This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft
File: cRknFYbSjHciG34Ukuh1GxH0cYw.mft (raw, json)
Hash identifier: vTwFJ3Ofk/9Z57flmOmyGSAqAiz8LpdkSFqLYFMF11o=
Subject key identifier: 35:8A:C1:96:AF:95:61:0D:3A:69:08:68:26:50:7C:24:CB:3F:AD:61
Authority key identifier: 71:19:27:15:86:D2:8C:77:22:1B:7E:14:92:E8:75:1B:11:F4:71:8C
Certificate issuer: /CN=7119271586D28C77221B7E1492E8751B11F4718C
Certificate serial: 03
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cRknFYbSjHciG34Ukuh1GxH0cYw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft
Manifest number: 3F
Signing time: Mon 22 Dec 2025 08:00:15 +0000
Manifest this update: Mon 22 Dec 2025 08:00:15 +0000
Manifest next update: Tue 06 Jan 2026 08:00:15 +0000
Files and hashes: 1: beH_uOwbSyC7B2qxocFCewqQwV0.roa (hash: C6ZP2YVsYUhp21jBScyu6EyiTTvdwRefWgfbv/+hTO8=)
2: cRknFYbSjHciG34Ukuh1GxH0cYw.crl (hash: Qk2jitKNhyRd7HZgps3kAIiQPANJeJtYDBYA/IJw3qo=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cRknFYbSjHciG34Ukuh1GxH0cYw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 10:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7119271586D28C77221B7E1492E8751B11F4718C
Validity
Not Before: Dec 15 01:32:30 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=358AC196AF95610D3A69086826507C24CB3FAD61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:c5:2b:4d:c6:6c:bb:12:e0:bf:5a:1f:5f:
e5:30:7c:4f:ed:35:c6:e8:f4:86:82:54:ce:30:f3:
46:df:67:c3:0c:d8:bf:98:f3:2d:f6:0f:38:88:3d:
96:05:60:40:1d:12:7a:d4:8b:f4:cc:b5:a7:a3:d9:
40:76:7d:19:5e:4c:f7:5a:1c:02:13:cc:4a:db:4f:
82:d5:48:f3:a3:b3:20:78:12:99:8a:7c:0e:fd:a3:
e9:57:ed:3b:f7:09:e0:ce:14:97:19:58:9a:49:ce:
3b:64:4b:fe:49:44:9f:c0:e8:b7:75:d1:94:d2:68:
7b:a6:c7:53:b4:c9:75:f6:70:9d:29:f8:80:f4:22:
58:82:3a:87:9b:de:f5:87:4e:c0:26:93:33:b4:7d:
f5:b6:cf:0e:2e:32:2e:8a:bc:0a:00:88:13:1e:48:
76:97:61:b4:31:c5:b7:1b:b6:88:30:8d:d3:ae:07:
4e:19:53:28:07:74:0d:5e:26:e7:bd:92:a7:49:d2:
ab:3a:31:bf:a0:11:5d:e0:50:0f:c9:1c:d4:3e:35:
86:f2:e4:8b:07:4a:5c:b6:fe:bf:ac:46:d7:93:a0:
41:43:f6:17:d9:de:75:58:7e:52:62:13:0d:97:26:
5b:a6:65:d9:61:76:17:85:95:48:94:45:0a:06:5c:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8A:C1:96:AF:95:61:0D:3A:69:08:68:26:50:7C:24:CB:3F:AD:61
X509v3 Authority Key Identifier:
keyid:71:19:27:15:86:D2:8C:77:22:1B:7E:14:92:E8:75:1B:11:F4:71:8C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cRknFYbSjHciG34Ukuh1GxH0cYw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:3f:e4:04:2a:f9:ad:2d:3c:c3:a5:1e:19:5d:6d:1b:2f:09:
bc:ba:43:55:0d:bd:3c:fa:b1:5d:20:e6:71:4b:90:d4:44:71:
f8:de:a8:39:7d:a7:36:93:af:70:ed:36:5c:87:09:db:ef:c4:
8b:1d:cf:cf:24:4e:fa:27:f7:4e:84:e0:97:8b:5c:bc:9b:d2:
e3:e4:4d:3a:66:b1:d2:5a:50:9b:75:fe:e2:e2:0b:a0:1f:80:
12:09:3a:8d:05:f6:3e:d7:57:f7:25:0d:0d:29:7c:c8:f2:e8:
7a:f3:6a:16:46:c1:95:79:00:1a:a8:cd:d5:30:6b:51:04:80:
a7:0b:06:35:88:5f:77:47:5e:fe:98:6b:d4:7c:fe:6e:71:eb:
0a:39:48:1d:b8:ea:e2:16:ba:66:b1:58:39:21:04:78:72:27:
28:27:f8:21:2a:0f:e5:fb:92:17:c3:ce:c1:0f:aa:e7:d3:c0:
9a:7b:7b:6c:6b:d8:69:06:4e:d1:c4:27:45:42:e6:32:f7:9b:
fa:b4:30:e7:74:1e:6f:36:74:06:38:d0:35:35:c1:a2:f4:68:
0a:fa:b6:67:6a:30:b2:f1:4c:13:b9:c4:4d:7e:fc:07:cd:d5:
df:39:6a:78:4a:c7:78:57:ed:15:bb:d5:24:c3:07:90:5f:81:
91:16:d6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:27:25 2025 by rpki-client