This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.mft
File: 1_8Td9uQGxaVp67wXd3hiF5q2MY.mft (raw, json)
Hash identifier: lmB/lIl4VlIS+rwWJrkzv16om+J2wfdHdhLaku2maHI=
Subject key identifier: 85:B0:32:FA:40:F3:C9:01:CC:9D:54:DD:24:D1:8F:09:AE:68:A4:0E
Authority key identifier: D7:FF:13:77:DB:90:1B:16:95:A7:AE:F0:5D:DD:E1:88:5E:6A:D8:C6
Certificate issuer: /CN=D7FF1377DB901B1695A7AEF05DDDE1885E6AD8C6
Certificate serial: 09
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1_8Td9uQGxaVp67wXd3hiF5q2MY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.mft
Manifest number: 040E
Signing time: Sun 21 Dec 2025 03:23:31 +0000
Manifest this update: Sun 21 Dec 2025 03:23:31 +0000
Manifest next update: Mon 05 Jan 2026 03:23:31 +0000
Files and hashes: 1: 1_8Td9uQGxaVp67wXd3hiF5q2MY.crl (hash: mj+t20TKlVKcc7czrWHNo4qscbIZbIM+J16mVEiZdm0=)
2: B80TFmvGB2B8PcWgV35zHexL0hw.roa (hash: QBLe25emIUN7523U7dTIgIR6ZI/mkUrdKSKApflOSTM=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1_8Td9uQGxaVp67wXd3hiF5q2MY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7FF1377DB901B1695A7AEF05DDDE1885E6AD8C6
Validity
Not Before: Dec 15 01:44:43 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=85B032FA40F3C901CC9D54DD24D18F09AE68A40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:f4:1a:0d:01:71:4a:d2:86:fd:94:9b:c7:
eb:58:24:6f:b1:42:14:76:42:92:9c:bd:e0:73:31:
ab:a3:aa:1e:d5:03:b4:51:97:7e:94:57:66:50:d0:
0b:08:50:03:b2:1d:00:46:14:87:62:7c:31:bf:28:
33:0d:e9:5b:db:fa:eb:eb:23:11:2c:47:07:c5:76:
08:aa:9a:12:c1:be:1e:90:c2:89:dc:92:01:29:5e:
c7:fd:29:55:28:8c:48:f7:57:2d:c9:af:d4:c7:12:
85:c5:d3:44:c1:2d:e7:f7:ec:ee:e8:e8:ba:9d:19:
39:ce:12:1c:6e:75:88:09:7f:52:98:6c:c6:79:9a:
6e:d3:2b:2b:78:4d:72:5e:73:e5:9c:9b:3a:42:6d:
10:23:23:32:b6:ff:21:04:12:27:78:c6:b2:26:a0:
a3:35:a2:0d:eb:5f:7e:d8:b1:a2:37:c3:4f:8c:16:
53:71:ab:5a:58:71:6e:21:fa:a1:5b:8e:af:e6:84:
a1:44:6f:71:85:30:46:79:34:44:4c:98:70:81:dc:
63:ee:c7:01:d1:6f:8c:ee:56:a5:28:57:c1:d9:6d:
82:c6:4a:c6:10:e0:3b:62:3e:c1:df:2e:1f:af:2f:
75:07:86:25:40:fe:78:8b:60:51:8c:7e:25:21:a6:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B0:32:FA:40:F3:C9:01:CC:9D:54:DD:24:D1:8F:09:AE:68:A4:0E
X509v3 Authority Key Identifier:
keyid:D7:FF:13:77:DB:90:1B:16:95:A7:AE:F0:5D:DD:E1:88:5E:6A:D8:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1_8Td9uQGxaVp67wXd3hiF5q2MY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8e:59:d0:2f:ec:f0:c9:72:8b:0a:2f:6f:f2:5e:39:09:82:
bd:29:e4:4f:1c:3e:e9:79:14:3d:5b:e4:33:6e:14:d1:11:88:
6a:5a:ec:f3:74:96:01:06:c3:5c:f5:ad:7e:73:01:97:59:fd:
67:db:ff:6d:ab:6b:85:ee:f8:ab:a2:a0:94:22:c2:3c:f2:40:
f7:68:39:b6:48:44:ae:c2:12:ec:a2:e3:82:49:5e:a3:62:f5:
54:d6:a3:97:96:aa:c7:70:2b:a9:d2:9c:17:b8:71:88:8e:66:
97:8b:d4:e7:f6:eb:e5:84:d2:2e:40:fa:89:55:a6:b2:4e:73:
3a:01:93:cd:8a:1f:3b:81:8d:77:bb:32:44:f9:13:51:3c:89:
a8:63:05:3a:65:4b:28:f0:22:ea:69:d8:88:ac:ce:3b:6e:35:
11:94:95:71:26:36:0b:ac:dc:97:88:4d:cf:6c:06:3e:81:2a:
c3:79:d6:66:a0:9b:78:76:d8:20:b6:fe:0d:0b:90:d7:ce:dd:
37:03:68:47:93:84:f0:b3:6c:80:20:5e:0b:01:03:be:6e:a5:
be:67:24:f4:6d:8d:f1:ce:1d:fa:1b:4a:e2:7d:ee:e1:82:d9:
69:cc:56:9d:8b:e8:e0:cc:08:ef:c1:46:15:54:4f:84:36:3f:
42:4e:2f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:31:11 2025 by rpki-client