This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.mft
File: EP4ZvNgsFKgzw4FZYwqnl28rs9A.mft (raw, json)
Hash identifier: oxysuGNFZi/ArTnwRF00d+EkXKRYXvYbgu4yRgsh7JY=
Subject key identifier: F1:7A:5E:3B:17:CE:92:FB:40:D9:4E:65:E6:14:EA:58:0B:23:16:08
Authority key identifier: 10:FE:19:BC:D8:2C:14:A8:33:C3:81:59:63:0A:A7:97:6F:2B:B3:D0
Certificate issuer: /CN=10FE19BCD82C14A833C38159630AA7976F2BB3D0
Certificate serial: 28
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EP4ZvNgsFKgzw4FZYwqnl28rs9A.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.mft
Manifest number: 09D9
Signing time: Mon 22 Dec 2025 11:41:43 +0000
Manifest this update: Mon 22 Dec 2025 11:41:43 +0000
Manifest next update: Tue 06 Jan 2026 11:41:43 +0000
Files and hashes: 1: EP4ZvNgsFKgzw4FZYwqnl28rs9A.crl (hash: Kw+B/VRvwH91AuFMx1T2Bvsy6Rieh1PX5oZUE4BCaVQ=)
2: MdMvm1Fcdk4ugFz6A2QIRgn6-YI.roa (hash: PYR6G3t7Q+PM4wqeURqMMPIHuVaxbGDiGHy1Jv+Udzc=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EP4ZvNgsFKgzw4FZYwqnl28rs9A.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10FE19BCD82C14A833C38159630AA7976F2BB3D0
Validity
Not Before: Dec 15 01:37:10 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=F17A5E3B17CE92FB40D94E65E614EA580B231608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:1f:00:ca:34:6d:3b:10:8f:a8:7d:e1:76:
26:66:4b:49:38:cc:e1:ee:0d:6c:0e:85:11:21:d7:
f2:0b:ea:ef:42:60:f7:0d:9b:0e:7f:3d:b2:05:45:
2f:d5:05:15:b8:c7:5b:1c:37:6d:ee:75:e5:13:7d:
8d:8a:fb:f2:08:56:3f:58:e7:74:40:0b:eb:88:b7:
e7:7e:89:18:1e:90:3d:19:95:50:21:6e:50:ba:fb:
79:9b:d3:6a:2f:a8:9d:1d:c5:80:f6:22:ea:f5:85:
c6:23:c7:e0:03:7a:04:15:9d:d1:a6:1e:52:0d:5b:
35:d2:2a:16:ab:d3:59:1e:3d:99:91:c2:38:e0:3f:
4d:3d:b0:1d:66:c5:56:5e:33:9e:32:84:4b:97:e5:
b7:59:32:a4:f5:18:2f:9f:79:87:c2:5d:34:99:d9:
cc:cc:dc:a7:da:52:02:24:44:99:a3:ab:35:ca:9c:
34:cd:0b:b7:52:d1:e8:8c:35:f7:42:8a:e2:e7:ce:
4c:06:c5:93:de:ae:5e:66:ca:71:e1:ec:90:2d:b9:
31:cb:36:b4:b0:3b:6c:b7:0c:81:da:2a:0e:e0:a7:
46:dc:b1:cc:f6:1f:cb:57:d7:b9:4c:e7:c1:64:0b:
5c:da:8f:59:fc:1d:05:62:5c:80:0b:8d:32:4b:9d:
3d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7A:5E:3B:17:CE:92:FB:40:D9:4E:65:E6:14:EA:58:0B:23:16:08
X509v3 Authority Key Identifier:
keyid:10:FE:19:BC:D8:2C:14:A8:33:C3:81:59:63:0A:A7:97:6F:2B:B3:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EP4ZvNgsFKgzw4FZYwqnl28rs9A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f0:20:50:71:d1:54:47:a8:2f:0a:08:e7:aa:f9:62:71:60:
