This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.mft
File: 1EFnLFVc_wpYqM-a7ueAMmS_LSg.mft (raw, json)
Hash identifier: ISDG43npjt/DMohb2/WpJmm0gfRR2PKruOnIV4z2lnc=
Subject key identifier: 8B:1E:15:DF:D7:16:8B:64:01:AC:A6:FE:7E:D9:0C:F4:E7:7D:83:2F
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Certificate issuer: /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial: 6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.mft
Manifest number: 1C27
Signing time: Mon 22 Dec 2025 10:52:12 +0000
Manifest this update: Mon 22 Dec 2025 10:52:12 +0000
Manifest next update: Tue 06 Jan 2026 10:52:12 +0000
Files and hashes: 1: 1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl (hash: OCdvGBVTQ+V6HjJudmmAmFhVTQ1i+mLBWAiSXc+o4rM=)
2: 5G06XvUwVRRyOnIY8jxOro6h5Yw.roa (hash: V20FFLwn9ua4V+AQ4TovNzBR9/9j1vF/i7yod1bYTy4=)
3: 8e9V5_j-KODPMQyViAD45CpGV8s.roa (hash: 2r0j7Q+FRO3baYmWVzbg/8WIGl0y7SvK4kcJpTvl1o0=)
4: D8aAE4HrDfkzTHlQkIHI8zN4naM.roa (hash: Cm3bWmUyOmVAOTKR8JdK2jAhJDvpAXIex44Z2oX0qOE=)
5: iKIGAOPpFs-PafUNaJJ72D6rF98.roa (hash: 0EVBAddyqy3GZxPo0HXySq0on0b2ZQvl3lV3X+GZbvA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 10:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Validity
Not Before: Dec 15 01:33:24 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=8B1E15DFD7168B6401ACA6FE7ED90CF4E77D832F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f7:23:65:fd:76:96:6a:a1:fd:dc:42:2f:a7:
a9:ef:21:c5:ee:58:97:0b:88:b3:43:27:ce:30:38:
fd:e8:26:9f:cd:b3:18:49:73:3e:5f:4a:89:9e:de:
90:d4:bc:04:f5:8a:85:69:0d:f1:5b:31:5d:ab:aa:
97:00:18:1e:69:c2:5a:15:ba:1d:f8:1c:6d:6e:e7:
c2:95:c1:d5:1d:c5:6d:05:d7:f1:ca:f0:0c:4c:f4:
69:02:36:0b:d3:8e:29:3c:41:4c:d6:30:3b:08:01:
e9:df:70:fd:13:5f:d1:5e:89:5c:fd:ae:47:3f:6d:
a3:bd:06:62:11:d9:ac:7a:91:62:9c:b2:50:55:73:
10:6f:fb:11:06:71:90:19:54:7e:28:bd:36:c0:ec:
11:49:57:db:0d:a5:95:c3:44:a4:fb:9a:21:ab:80:
a9:c7:ff:85:7a:f1:b6:8f:c9:a2:b1:b0:a2:28:c1:
c8:44:9b:17:08:e9:37:72:ab:30:8b:c5:1d:81:f8:
65:88:a6:41:10:aa:ca:d8:8f:8d:0b:d9:a3:9e:60:
40:f2:c8:1c:88:e5:7a:34:6f:b9:9b:68:79:80:57:
1a:d3:0d:e6:cf:b5:3e:a2:e1:b0:da:a7:4f:6d:fa:
4c:d8:04:57:f0:dc:10:e5:89:ad:b6:5c:d8:83:c0:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1E:15:DF:D7:16:8B:64:01:AC:A6:FE:7E:D9:0C:F4:E7:7D:83:2F
X509v3 Authority Key Identifier:
keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bd:43:74:e3:04:5f:08:f7:a8:81:6e:db:1d:c4:16:ad:cb:
49:1f:51:35:2c:0e:02:6c:da:63:08:ce:39:d6:b3:68:ce:76:
00:b9:ff:c8:e1:48:82:f7:e9:64:cc:4a:51:41:c5:bb:04:e0:
2b:0e:ac:c4:7e:92:50:ab:89:8d:a9:8e:2c:cf:ea:84:1e:61:
3a:94:6e:17:4d:d1:78:7c:52:80:9a:1a:89:85:78:44:70:37:
58:16:11:51:4a:2b:5c:e0:71:dc:1d:c6:89:80:6d:f9:c9:15:
83:ac:5a:bd:2c:55:78:36:ac:78:de:4d:e8:28:b3:49:e7:8d:
d5:cc:46:e1:49:ac:3a:d9:f5:dd:8f:fe:65:f2:b9:cb:66:61:
61:4a:36:28:7b:f4:82:bb:27:dd:6c:c5:d5:8c:92:88:ac:91:
6a:bd:bd:58:7e:49:97:4a:a0:d6:55:44:83:fa:ea:7c:9a:af:
a5:01:d8:72:63:e3:54:b0:ff:f3:c3:e3:0c:c4:4e:7b:77:06:
72:0c:f4:1d:cd:4b:78:3b:f4:d9:cf:d8:f4:da:fa:43:00:6e:
0b:49:c3:2e:4e:cc:42:52:ea:c7:c4:d6:a3:5f:4f:29:aa:4a:
9f:33:6c:bb:6a:06:a5:2c:9f:59:d4:3d:6f:dd:8e:21:f9:2f:
ba:f7:79:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:50:05 2025 by rpki-client