This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30340/wBGc-yWziG7QkpOKhkpekRxVdAc.mft
File: wBGc-yWziG7QkpOKhkpekRxVdAc.mft (raw, json)
Hash identifier: ty6/buEypJMqKM78CfLMHsarI5o3mCm4ESbJQtk5Ljk=
Subject key identifier: 04:D3:31:FA:77:7F:12:EF:1D:D5:D0:11:3C:76:02:DA:BE:2F:E0:3C
Authority key identifier: C0:11:9C:FB:25:B3:88:6E:D0:92:93:8A:86:4A:5E:91:1C:55:74:07
Certificate issuer: /CN=C0119CFB25B3886ED092938A864A5E911C557407
Certificate serial: 20
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wBGc-yWziG7QkpOKhkpekRxVdAc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/wBGc-yWziG7QkpOKhkpekRxVdAc.mft
Manifest number: 09B6
Signing time: Mon 22 Dec 2025 07:55:31 +0000
Manifest this update: Mon 22 Dec 2025 07:55:31 +0000
Manifest next update: Tue 06 Jan 2026 07:55:31 +0000
Files and hashes: 1: Clnx0aiCtl_5QptaZyUjWYZ5AbE.roa (hash: uTonN1FqWj4uXmcqA+pB4iPDAJJOS3ha0KDg/jDVs/s=)
2: wBGc-yWziG7QkpOKhkpekRxVdAc.crl (hash: GBd2+gMvsE8jl9g7W2+vgIdKkLg3UL1nRqzEaqLTKRY=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/wBGc-yWziG7QkpOKhkpekRxVdAc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/wBGc-yWziG7QkpOKhkpekRxVdAc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wBGc-yWziG7QkpOKhkpekRxVdAc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 10:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0119CFB25B3886ED092938A864A5E911C557407
Validity
Not Before: Dec 15 01:43:02 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=04D331FA777F12EF1DD5D0113C7602DABE2FE03C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:49:3b:95:b6:70:e4:2d:98:c7:c5:9d:55:
38:0b:1d:46:ee:b7:f9:1d:64:ce:0f:99:ce:1e:6f:
05:57:24:f9:08:a0:c1:e9:15:42:dd:66:49:b2:ad:
dc:68:2e:80:92:6e:12:e3:d1:3c:76:9a:83:f9:b2:
59:d0:05:61:33:7c:39:fd:42:db:1d:c9:0b:22:55:
d2:d3:7c:b6:95:35:5f:68:ed:1e:32:b4:fe:4b:28:
5d:99:73:74:c7:9a:63:4f:d1:3c:88:c9:e2:df:bb:
b3:ed:d0:c7:5b:13:f7:18:55:a5:75:f2:83:0b:9f:
eb:fc:86:8b:42:df:4d:60:c0:00:07:39:85:6f:6f:
28:86:1e:7a:17:50:7e:01:7c:40:09:0a:89:ab:41:
3f:39:93:a8:1c:d3:4b:94:0e:80:ef:87:26:af:9d:
e2:04:e8:a5:00:86:17:da:3c:8f:b6:ca:11:11:94:
55:e0:13:1f:59:d9:cf:fd:89:ac:0d:5c:0b:67:2c:
ec:a5:e3:34:c7:41:d7:86:f7:0c:7a:38:f1:09:30:
1b:a8:cf:c8:ee:d0:6e:46:4e:3a:88:28:6d:ae:ab:
a0:43:92:77:77:7a:f5:cf:5e:24:9c:6c:4a:97:b9:
f8:1f:e0:dd:42:3d:49:f9:5b:56:c6:61:d0:f6:53:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D3:31:FA:77:7F:12:EF:1D:D5:D0:11:3C:76:02:DA:BE:2F:E0:3C
X509v3 Authority Key Identifier:
keyid:C0:11:9C:FB:25:B3:88:6E:D0:92:93:8A:86:4A:5E:91:1C:55:74:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/wBGc-yWziG7QkpOKhkpekRxVdAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wBGc-yWziG7QkpOKhkpekRxVdAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/wBGc-yWziG7QkpOKhkpekRxVdAc.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d4:51:2a:e3:d2:cf:eb:6e:00:1e:8e:a4:6f:0e:96:54:75:
d6:15:b5:1f:c7:30:81:c8:fe:3a:43:5b:21:7c:f3:aa:54:88:
34:ff:bf:e5:7d:ef:79:8c:9f:2a:a3:79:57:69:39:25:57:df:
cd:9c:2b:ee:92:70:f2:ed:64:cd:da:3e:bd:2e:d6:59:78:a5:
41:0e:e6:c2:53:b2:19:b3:31:7e:1e:db:56:ed:f8:71:9e:32:
63:16:3f:1d:e2:64:27:fd:d0:95:27:74:c9:08:0c:52:72:99:
1e:cb:00:ea:97:9a:52:17:52:ba:d8:dd:55:15:dc:b5:40:52:
91:5c:e8:cf:e0:ce:b9:37:90:c0:8d:56:eb:a4:9d:67:fe:60:
d5:61:c8:94:e2:1a:5a:8c:0d:af:20:bc:43:47:f1:bc:df:ae:
ba:f4:f3:09:ad:88:73:c5:4a:21:6e:93:50:45:3a:6b:36:31:
09:6c:79:4d:36:ac:3e:5d:7a:27:16:89:a6:92:63:97:16:8d:
4c:29:ad:17:58:20:5c:ba:26:ea:87:27:a7:fa:ff:53:fe:c1:
7e:da:9b:24:18:fe:69:d7:a4:7c:00:1d:fa:ef:05:41:d0:61:
75:fd:47:36:75:b5:07:d1:e4:cf:0b:5e:3f:1d:4c:6e:cb:67:
0d:fe:da:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:50:05 2025 by rpki-client