This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft
File: XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft (raw, json)
Hash identifier: Z6ymzS7wycPgxv2tEOk/EvccEZCWflJPcN3Gk0T55VI=
Subject key identifier: FF:87:17:C7:46:98:A8:61:F8:59:91:5F:B6:3B:63:2D:63:FC:AD:C4
Authority key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18
Certificate issuer: /CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
Certificate serial: 31
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft
Manifest number: 09DA
Signing time: Mon 22 Dec 2025 11:35:18 +0000
Manifest this update: Mon 22 Dec 2025 11:35:18 +0000
Manifest next update: Tue 06 Jan 2026 11:35:18 +0000
Files and hashes: 1: 7Smxt5aIGnhNlNDpew3nEIGW3vs.roa (hash: hyqQjxStCc7+7c96r277HvAkFjR0sL/eu9GZd2cJDw0=)
2: TN9bYAPqbo23Wcnw4TON1MEmsQo.roa (hash: BpMsX053nrtaecMgDDU7zFJLnxn6VQmw2LyxOyOSc8w=)
3: XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl (hash: W3fZWgeoYFDNMWJoC/CW7xOutwxzDYgd3rngHYNluYc=)
4: rvxqcyUm6jIOc5oyEhgiv9SLBWo.roa (hash: iFcLi6Y3DkxuGpRVxHnJzKi9sazOoyDRWzaLpwAVL5Q=)
5: s3aMatZBtbZVuYijb_upb3vwGMA.roa (hash: VZKgOLdqUkCL0ErUYxeUSApGAl6g7TMHrqqvVCRQHug=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
Validity
Not Before: Dec 15 01:37:12 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=FF8717C74698A861F859915FB63B632D63FCADC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:05:41:13:21:a3:88:d0:a1:16:86:7a:00:
fe:a4:bd:0c:1e:fb:72:18:a0:f2:92:d5:99:9b:59:
7f:c7:dc:b1:58:1d:54:1c:ec:42:14:c1:2d:71:d5:
59:2d:fa:ff:a9:eb:03:1b:b7:09:95:74:59:c1:8b:
71:c4:dc:f8:d8:9f:26:b4:6c:c2:28:9d:4f:85:c1:
3c:23:fe:ed:0d:61:69:68:3b:bc:3e:6e:3f:11:73:
ec:06:0e:4e:2f:fe:9b:be:5e:2d:4c:59:af:be:a5:
0f:06:15:66:c5:38:4f:88:92:b2:19:78:8c:98:87:
ac:8e:c8:c3:94:8b:3f:f2:41:94:02:1d:8b:89:47:
6f:63:46:9e:d8:41:56:1d:7a:b7:a3:f9:e3:a9:a4:
fb:43:45:dc:bd:f5:a2:0b:68:eb:e3:f2:63:7a:ce:
34:c2:39:71:53:6c:0d:ce:dc:f8:43:cb:0f:03:83:
e7:1c:50:ce:6f:e3:1e:5e:aa:e4:0d:d8:48:b9:27:
46:5f:44:3b:41:b0:4e:0d:cb:9a:8b:58:a7:17:1e:
8e:ce:28:2e:e1:e7:f6:69:dd:d2:05:b3:8a:0b:cb:
1b:fb:25:6b:08:3e:ed:7b:c3:ac:41:0a:c0:69:de:
15:ae:0f:b4:a7:fd:3c:0b:56:38:a9:e4:59:3b:36:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:87:17:C7:46:98:A8:61:F8:59:91:5F:B6:3B:63:2D:63:FC:AD:C4
X509v3 Authority Key Identifier:
keyid:5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:98:10:fc:36:25:2d:fa:cd:66:2f:98:77:8b:3f:45:b1:a7:
d7:e8:72:2b:57:bd:0b:39:77:4e:55:5d:a8:c2:9c:91:70:9f:
32:18:01:84:74:de:a7:49:be:18:56:81:83:eb:de:77:01:ad:
f2:29:63:94:49:9b:14:ea:15:22:9e:e5:1a:ea:0a:ff:55:2c:
13:55:66:ae:01:9f:0d:4d:21:cc:0d:97:3a:c1:86:bd:18:23:
66:d0:62:8c:d3:ab:28:6f:44:80:3b:f4:94:cb:fd:49:ff:90:
d8:a9:02:91:94:9c:21:cd:11:de:5b:a8:1a:c1:53:27:14:a5:
42:d9:1c:39:8d:6a:de:bc:f3:6a:5e:55:00:03:01:a5:7e:41:
93:70:7f:65:26:f7:74:62:05:b6:4e:55:be:26:6d:b2:eb:f3:
04:44:61:12:83:e2:71:3d:a7:a4:b2:66:aa:73:44:c5:f2:b2:
3e:02:3c:ec:6a:51:ca:84:e5:66:45:43:75:3b:85:28:a9:de:
c2:56:71:26:1d:d9:2f:21:09:91:03:2b:b4:b7:6c:9f:5e:6e:
d8:d2:fa:ca:3c:a8:87:02:9d:13:4e:8d:cb:5f:0f:93:f4:ae:
48:96:9f:6f:31:cb:07:b6:45:e1:85:a9:81:13:cc:ba:1e:d7:
7b:be:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:42 2025 by rpki-client