This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft
File: nVpUDBIv0McM5REXAET_ZYDXYxs.mft (raw, json)
Hash identifier: AC38hSWPjhImAUgxtCBaMDzZ8KhmtCCEd6Lgu4A5Ahk=
Subject key identifier: 09:7F:43:77:94:82:97:75:FA:70:BE:F9:68:5E:FA:14:57:85:74:DA
Authority key identifier: 9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B
Certificate issuer: /CN=9D5A540C122FD0C70CE511170044FF6580D7631B
Certificate serial: 10
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft
Manifest number: 06D0
Signing time: Mon 22 Dec 2025 11:27:46 +0000
Manifest this update: Mon 22 Dec 2025 11:27:46 +0000
Manifest next update: Tue 06 Jan 2026 11:27:46 +0000
Files and hashes: 1: eo-e9dmTO9o6OKtGdLCKdxKvD-c.roa (hash: Hkr8flNkFopiq2h3TYfaDU+Ay+74Hby1TZ+Kp6oJVBg=)
2: nVpUDBIv0McM5REXAET_ZYDXYxs.crl (hash: AH8KL+aNES2uvk/QvJgHAWk//q9zIbO5uhn27xWiI/4=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D5A540C122FD0C70CE511170044FF6580D7631B
Validity
Not Before: Dec 15 01:31:21 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=097F437794829775FA70BEF9685EFA14578574DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:89:50:e7:21:a0:74:c2:24:73:73:e6:2b:
29:ea:56:a5:60:96:82:82:3e:cc:da:20:34:e1:ec:
60:d4:69:94:69:59:c7:6d:bb:9d:bf:8d:f2:89:33:
c0:94:0f:34:58:22:29:9d:09:6c:5f:ce:e9:4b:df:
27:f1:22:ee:7e:fd:b5:ff:d5:ba:5c:03:4e:8f:da:
b6:61:4f:67:d9:c4:ec:a8:ed:0e:8d:35:2a:a7:b3:
d9:96:a0:ab:f3:6c:7c:5a:5d:bb:9a:d6:fd:6c:7b:
2c:95:67:fc:85:bd:19:41:b4:d9:64:8c:80:8e:26:
ad:99:6a:ee:0c:2b:e4:9f:e4:8e:90:94:3c:0c:22:
fd:85:b0:ba:57:5d:29:b6:0d:38:62:13:c2:b0:e9:
9c:d6:13:e4:65:14:03:e7:07:d5:e7:79:40:a1:8d:
6e:e2:c1:4a:b8:78:e3:72:0a:87:b8:88:c4:d6:e1:
28:99:cb:75:9c:b8:55:30:2f:65:78:d4:83:3a:17:
17:6e:14:1c:cf:7f:d9:e0:20:fc:3e:4d:4c:dc:81:
65:5f:c3:7d:92:36:bb:c5:bf:3a:87:03:70:cc:fa:
76:f7:75:f5:aa:97:fd:0d:51:96:6d:d9:0f:2f:0f:
35:42:7d:55:ef:ba:c1:0e:c9:9e:54:c5:6d:e9:43:
63:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7F:43:77:94:82:97:75:FA:70:BE:F9:68:5E:FA:14:57:85:74:DA
X509v3 Authority Key Identifier:
keyid:9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:5f:15:70:cb:e7:9f:e1:cd:d8:70:2d:3f:d7:15:e4:fa:df:
7e:90:5c:33:5d:82:cd:ce:07:62:3b:82:df:c6:b2:f5:d3:f5:
06:a5:1b:52:70:13:51:66:2d:73:6b:77:3f:1b:1a:e6:fb:5a:
46:ee:8c:55:eb:04:33:12:61:5e:d9:ff:9d:f7:4b:f6:ce:8d:
a1:de:92:5f:c2:11:cc:e7:02:79:0c:a0:b5:b0:ed:7f:3f:b2:
68:1a:62:cb:e0:f0:dc:8f:dd:c5:7c:6e:5a:a6:a8:bd:35:69:
72:29:8b:a6:6e:d9:2c:e9:b9:8d:2b:36:48:fb:a1:7e:56:07:
e3:d1:ec:9f:59:66:5a:0b:ad:fa:7a:89:84:91:c8:ca:72:03:
ea:af:74:95:2e:e2:1c:ce:6e:a7:69:86:41:25:00:01:0e:ed:
60:21:a7:84:39:b1:95:bf:64:36:01:f4:4e:5c:d8:15:83:77:
16:73:9e:84:20:e5:7f:ab:0b:e8:04:03:bb:53:f9:ee:eb:fa:
1b:31:f7:7d:74:df:c6:4c:66:f3:c0:ff:7e:16:9d:7d:ba:af:
c2:14:1c:80:2f:0f:95:a3:d2:a4:27:55:2a:28:57:cc:6e:f6:
18:e2:45:d4:74:6a:4e:d8:7c:66:ab:bd:1c:46:10:82:4d:75:
0b:3d:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:46 2025 by rpki-client