This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
File: q2yEZLBStyD10sACDmQmtsftGGs.mft (raw, json)
Hash identifier: WRGQjkqsHyu7IaZ639RMWwInhJw6T6dj//CkpwizfBY=
Subject key identifier: 69:C6:44:20:97:52:C3:1D:A7:0D:BD:C9:98:F2:23:AB:61:A3:68:FB
Authority key identifier: AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B
Certificate issuer: /CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
Certificate serial: 20
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
Manifest number: 09B7
Signing time: Mon 22 Dec 2025 11:55:33 +0000
Manifest this update: Mon 22 Dec 2025 11:55:33 +0000
Manifest next update: Tue 06 Jan 2026 11:55:33 +0000
Files and hashes: 1: YsJIgATB39tNRPLD2FYqu0Fd-So.roa (hash: 85DDhX8IYygaLJEcJgCws9c9VwcXvzTFF9sd56k9d48=)
2: q2yEZLBStyD10sACDmQmtsftGGs.crl (hash: bPuztpTLFWMCUVexiqvBD6me0tSEKQ7pph7F2HFu1WQ=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
Validity
Not Before: Dec 15 01:43:04 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=69C644209752C31DA70DBDC998F223AB61A368FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:f0:08:38:21:92:25:0f:b8:70:8d:7b:a4:
28:ae:98:d3:4a:24:fc:7d:3c:99:9c:2a:cb:05:e8:
c9:26:39:e0:0e:cb:80:06:82:42:d3:a9:fb:01:4f:
eb:07:dc:b1:05:f3:9b:41:6b:e8:7e:8e:70:a9:0a:
ce:45:95:1e:83:9f:dd:b0:32:5e:fa:1d:aa:8c:49:
d2:ca:2a:8c:de:76:d4:b5:38:64:d7:a0:aa:eb:c8:
88:40:3a:86:2b:13:72:e7:78:d5:7d:31:db:cf:32:
1f:ec:e7:6f:ca:9b:94:ff:3a:68:1f:09:34:d3:6d:
bc:4e:df:57:da:5b:44:80:86:15:85:7e:7b:ec:5e:
2e:b8:43:e5:90:bb:1f:6b:76:ad:0a:46:93:a5:8f:
d3:40:88:4a:a3:87:27:29:07:a4:85:c8:3f:13:17:
37:ad:e7:4f:c1:fe:c1:85:ea:d6:a2:c4:95:2e:37:
ae:bf:9d:cf:07:e2:db:7c:9f:1c:a5:ad:d5:b5:b6:
08:11:b5:6e:70:be:99:98:bf:60:c4:6c:8d:98:35:
a2:44:9e:a1:69:03:d5:97:37:8b:3c:b4:0b:be:da:
f0:f1:f3:07:e7:7b:4c:3f:fe:3a:75:73:b3:f9:fe:
61:52:f9:a1:30:16:ef:d9:8b:99:50:3d:82:d1:35:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C6:44:20:97:52:C3:1D:A7:0D:BD:C9:98:F2:23:AB:61:A3:68:FB
X509v3 Authority Key Identifier:
keyid:AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:d6:68:66:7a:f2:2b:68:e1:c3:c9:19:f6:6f:e2:b3:b6:37:
6a:41:d2:17:de:bd:1a:b9:f2:5a:aa:51:45:07:09:ea:9e:17:
e2:ab:61:2a:ef:3c:e4:7c:ed:e5:36:c9:9d:16:43:5b:3b:9f:
c5:ff:8c:b9:f4:d4:f7:9a:63:ae:3b:2c:aa:4a:9b:04:bc:e5:
80:f0:2a:7b:d9:16:51:82:ea:c5:e5:a1:ee:a2:1f:43:cf:18:
b4:75:d9:a9:50:ea:25:1a:19:7c:f4:a9:6c:28:34:4d:12:0b:
bb:35:d7:21:03:19:f2:77:df:e9:4e:45:77:40:71:93:80:c4:
1e:63:b5:ef:0d:94:c0:77:43:b4:e4:78:01:e8:7b:78:d5:62:
f4:66:b5:d3:c2:c3:d0:19:c4:78:c9:17:01:26:b0:2e:b0:cf:
ec:b7:3a:dd:8a:b9:4a:ab:ab:92:99:80:17:3a:30:b4:29:de:
97:59:02:bd:62:f0:29:18:64:1e:be:26:bc:cf:0b:a1:82:a3:
63:89:b9:f1:c6:fa:91:31:5d:69:ab:a8:e0:76:0c:e0:7e:52:
c1:74:2a:c9:e2:9a:43:0b:46:9e:7e:df:0a:32:2e:f6:25:31:
2f:a7:db:05:d9:db:95:6e:f5:6a:cc:d3:7b:ae:2e:4b:90:8a:
d9:b9:db:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:44 2025 by rpki-client