This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/kTp5SFrm1Mtbl6-LqlK1llaiIko.mft
File: kTp5SFrm1Mtbl6-LqlK1llaiIko.mft (raw, json)
Hash identifier: GEMAKbEnowrNRrNwwXJTuMsWvpSSHoerCrbSsv7MfYI=
Subject key identifier: 6B:57:CE:54:8E:4D:27:84:A3:FA:B1:13:61:97:B4:67:4F:57:B7:AD
Authority key identifier: 91:3A:79:48:5A:E6:D4:CB:5B:97:AF:8B:AA:52:B5:96:56:A2:22:4A
Certificate issuer: /CN=913A79485AE6D4CB5B97AF8BAA52B59656A2224A
Certificate serial: 54
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kTp5SFrm1Mtbl6-LqlK1llaiIko.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kTp5SFrm1Mtbl6-LqlK1llaiIko.mft
Manifest number: 0DA9
Signing time: Mon 22 Dec 2025 15:34:26 +0000
Manifest this update: Mon 22 Dec 2025 15:34:26 +0000
Manifest next update: Tue 06 Jan 2026 15:34:26 +0000
Files and hashes: 1: VR_Wkvxwn0TeOpGceaXckZrrCok.roa (hash: FPQikVcjy7u8itWb6eSH4mLcC73XvcfuGfK9jnHMP6Y=)
2: kTp5SFrm1Mtbl6-LqlK1llaiIko.crl (hash: y/NSLK92Tz0IxpVnSJvQl6vT0LARnb0TeMnvslNSQfk=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kTp5SFrm1Mtbl6-LqlK1llaiIko.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kTp5SFrm1Mtbl6-LqlK1llaiIko.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kTp5SFrm1Mtbl6-LqlK1llaiIko.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913A79485AE6D4CB5B97AF8BAA52B59656A2224A
Validity
Not Before: Dec 15 01:38:58 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=6B57CE548E4D2784A3FAB1136197B4674F57B7AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:e9:8c:e7:b6:bb:56:96:7c:32:cb:30:1b:
2f:57:bc:ec:0a:b8:44:e7:6a:08:3b:43:e4:04:48:
d7:90:c7:46:53:2f:a6:7e:c4:c9:1b:f6:8d:85:0c:
70:d9:8e:e3:24:df:bb:46:69:16:33:72:bc:2e:2b:
26:35:be:95:4e:1a:0e:05:9e:07:a1:45:d1:09:17:
5d:3f:ca:fb:b7:db:2b:16:99:78:a8:bf:1b:0a:ed:
47:42:52:70:ba:cd:be:7e:92:a0:3e:fe:90:b8:52:
c6:b9:f4:d4:d9:b6:91:e4:bf:89:20:a7:63:0c:1e:
74:5d:0e:e9:cb:8b:8d:b4:91:5a:b5:59:67:7a:49:
1e:e1:b6:c5:78:08:97:3b:00:58:b9:b6:59:72:00:
16:64:e5:9d:cd:cb:0d:1b:cd:f0:44:8a:3b:c8:cc:
19:b4:15:9f:ed:11:38:b6:49:d7:82:ed:04:56:f5:
29:0e:d7:ad:a0:48:63:1d:e0:91:bf:58:f2:04:c8:
e5:68:33:49:b7:be:93:5f:ee:4d:47:74:a8:d5:09:
7f:8c:f2:28:fe:32:fd:60:7d:1d:bc:34:b4:55:ef:
b3:d5:dd:62:92:d5:68:25:3b:cd:a1:f7:c9:b1:f4:
2e:f5:cd:b2:7f:0a:91:41:0d:a1:b3:b5:d8:f1:ae:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:57:CE:54:8E:4D:27:84:A3:FA:B1:13:61:97:B4:67:4F:57:B7:AD
X509v3 Authority Key Identifier:
keyid:91:3A:79:48:5A:E6:D4:CB:5B:97:AF:8B:AA:52:B5:96:56:A2:22:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kTp5SFrm1Mtbl6-LqlK1llaiIko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kTp5SFrm1Mtbl6-LqlK1llaiIko.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kTp5SFrm1Mtbl6-LqlK1llaiIko.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:17:46:c4:e1:1b:3f:70:00:eb:ba:49:ef:79:53:19:db:a7:
ee:1e:f3:88:c9:8a:d9:2b:60:e6:60:51:04:5d:73:4e:0c:9f:
43:80:87:15:f9:be:58:3b:32:02:25:d8:b6:00:b3:ba:44:24:
57:24:e5:f6:39:2b:8b:e2:d4:6c:da:14:74:26:02:54:1e:57:
d0:49:de:f4:ff:6d:cc:b2:e9:e0:63:84:e1:06:0b:91:89:db:
e5:2d:cd:23:42:fc:d9:26:cb:e8:29:d8:d0:c6:0f:17:e9:ff:
eb:6f:03:59:26:78:7c:1a:fd:f3:47:ee:61:41:0d:04:c4:81:
66:0b:c9:fb:7a:ab:66:5d:dc:bc:61:4a:56:8c:a0:a0:e1:d6:
4c:cc:4d:b7:db:16:71:4d:74:90:e0:ee:5a:78:c5:57:80:6a:
52:ae:5f:7d:66:b5:99:57:66:b5:22:49:d6:2c:5f:73:7f:de:
49:5a:50:3c:24:4b:77:50:f6:e4:79:f4:33:53:31:67:18:60:
9a:94:a7:91:59:82:d2:bb:41:54:70:53:4e:62:56:5b:ce:90:
d1:1d:2c:f7:70:38:53:06:16:6a:da:3e:e7:7f:78:25:c2:a6:
4f:e0:0a:25:40:9b:b9:a2:5a:1c:a2:b2:fa:c0:c0:eb:3b:e9:
5d:4b:89:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 19:11:47 2025 by rpki-client