This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.mft
File: pimqiuskKhP7NxpEyl4fKVenDhs.mft (raw, json)
Hash identifier: 2ydpCBAd1qU5Tm/Ec3RzlYR/2SPWqCuFDghtS4l+0Ec=
Subject key identifier: CB:B5:50:79:1C:AD:DB:48:94:BD:7D:BF:A5:12:62:96:25:54:62:95
Authority key identifier: A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
Certificate issuer: /CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Certificate serial: 4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.mft
Manifest number: 0A40
Signing time: Mon 22 Dec 2025 07:24:51 +0000
Manifest this update: Mon 22 Dec 2025 07:24:51 +0000
Manifest next update: Tue 06 Jan 2026 07:24:51 +0000
Files and hashes: 1: D2HK0FIOyeMZq_fTewzh1gLgZDk.roa (hash: bO/BVdMDNyOzPjaXzIMDH3Jn3ehAdmrZtXTI2m0ZWxY=)
2: GkdCjGjBIUbM3I3LI4spEav0kT4.roa (hash: lmYwVibLLyjGzZ0Rv05kOvI5fYX326IR12XuwFTDyHQ=)
3: WmoDuAJ2FYU63usl4IsPSCQWPV0.roa (hash: Tn1D4qkvT7hddXvzdozllaN4lEMKWpF6dUJERK4MfRM=)
4: pimqiuskKhP7NxpEyl4fKVenDhs.crl (hash: 8dBXLKyWHebv0n9n7/gFeThaRHx9AllJx8DtSWgdbUQ=)
5: qmwgAtNfCMg6GElLF3FOgQYzcwE.roa (hash: PsYdvtejSUnwBdpOwCMmy4PMsrM7Vapf2JMOoslzVow=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 10:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Validity
Not Before: Dec 15 01:34:42 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=CBB550791CADDB4894BD7DBFA512629625546295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:67:37:0e:92:46:b3:37:0b:32:b8:c6:2d:c2:
ee:2b:03:0b:25:56:f5:2c:78:c9:af:03:4f:3a:0d:
d9:8e:cf:8e:34:76:20:a6:b2:75:7a:02:88:51:7f:
6b:90:87:10:33:d2:81:cb:ff:c2:ea:4e:01:be:79:
bf:12:bc:a1:45:89:95:fe:c0:b7:21:ae:5c:52:32:
ae:75:98:a7:75:24:b0:d8:df:a2:d6:52:6b:ef:eb:
83:c2:29:8f:32:c8:4c:3a:f5:ad:fe:e8:64:a1:b4:
3d:e7:64:04:7e:57:30:2c:90:c9:72:9e:74:bb:0e:
4c:7e:01:19:a8:e4:78:d3:eb:9d:0c:e5:75:54:9c:
a1:b2:d3:47:7b:bc:d2:e5:78:c2:97:1d:c2:15:ae:
cb:ea:8d:43:e3:cd:b2:c9:ab:4c:c2:af:64:77:45:
a5:be:83:9f:38:e7:60:ea:83:d1:f0:6c:59:0f:8f:
dd:18:b7:ec:ee:86:22:5d:0b:99:30:da:20:8a:38:
27:65:db:7d:91:a6:ce:f6:75:64:e4:46:a9:3c:4e:
e9:0a:ca:89:15:2b:da:d8:51:39:fa:ee:3e:c9:b7:
16:ab:81:76:fc:c6:93:6d:5f:f5:1e:eb:30:9f:f0:
7d:7d:d0:b0:61:ab:45:72:7e:1a:06:30:21:d6:28:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B5:50:79:1C:AD:DB:48:94:BD:7D:BF:A5:12:62:96:25:54:62:95
X509v3 Authority Key Identifier:
keyid:A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:70:ba:0f:13:b9:ba:c4:f8:28:e6:25:58:6a:62:97:ad:fe:
24:f7:2e:35:41:f4:17:8d:f3:e8:1e:87:b8:d7:02:84:ce:5c:
06:ec:34:99:b4:87:f2:ad:ee:90:7c:5e:3c:b1:11:c5:1d:ed:
24:22:cd:d3:76:9f:d9:a3:f9:97:95:bc:74:f0:c0:b3:0f:58:
94:c8:61:19:75:7a:a9:30:9b:28:c1:37:d0:d0:51:c4:98:03:
92:fa:e9:a7:2a:61:0a:9c:a6:74:f0:d6:2e:d7:34:ea:2b:4f:
17:a7:fd:80:15:ff:3f:e5:70:60:5e:28:c3:f8:11:16:1b:dd:
14:a4:44:fc:c4:62:03:56:fc:a0:1b:f9:f6:f2:08:a2:1d:3a:
18:6a:62:85:de:06:be:fa:b7:f0:c5:64:15:89:d9:97:29:3f:
82:66:af:3b:f6:07:27:d7:d7:5a:f1:e4:63:fe:6f:04:d0:2a:
f9:75:49:8f:1f:26:3b:60:fd:82:20:db:3a:e6:86:1a:27:26:
59:fc:c4:05:ba:0a:ed:a2:69:fa:d2:42:f6:c3:d9:ab:d9:56:
82:28:83:12:03:2d:be:68:1a:d4:4a:0e:2e:3c:d5:ba:ea:c1:
be:c4:3c:b3:aa:29:61:cb:14:4e:05:19:c5:7a:08:72:29:96:
0a:f5:dc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:38:02 2025 by rpki-client