This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30193/WdHC5J-Qdh6zAvBamRhxzFsc2wc.mft
File: WdHC5J-Qdh6zAvBamRhxzFsc2wc.mft (raw, json)
Hash identifier: 8mr5TJP7nx621K3s/oYWMEV/Xuqe2m3LlC2CN2Gofsg=
Subject key identifier: AF:6D:90:BF:FF:5E:0C:FE:D9:55:DF:6B:16:74:11:56:19:87:0D:7B
Authority key identifier: 59:D1:C2:E4:9F:90:76:1E:B3:02:F0:5A:99:18:71:CC:5B:1C:DB:07
Certificate issuer: /CN=59D1C2E49F90761EB302F05A991871CC5B1CDB07
Certificate serial: 61
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WdHC5J-Qdh6zAvBamRhxzFsc2wc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/WdHC5J-Qdh6zAvBamRhxzFsc2wc.mft
Manifest number: 1C23
Signing time: Mon 22 Dec 2025 10:52:18 +0000
Manifest this update: Mon 22 Dec 2025 10:52:18 +0000
Manifest next update: Tue 06 Jan 2026 10:52:18 +0000
Files and hashes: 1: WdHC5J-Qdh6zAvBamRhxzFsc2wc.crl (hash: tG2b98AUsIH2YmsBzAJqDDA7HeI5tC/BM132/CRV6D0=)
2: znzCm3P00v85cVdj42zm4pZzXac.roa (hash: kGJGH/l75xq79MTrkO2/oVqGe1gqOEse1g1feXHAwrA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/WdHC5J-Qdh6zAvBamRhxzFsc2wc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/WdHC5J-Qdh6zAvBamRhxzFsc2wc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WdHC5J-Qdh6zAvBamRhxzFsc2wc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 10:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59D1C2E49F90761EB302F05A991871CC5B1CDB07
Validity
Not Before: Dec 15 01:33:31 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=AF6D90BFFF5E0CFED955DF6B1674115619870D7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:bf:9a:3f:3f:00:ca:23:75:77:fb:81:15:
1a:35:93:be:da:9b:9e:3c:21:51:7b:48:89:c9:fe:
d2:96:80:0a:ce:4c:95:3d:c1:b2:e2:09:4a:c7:eb:
c8:77:43:27:63:09:5a:45:29:6e:be:20:39:e4:aa:
58:29:a8:76:07:9f:d4:3b:28:db:28:f9:ea:ae:6b:
25:7e:cc:db:28:56:7c:d1:5e:cd:c0:2c:19:84:c0:
18:2d:ce:5c:55:ce:a9:36:88:33:80:c5:a4:32:9b:
0a:c6:84:50:86:d3:5c:96:d0:2c:26:4d:b0:de:f0:
33:53:68:e4:5b:ab:d5:86:1b:ac:88:38:70:95:5a:
f3:a7:4d:9e:a6:96:31:07:a7:4b:a5:d5:3f:5a:4c:
53:0f:ca:80:0b:34:75:28:e2:de:cb:5f:f5:81:fb:
8d:87:53:56:32:13:43:3d:98:ba:64:c1:7d:e3:04:
67:e7:20:18:48:01:78:8f:06:e2:d0:1a:c9:b2:48:
74:8b:5f:34:0d:d2:57:95:2f:a2:85:7a:00:3c:b7:
68:11:c4:2e:bb:06:76:cd:72:4f:a0:c8:2f:a8:eb:
77:98:23:be:23:12:2e:1b:85:80:09:be:aa:ac:8e:
af:07:1e:34:bc:b9:98:f7:ed:a9:c7:ce:8a:71:a4:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6D:90:BF:FF:5E:0C:FE:D9:55:DF:6B:16:74:11:56:19:87:0D:7B
X509v3 Authority Key Identifier:
keyid:59:D1:C2:E4:9F:90:76:1E:B3:02:F0:5A:99:18:71:CC:5B:1C:DB:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/WdHC5J-Qdh6zAvBamRhxzFsc2wc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WdHC5J-Qdh6zAvBamRhxzFsc2wc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/WdHC5J-Qdh6zAvBamRhxzFsc2wc.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:87:55:ee:f7:6a:5a:a3:6f:c1:9b:80:36:e3:9b:20:a5:3a:
34:87:42:b8:02:6a:38:ac:3a:bf:19:b9:b6:9c:7f:10:2d:b9:
32:6d:0e:7b:75:2c:4c:68:c7:d5:79:8b:5c:8e:cb:72:19:73:
fa:5f:c7:ea:a2:27:f3:e7:b8:70:74:c2:b1:85:c7:ee:3b:1c:
8f:e8:c2:cf:dd:70:8b:53:08:2a:eb:86:97:2f:38:cb:31:4b:
a1:13:d6:34:08:1e:1f:2c:f2:4b:2a:97:00:5a:1b:28:da:96:
d0:90:29:22:85:b1:df:3e:47:81:f2:54:67:b4:65:f4:b1:5d:
02:fe:5f:d6:45:de:77:89:d8:6d:5a:51:be:be:76:49:c0:a9:
9e:86:93:78:6e:a0:7c:51:7d:3d:26:ab:7d:9e:ec:97:21:ea:
7d:46:45:2a:45:f8:88:22:5c:a5:cb:ea:e4:40:ef:78:3f:31:
85:3c:93:da:52:84:2a:04:45:da:67:a6:f5:7d:04:98:3f:fd:
33:1a:98:c8:24:67:1c:25:15:41:1f:09:42:46:8e:bf:9d:b9:
e7:e0:27:59:f7:8e:f9:aa:38:d7:07:49:fa:fe:52:12:87:3c:
c1:2d:51:aa:2e:c1:2c:56:2b:5b:85:83:82:14:72:8e:e1:ba:
d6:0a:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:39:52 2025 by rpki-client