17:
61:0b:76:de:08:71:50:00:4e:1d:56:b0:3f:d6:73:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:32:D3:8B:39:0B:A2:38:55:C2:1F:28:10:72:D1:62:26:4A:81:9D
X509v3 Authority Key Identifier:
keyid:63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:e2:33:49:3b:5a:79:cd:66:1c:48:e8:0a:9d:35:cc:a5:92:
7b:7a:40:67:9b:98:c9:05:4d:2d:7f:3e:79:ac:65:05:ef:8c:
98:ec:d3:16:ae:4a:a7:c0:67:d0:0e:2a:0f:53:f5:56:4c:c5:
af:5e:82:b0:cb:45:29:75:12:cf:3a:9b:53:94:78:19:57:0f:
1f:c4:c4:91:fc:db:37:63:a7:1c:5c:a3:6f:f0:c3:b7:da:4e:
f3:60:60:6d:4c:eb:cd:2e:a2:86:aa:e6:59:49:5e:19:4e:6d:
85:a9:c5:54:57:1c:b8:57:4b:e6:ad:aa:ea:f3:ae:be:58:b3:
53:a9:fc:e1:4f:df:b9:54:91:b5:4e:43:19:d7:33:29:69:11:
74:73:94:05:70:d5:e0:f8:7c:04:b4:c1:03:8e:08:b7:33:f5:
68:38:5e:f9:cc:49:16:bc:23:18:38:78:b1:c4:50:5b:c5:01:
19:17:d0:b9:0e:c9:ee:19:18:fa:d4:29:c1:79:21:f4:11:86:
cf:bc:11:35:3e:f9:7d:38:dc:4b:77:71:2c:a4:19:ac:4c:da:
a5:7e:c8:2c:bd:ae:ec:a6:ba:7a:52:db:b6:39:75:ea:6c:7f:
42:82:cf:0a:85:8b:53:c7:15:23:b6:38:7f:d3:d6:f9:bf:55:
5d:00:ea:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 14:14:25 2025 by rpki-client