This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
File: 4SW0OnWuMTJppgY45mMXlwtQtdM.mft (raw, json)
Hash identifier: P2e48AmTZnSnHqccniJQA20CAhmGFOM+ZiUE2xLx7VU=
Subject key identifier: 2A:92:1C:67:75:10:2E:77:A6:55:E6:C7:BB:0E:16:96:90:FC:4D:DF
Authority key identifier: E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3
Certificate issuer: /CN=E125B43A75AE313269A60638E66317970B50B5D3
Certificate serial: 20
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
Manifest number: 09AB
Signing time: Mon 22 Dec 2025 07:59:51 +0000
Manifest this update: Mon 22 Dec 2025 07:59:51 +0000
Manifest next update: Tue 06 Jan 2026 07:59:51 +0000
Files and hashes: 1: 4SW0OnWuMTJppgY45mMXlwtQtdM.crl (hash: 5rHYMoRRqv1R+M44MIWtSQ5Qz5z/Sj1wHtNvvXamp9M=)
2: eJObqEUg57Htjs32brscER0ziGA.roa (hash: sAB88E47RzCiuqDhcl+IzB3GnruVtCV9pzcsXdh8J14=)
3: sLGgaActsaSFOUuP72d7QBmj5Bk.roa (hash: 0nszAiQf991UoL5xMmz5WyuSEX8jXh7GwnSC9AcKvFY=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 10:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E125B43A75AE313269A60638E66317970B50B5D3
Validity
Not Before: Dec 15 01:31:07 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=2A921C6775102E77A655E6C7BB0E169690FC4DDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:3d:a7:fc:4c:9a:03:4c:ba:89:29:80:82:
fe:c3:23:53:37:47:14:cc:bd:aa:81:22:b3:77:fe:
44:3a:fa:83:88:86:43:f6:df:43:9a:95:ad:17:64:
3c:a4:96:8b:ac:04:4b:4d:51:7a:d0:11:fa:85:b4:
35:51:69:0e:9a:ac:0b:40:25:15:68:41:18:17:56:
6f:9a:e4:7c:f2:47:36:dc:ff:51:cb:c1:b8:ff:5f:
c0:ce:a3:cc:6e:bc:56:46:99:90:1c:98:18:ce:61:
89:15:e7:ac:6a:08:7c:10:c0:58:cd:8d:3f:52:bd:
36:95:72:42:e3:dc:a5:b7:21:22:28:60:29:d0:3d:
ee:79:ca:18:70:9e:f4:60:fb:56:ed:1d:f4:f1:6b:
68:a2:00:e3:16:c6:75:f4:af:e9:1c:57:91:4e:f7:
a5:77:fa:34:b9:8c:1a:85:54:fc:bf:23:37:e1:75:
e8:1d:e0:eb:22:1e:20:cb:82:29:94:af:27:8a:6c:
f3:b2:6e:5d:e9:7e:fa:6b:86:78:7a:8f:1c:64:90:
e3:79:7b:32:85:4e:bf:0a:94:dc:4a:53:74:68:ba:
42:93:bd:32:6b:52:ce:0d:82:89:e1:61:07:98:56:
e5:ae:1c:ca:18:bc:dc:90:1f:23:fd:bd:89:d0:e9:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:92:1C:67:75:10:2E:77:A6:55:E6:C7:BB:0E:16:96:90:FC:4D:DF
X509v3 Authority Key Identifier:
keyid:E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:13:80:c6:4a:9f:9b:81:69:81:0d:47:40:40:96:7c:41:7d:
c3:93:e2:b6:a9:09:3c:cd:d6:6c:49:b5:25:3e:a0:70:4d:94:
ef:b1:c9:7e:01:fa:9f:ae:a7:aa:b5:49:24:b7:ed:82:fb:50:
3e:07:cf:f0:a7:8c:c7:61:72:bf:5f:7e:4a:0e:49:bd:9a:89:
0d:1c:d0:0a:ad:de:72:7b:65:b8:82:c7:d6:bb:f2:d6:8a:4b:
58:95:9e:b4:9f:8e:d4:93:01:eb:5b:d8:82:d7:5e:f3:e3:25:
83:db:d8:c6:4d:1a:33:bd:2f:64:35:2c:20:1f:9c:ff:e3:4b:
93:ec:e5:17:fc:c2:af:84:0e:3c:70:7f:d7:af:76:36:66:23:
b9:1e:d1:9a:dc:34:7f:02:f0:38:e1:22:41:89:e3:75:06:89:
30:d0:31:9e:7a:a8:92:a4:65:4c:13:ab:8a:a8:62:e2:29:9a:
9f:fe:3b:22:f7:4b:dc:eb:fe:ce:4e:b0:9c:f4:d9:f4:de:74:
3f:e8:53:c4:f8:b4:e1:fb:92:a6:5d:c5:fc:d8:11:5d:29:96:
cd:77:2b:c8:19:55:68:08:6a:67:b4:38:be:06:7d:10:ec:9f:
cd:c8:d7:53:cb:25:29:a6:fc:2f:b3:e9:95:ed:a4:d5:5c:97:
ab:c0:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:41:55 2025 by rpki-client