This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.mft
File: -XT56z5ratix6uoKRh0kjTrNzeI.mft (raw, json)
Hash identifier: kELl6m0mIsqbevhH6d9VxzCuOCc4879h3mwgS1FxcLU=
Subject key identifier: D2:2A:02:05:77:C3:A4:B3:64:26:47:E7:AB:CA:81:57:22:B3:8D:A1
Authority key identifier: F9:74:F9:EB:3E:6B:6A:D8:B1:EA:EA:0A:46:1D:24:8D:3A:CD:CD:E2
Certificate issuer: /CN=F974F9EB3E6B6AD8B1EAEA0A461D248D3ACDCDE2
Certificate serial: 3C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.mft
Manifest number: 0A0E
Signing time: Mon 22 Dec 2025 11:57:17 +0000
Manifest this update: Mon 22 Dec 2025 11:57:17 +0000
Manifest next update: Tue 06 Jan 2026 11:57:17 +0000
Files and hashes: 1: -XT56z5ratix6uoKRh0kjTrNzeI.crl (hash: VHQsueGQ1zA8Q6RxrxCMZ0YkqRDL4IWGabK+JHpWSTQ=)
2: GxFOVPiHb1DMccPAB6Wcklpb4Bo.roa (hash: Okk3hEjuiR6zmPiCXs7uX8CkzqjgWicU0gD/cw5AYeM=)
3: q1mDfLP_k8fEayQv8ElP_1XBAoM.roa (hash: qZZvJqWO237+bJTPxc7a3rfFEfeKCiBdiDl+hQRNot8=)
4: vfUiDVgzaXJya1GzFQaqULsG1gU.roa (hash: VL4zsdO7oK1Ik4a5RCe8hBN4xeXhmjyIbtZKPtZLVuY=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F974F9EB3E6B6AD8B1EAEA0A461D248D3ACDCDE2
Validity
Not Before: Dec 15 01:36:15 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=D22A020577C3A4B3642647E7ABCA815722B38DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:3f:40:96:e4:0f:bf:06:ed:2f:c7:54:7c:
72:bb:3a:af:84:e0:7b:dd:73:a3:db:b9:d9:67:0f:
28:f4:44:24:14:ca:5e:f4:35:46:4e:25:91:9e:52:
90:54:d3:c9:34:02:8e:c8:db:a8:59:7f:7d:5a:86:
53:85:ee:01:80:9b:13:62:1d:e2:ce:2b:f7:cd:0d:
82:d7:16:94:bf:be:13:a8:7e:10:9f:34:3c:f1:7d:
8c:f8:e8:53:ce:06:c6:84:8c:5b:ab:5d:61:4c:fb:
30:56:8c:7a:f4:7f:0a:17:97:a3:b8:58:65:7a:7b:
1f:3b:12:17:fe:86:f3:71:67:80:94:c5:bf:4a:9f:
1a:8e:1e:35:ef:1d:f7:42:29:af:3c:9d:0b:9a:54:
f7:4b:ae:b0:d5:40:81:c0:c3:3c:10:ac:b1:fc:c6:
13:b9:c6:26:18:da:6e:9b:7a:d9:04:39:f1:89:b7:
1d:d6:d0:de:64:a1:23:f2:fd:ea:45:ba:80:be:6c:
3e:b8:b4:63:c6:78:71:27:cf:09:df:23:11:de:f3:
dc:a8:4e:ea:b3:d8:0d:26:c5:89:e5:ef:82:38:a6:
43:a0:af:3c:58:f5:14:da:01:e9:6d:72:4e:dc:79:
8b:73:a2:31:b3:f8:fc:15:24:ed:24:40:5d:76:0a:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2A:02:05:77:C3:A4:B3:64:26:47:E7:AB:CA:81:57:22:B3:8D:A1
X509v3 Authority Key Identifier:
keyid:F9:74:F9:EB:3E:6B:6A:D8:B1:EA:EA:0A:46:1D:24:8D:3A:CD:CD:E2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0e:51:71:91:92:76:5c:f1:55:94:77:e1:ff:e3:45:c0:96:
da:a7:7e:1f:b8:5a:4f:ae:dd:93:bc:15:d1:d6:d5:db:0c:3e:
70:47:0d:7c:f0:f5:a4:f0:c2:40:6e:cb:44:6f:d6:9a:06:58:
88:08:fb:8a:de:2f:78:ee:86:a8:57:e9:5d:d1:59:cf:c1:26:
a9:56:56:01:4b:be:d5:33:a9:2c:d5:3b:c5:e8:11:16:c7:44:
3b:c7:c8:bb:01:a4:8e:17:64:81:06:a6:04:89:85:ce:a4:67:
10:75:2f:e2:2d:f6:df:c6:4b:ff:00:bf:42:be:7c:29:9f:a9:
84:5f:f2:fd:cd:42:d9:df:ac:41:93:15:be:4f:5e:5e:cc:d9:
af:0b:45:54:17:a1:b0:21:df:d4:9e:07:9b:a6:d2:26:0d:3d:
b2:80:92:6d:2b:14:1d:44:f1:98:9d:9d:c4:13:b9:9a:f9:28:
a9:63:bb:31:d9:ff:c8:91:21:9c:17:1c:4b:4e:18:83:d9:09:
52:8b:7d:81:2f:83:34:05:8f:d4:b5:8a:7b:c0:11:89:a9:45:
90:aa:1c:7d:1a:c4:c4:f3:c6:22:8d:02:d4:99:7b:23:ec:0b:
3e:bc:a8:41:37:08:f9:35:d9:19:80:f7:72:a3:92:62:3e:03:
f9:dd:52:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:48 2025 by rpki-client