This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
File: ZxeEwss7hIfKdHJqZfS0R74BLFY.mft (raw, json)
Hash identifier: etc9A20nOXIgLme9jIONbWrAHsTngyEZonevZU/7L9U=
Subject key identifier: D7:EA:3D:60:90:81:26:42:92:71:48:7E:22:5B:37:5F:70:8A:47:CE
Authority key identifier: 67:17:84:C2:CB:3B:84:87:CA:74:72:6A:65:F4:B4:47:BE:01:2C:56
Certificate issuer: /CN=671784C2CB3B8487CA74726A65F4B447BE012C56
Certificate serial: 1E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
Manifest number: 09AA
Signing time: Mon 22 Dec 2025 07:59:56 +0000
Manifest this update: Mon 22 Dec 2025 07:59:56 +0000
Manifest next update: Tue 06 Jan 2026 07:59:56 +0000
Files and hashes: 1: CFE3rJciYYY0mR_y1_iVs4eC7zM.roa (hash: NhitJe2bK1zQK5ZMdDD5f5EfKld2utd7/vXzAxT7NG8=)
2: ZxeEwss7hIfKdHJqZfS0R74BLFY.crl (hash: FfL7LH8ohQwt8ZrJlhHPM4ePA3ODae222kHgDAHYZmo=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671784C2CB3B8487CA74726A65F4B447BE012C56
Validity
Not Before: Dec 15 01:31:15 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=D7EA3D60908126429271487E225B375F708A47CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:15:0c:31:7d:0a:00:4c:0d:72:7c:46:63:
bd:ab:da:f6:c6:c1:8e:d3:40:d4:e4:d9:44:60:fc:
21:f0:06:1f:3f:2d:61:0d:da:60:64:a7:fd:ca:aa:
34:89:41:a0:70:96:63:1b:f8:27:11:17:47:2f:db:
92:3a:57:6a:99:c4:ce:26:15:a5:ab:f7:94:b9:10:
b5:a6:a8:4a:4d:dd:f9:ff:43:19:40:4b:85:89:f3:
c3:07:16:63:88:0b:49:05:3c:1f:b1:a6:15:5b:b2:
8f:b1:fa:10:0d:a0:b9:db:dd:d5:45:f7:08:2a:8a:
6c:15:25:91:ac:38:e4:96:33:32:49:90:43:a8:64:
a6:dc:a8:d8:69:c9:3b:45:50:85:0a:ba:3f:db:0a:
34:fc:e7:7a:96:02:73:73:22:57:7a:c1:5b:96:e6:
11:68:3a:c8:e5:d8:e0:c6:66:16:f9:7b:c4:78:8f:
cd:ca:cd:63:98:78:74:ca:65:80:04:89:9c:71:c3:
6a:a1:79:53:f2:f1:ec:7f:ce:a8:56:14:aa:0b:22:
0a:8e:da:3b:93:09:db:2e:99:3a:aa:71:6f:83:98:
a6:76:3a:56:80:6d:fe:bc:7c:20:b5:62:af:94:65:
f6:48:57:38:b6:5b:a9:26:a8:bf:a6:64:68:bf:2f:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EA:3D:60:90:81:26:42:92:71:48:7E:22:5B:37:5F:70:8A:47:CE
X509v3 Authority Key Identifier:
keyid:67:17:84:C2:CB:3B:84:87:CA:74:72:6A:65:F4:B4:47:BE:01:2C:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:2b:ca:80:fd:cd:fe:ac:10:c6:e7:99:4b:15:43:00:fa:e2:
d2:ca:d4:70:45:a8:6e:96:44:b6:da:6a:50:25:17:84:a1:5a:
56:16:e7:2e:e7:0b:fd:c8:39:55:06:c6:bd:ad:36:df:f2:94:
b9:57:f4:ec:73:17:59:f1:79:e3:94:94:65:47:b8:28:52:0e:
89:f0:27:a0:33:ce:9b:4a:da:1b:53:e5:68:51:d9:8e:43:02:
8f:49:f0:f2:8a:35:6a:d6:f3:b5:b5:4f:e3:dc:b1:ae:7c:6d:
1e:22:8d:a3:79:8c:e2:25:73:3d:ea:a2:52:c4:68:f5:e5:19:
21:73:7c:e6:5e:3a:ff:e6:d0:e2:3e:73:37:1e:26:2e:9a:e4:
8e:e4:b9:ff:e4:35:f6:3b:b1:d3:eb:04:8e:8b:e4:f6:da:6c:
76:9e:84:b0:0a:56:fa:93:d7:a6:c4:ec:6c:78:c5:10:59:92:
e6:60:40:28:62:fb:56:c9:a2:d0:73:02:34:50:d7:8d:67:4b:
ba:32:74:bd:84:e2:57:4e:b7:dc:28:77:ad:59:e3:d5:cd:40:
5f:6a:20:6d:5a:c0:8c:74:48:3c:58:e1:94:d8:32:4e:e8:2d:
40:e2:0f:cf:ca:a3:a9:4f:95:e9:9f:3e:5f:59:4a:32:d6:b8:
f9:79:2a:99
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NzE3
ODRDMkNCM0I4NDg3Q0E3NDcyNkE2NUY0QjQ0N0JFMDEyQzU2MB4XDTI1MTIxNTAx
MzExNVoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoRDdFQTNENjA5MDgxMjY0
MjkyNzE0ODdFMjI1QjM3NUY3MDhBNDdDRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL1uFQwxfQoATA1yfEZjvava9sbBjtNA1OTZRGD8IfAGHz8tYQ3a
YGSn/cqqNIlBoHCWYxv4JxEXRy/bkjpXapnEziYVpav3lLkQtaaoSk3d+f9DGUBL
hYnzwwcWY4gLSQU8H7GmFVuyj7H6EA2gudvd1UX3CCqKbBUlkaw45JYzMkmQQ6hk
ptyo2GnJO0VQhQq6P9sKNPznepYCc3MiV3rBW5bmEWg6yOXY4MZmFvl7xHiPzcrN
Y5h4dMplgASJnHHDaqF5U/Lx7H/OqFYUqgsiCo7aO5MJ2y6ZOqpxb4OYpnY6VoBt
/rx8ILVir5Rl9khXOLZbqSaov6ZkaL8v1WECAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBTX6j1gkIEmQpJxSH4iWzdfcIpHzjAfBgNVHSMEGDAWgBRnF4TCyzuEh8p0cmpl
9LRHvgEsVjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzODcvWnhlRXdzczdoSWZLZEhKcVpmUzBSNzRCTEZZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWnhlRXdzczdoSWZLZEhKcVpmUzBS
NzRCTEZZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzg3L1p4ZUV3c3M3aElmS2RISnFaZlMwUjc0QkxGWS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXK8qA/c3+rBDG55lLFUMA+uLSytRwRahulkS22mpQJReEoVpWFucu
5wv9yDlVBsa9rTbf8pS5V/TscxdZ8XnjlJRlR7goUg6J8CegM86bStobU+VoUdmO
QwKPSfDyijVq1vO1tU/j3LGufG0eIo2jeYziJXM96qJSxGj15Rkhc3zmXjr/5tDi
PnM3HiYumuSO5Ln/5DX2O7HT6wSOi+T22mx2noSwClb6k9emxOxseMUQWZLmYEAo
YvtWyaLQcwI0UNeNZ0u6MnS9hOJXTrfcKHetWePVzUBfaiBtWsCMdEg8WOGU2DJO
6C1A4g/PyqOpT5Xpnz5fWUoy1rj5eSqZ
-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:43 2025 by rpki-client