29:96:5c:af:3d:d0:0b:7e:09:98:0e:eb:af:43:64:90:ff:e4:
7e:d8:b2:c7:de:3f:b6:9a:6a:8d:20:79:b7:ad:c8:3e:1a:5d:
54:f4:2f:f2:d8:29:9c:fc:5f:78:5c:9f:16:b5:0b:04:98:cc:
4e:c7:d4:8c:c4:e4:aa:ef:b0:20:fc:87:7b:1e:ab:25:3a:1a:
1c:32:7b:45:67:5c:83:7e:0e:a1:e7:22:50:13:8e:1c:e0:3f:
17:88:d7:e9:af:01:ed:31:b9:7b:75:f0:0e:be:70:8c:39:2d:
dd:7e:57:9e:d9:1e:6b:38:44:ef:a5:ed:d5:3d:10:70:92:62:
10:f9:9b:0a:2c:ec:74:60:4b:d2:40:4a:71:27:7d:f5:e4:9c:
27:4f:c3:19:0e:77:63:21:94:8e:61:97:b3:f5:46:ee:81:0e:
ec:25:4f:68:c6:2f:94:fe:44:58:1e:ea:93:db:ba:7c:d0:44:
c0:73:db:5a:8d:5f:4d:09:ae:2c:21:00:e7:20:40:c9:d6:53:
41:5c:cb:92:0a:4d:21:ec:b8:2c:dc:ec:ba:dc:de:06:f7:ff:
c6:a9:7c:1c:fb:ff:7e:6f:af:11:c4:2b:82:d4:f1:fc:22:3f:
1f:cf:7d:20
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMEZF
MTlCQ0Q4MkMxNEE4MzNDMzgxNTk2MzBBQTc5NzZGMkJCM0QwMB4XDTI1MTIxNTAx
MzcxMFoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoRjE3QTVFM0IxN0NFOTJG
QjQwRDk0RTY1RTYxNEVBNTgwQjIzMTYwODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANWyHwDKNG07EI+ofeF2JmZLSTjM4e4NbA6FESHX8gvq70Jg9w2b
Dn89sgVFL9UFFbjHWxw3be515RN9jYr78ghWP1jndEAL64i3536JGB6QPRmVUCFu
ULr7eZvTai+onR3FgPYi6vWFxiPH4AN6BBWd0aYeUg1bNdIqFqvTWR49mZHCOOA/
TT2wHWbFVl4znjKES5flt1kypPUYL595h8JdNJnZzMzcp9pSAiREmaOrNcqcNM0L
t1LR6Iw190KK4ufOTAbFk96uXmbKceHskC25Mcs2tLA7bLcMgdoqDuCnRtyxzPYf
y1fXuUznwWQLXNqPWfwdBWJcgAuNMkudPX0CAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBTxel47F86S+0DZTmXmFOpYCyMWCDAfBgNVHSMEGDAWgBQQ/hm82CwUqDPDgVlj
CqeXbyuz0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNTUvRVA0WnZOZ3NGS2d6dzRGWll3cW5sMjhyczlBLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRVA0WnZOZ3NGS2d6dzRGWll3cW5s
MjhyczlBLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDU1L0VQNFp2TmdzRktnenc0RlpZd3FubDI4cnM5QS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAs8CBQcdFUR6gvCgjnqvlicWApllyvPdALfgmYDuuvQ2SQ/+R+2LLH
3j+2mmqNIHm3rcg+Gl1U9C/y2Cmc/F94XJ8WtQsEmMxOx9SMxOSq77Ag/Id7Hqsl
OhocMntFZ1yDfg6h5yJQE44c4D8XiNfprwHtMbl7dfAOvnCMOS3dflee2R5rOETv
pe3VPRBwkmIQ+ZsKLOx0YEvSQEpxJ3315JwnT8MZDndjIZSOYZez9UbugQ7sJU9o
xi+U/kRYHuqT27p80ETAc9tajV9NCa4sIQDnIEDJ1lNBXMuSCk0h7Lgs3Oy63N4G
9//GqXwc+/9+b68RxCuC1PH8Ij8fz30g
-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:50 2025 by rpki-client