This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5729/CgB_79dDVieclEtfSMwDYmjEli0.mft
File: CgB_79dDVieclEtfSMwDYmjEli0.mft (raw, json)
Hash identifier: UE8lPb1YZhNxd3MkSuL7+QT3lDVcCqBHqKTURo/157g=
Subject key identifier: 46:30:1E:E7:BB:B3:8A:25:14:F0:4C:43:43:46:29:84:85:64:80:18
Authority key identifier: 0A:00:7F:EF:D7:43:56:27:9C:94:4B:5F:48:CC:03:62:68:C4:96:2D
Certificate issuer: /CN=0A007FEFD74356279C944B5F48CC036268C4962D
Certificate serial: 05
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CgB_79dDVieclEtfSMwDYmjEli0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/CgB_79dDVieclEtfSMwDYmjEli0.mft
Manifest number: 01DF
Signing time: Mon 22 Dec 2025 11:17:45 +0000
Manifest this update: Mon 22 Dec 2025 11:17:45 +0000
Manifest next update: Tue 06 Jan 2026 11:17:45 +0000
Files and hashes: 1: AAGuofKfWODNDSUkbdUdnJawEac.roa (hash: dePIw0vwBePo6tVaHoqKibiReRgXe9UO9gdsWHMGWk8=)
2: CgB_79dDVieclEtfSMwDYmjEli0.crl (hash: wNGjwEIl4l5G9H+698dmgRzCdg6iCGUZ6AZ5XZ6wcSk=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/CgB_79dDVieclEtfSMwDYmjEli0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/CgB_79dDVieclEtfSMwDYmjEli0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CgB_79dDVieclEtfSMwDYmjEli0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A007FEFD74356279C944B5F48CC036268C4962D
Validity
Not Before: Dec 15 01:32:05 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=46301EE7BBB38A2514F04C434346298485648018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:05:b8:1d:e4:69:7f:a4:db:53:c6:e9:1b:
46:04:7e:ba:59:16:e6:0e:d8:2b:ea:77:6e:7e:88:
76:8e:bf:5c:40:28:de:e8:37:85:19:ab:48:13:80:
ab:ae:d9:ba:73:32:6f:62:b3:d4:00:1a:e6:35:58:
71:f3:37:26:17:04:55:45:aa:4e:53:9c:b7:8b:15:
d5:6e:7c:e1:d6:13:c0:1c:0a:5a:17:55:d5:38:9a:
fe:c2:5a:26:ac:a0:1d:00:79:70:03:7f:2a:6c:71:
49:0e:d5:e9:77:2a:d3:d2:90:31:43:19:af:55:d3:
ad:8f:d2:18:d1:ca:c2:bc:8d:f9:f8:88:01:69:89:
3c:b9:f7:1b:91:a0:29:23:7c:f4:60:11:fe:03:72:
75:f1:c2:21:58:13:2f:af:05:04:03:32:81:3b:e6:
35:a8:45:c7:05:5a:16:75:66:37:9e:da:4c:55:91:
9c:50:dc:e8:c2:89:86:5a:6c:c7:dd:a1:c3:9d:da:
d1:c7:ae:97:af:a8:3b:b8:d7:97:03:7f:6d:20:f3:
ac:7b:d0:93:21:64:7b:e3:1a:9c:a3:42:87:59:df:
a4:6f:24:c1:a2:f8:34:fb:a1:24:5c:21:66:a7:84:
b0:95:a1:f9:b9:56:a6:0f:21:43:a2:7a:79:40:2b:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:30:1E:E7:BB:B3:8A:25:14:F0:4C:43:43:46:29:84:85:64:80:18
X509v3 Authority Key Identifier:
keyid:0A:00:7F:EF:D7:43:56:27:9C:94:4B:5F:48:CC:03:62:68:C4:96:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/CgB_79dDVieclEtfSMwDYmjEli0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CgB_79dDVieclEtfSMwDYmjEli0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/CgB_79dDVieclEtfSMwDYmjEli0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:bb:a2:13:dc:05:80:f4:0a:df:7b:10:de:e6:40:40:d3:92:
19:64:2e:02:13:06:2d:29:d5:28:57:6e:28:a1:cd:17:83:d0:
9c:a1:81:e5:e1:f7:f4:bc:87:23:e6:f6:3f:03:54:d1:73:d8:
86:38:3b:11:88:5c:0f:b8:1a:22:48:88:1f:26:7a:d9:a4:3d:
ef:bd:29:48:79:1e:98:e9:ac:4e:fe:5b:d3:bc:b2:9b:a5:d1:
85:26:de:f1:32:dc:e0:89:36:0f:db:30:24:ed:21:68:df:6e:
68:1e:e9:c9:55:08:5c:d8:dd:6f:c0:50:cd:b9:86:c3:cd:d2:
5e:aa:9e:0d:f8:3b:5e:cb:a9:bf:93:c0:b1:66:13:56:46:23:
f2:43:36:53:91:01:6b:62:87:46:ee:21:2e:56:58:23:4b:d8:
00:4e:6b:8f:7e:bf:5d:57:31:bf:e3:7e:ee:12:d9:ca:0f:6d:
8e:96:16:53:b0:24:89:5a:79:ad:19:54:7e:f2:a3:69:a8:2c:
f0:31:ae:2b:fb:0b:df:b3:ce:84:94:74:dc:04:70:3a:ec:8a:
63:a1:ae:e0:c6:86:cb:ed:38:df:3d:8c:5a:9c:b2:be:e7:22:
37:f2:4f:02:2e:57:28:4f:1d:a7:ac:0c:f7:a8:84:eb:89:94:
db:a6:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:30 2025 by rpki-client