This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
File: 0imUh5wlgSP_oJfoTgU3X2ClkaU.mft (raw, json)
Hash identifier: 1eYZ2PtlC5WuLYj1rNS2tOlGd5+BEiSW8HTKIdlinpQ=
Subject key identifier: 39:D1:00:CF:01:51:78:F8:85:34:72:CD:78:62:6D:69:6B:55:E2:13
Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
Certificate issuer: /CN=D22994879C258123FFA097E84E05375F60A591A5
Certificate serial: 1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
Manifest number: 0731
Signing time: Mon 22 Dec 2025 07:27:41 +0000
Manifest this update: Mon 22 Dec 2025 07:27:41 +0000
Manifest next update: Tue 06 Jan 2026 07:27:41 +0000
Files and hashes: 1: -k3F5AeQmJ3yE2Fzi8ABOJjwZEo.roa (hash: rjpTDpXxZTJ1kU8mJ8ExXLnODkZ5oBQgR49MJ12SHps=)
2: 0imUh5wlgSP_oJfoTgU3X2ClkaU.crl (hash: Wh5yRGxAjudaWVNiDEcXhjq7nOwj335Fq4hExEUaUWU=)
3: GuImz6n15TZRKw9PST-SDAlYfvM.roa (hash: nzUkAXNlwIiF0YYCAIWghEG9oKXOMCQHSCX3+Q1RD3M=)
4: Q1MNuQmmbXCi2OHn-e6hqEBujfY.roa (hash: Q5a47uus+GjWpTZAouq4L85VgnQN9jEaeUcAhdA1hUI=)
5: UP0KAbYJVi9qnS5_InN5OUoc8aU.roa (hash: O5wXxksfAGrUz1kVyqwKDgifZJuvQbUExvAr/wbEhOM=)
6: bvk7A1Kx4pqSSHwHICKOv6QVBr8.roa (hash: 9jo+CMavXZQ8vFYsVVb/gzO8wkdpBeWgx8+p3P2Lxgc=)
7: cPD7Jt3tN6zHrdBCLr_ucQMMGjw.roa (hash: EeqnJXBh9rZw6SQ28qtZf/ZCS8BNXAjnoF8/eRSj/yY=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 10:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5
Validity
Not Before: Dec 15 01:44:24 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=39D100CF015178F8853472CD78626D696B55E213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:36:3d:e5:15:06:be:94:60:db:06:fd:e0:
f8:3f:60:b4:9d:5f:68:f0:00:74:28:20:55:f9:b0:
cc:08:3a:24:ac:e2:54:da:21:dc:9e:e3:5d:25:fb:
ac:5c:d0:cb:1e:a3:59:f5:f8:20:df:21:f7:36:03:
73:26:0e:10:6b:2a:a8:20:0b:1e:be:1e:b4:e0:d9:
da:d9:81:8a:c5:91:b5:2f:06:e2:71:ef:80:52:22:
36:b8:15:42:3a:f4:36:35:bc:db:6a:3d:34:77:af:
a2:35:fd:5c:38:7e:96:74:3f:dd:e8:5e:4d:54:5f:
86:a5:82:8e:27:d4:98:64:2b:80:bd:77:40:e9:3b:
90:fc:f1:fb:f5:c4:16:5f:7a:a8:f0:53:f1:1e:2d:
b3:3a:fd:0e:66:49:dc:a6:67:8c:19:55:59:84:06:
6d:98:a2:36:e0:f4:de:ff:b4:17:51:f0:3a:59:7b:
98:78:80:9d:f2:93:1e:7b:cc:fd:92:ba:37:99:fb:
c1:d1:8f:2e:91:5d:1b:cd:c5:91:e5:fb:f9:4a:89:
42:82:59:03:a3:0d:16:5d:a8:17:dc:a5:69:58:7d:
68:c3:b2:ed:3f:6a:3d:2b:a2:18:0b:55:d2:a7:e3:
ef:f4:d7:6e:bb:d0:ed:17:54:b1:46:61:af:f7:b0:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D1:00:CF:01:51:78:F8:85:34:72:CD:78:62:6D:69:6B:55:E2:13
X509v3 Authority Key Identifier:
keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:87:d6:29:e6:af:9f:1e:7a:1b:6d:96:09:3f:a9:85:7c:96:
e8:99:d3:8e:2c:eb:0a:a3:44:02:16:ab:c7:1c:e3:0a:e0:78:
a2:e3:d4:39:7d:ef:22:79:f9:4a:de:0b:4d:bf:74:31:eb:6c:
cd:3d:9f:85:fd:06:e2:26:93:c8:6c:1c:27:e1:32:6e:52:52:
c0:e7:b8:8d:eb:c4:ff:6a:9e:e2:c8:51:8a:ee:29:b4:ee:61:
f9:0b:98:6f:d1:da:19:c4:15:32:a0:32:95:1d:70:d5:41:86:
e6:f3:99:7d:65:d7:87:5c:a2:27:44:92:95:13:9d:29:c2:dd:
11:d9:89:d6:72:e0:f9:ab:71:95:c9:47:3c:b6:1e:83:b1:08:
14:93:87:07:13:d7:15:3e:05:c8:94:c8:c6:ee:9d:ce:bb:ee:
20:f7:d0:b3:e4:f9:43:0c:fb:8d:42:e6:91:c2:94:5b:42:04:
26:eb:b8:69:83:45:50:bf:05:06:29:db:73:5b:eb:d3:b5:50:
f8:ad:50:4a:b0:38:70:5a:19:a1:aa:d8:d9:76:04:73:7b:52:
a3:c5:04:88:54:02:6f:50:0c:35:11:d3:81:17:d3:a3:3d:d1:
3b:04:06:d1:26:7a:0b:c0:48:03:a5:96:37:39:c0:a5:a2:27:
73:b7:02:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:36:30 2025 by rpki-client