This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft
File: UrIcP3vIfuQhVlQCwqMPsivcnjw.mft (raw, json)
Hash identifier: hORrJIpPwmZg/1fOKGQsNRnpVJu1T0Iv6Zvf17AAAoc=
Subject key identifier: FE:52:BF:AB:50:68:66:96:ED:81:4D:27:73:A4:60:E5:E1:26:AA:6F
Authority key identifier: 52:B2:1C:3F:7B:C8:7E:E4:21:56:54:02:C2:A3:0F:B2:2B:DC:9E:3C
Certificate issuer: /CN=52B21C3F7BC87EE421565402C2A30FB22BDC9E3C
Certificate serial: 03
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrIcP3vIfuQhVlQCwqMPsivcnjw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft
Manifest number: CC
Signing time: Mon 22 Dec 2025 07:17:48 +0000
Manifest this update: Mon 22 Dec 2025 07:17:48 +0000
Manifest next update: Tue 06 Jan 2026 07:17:48 +0000
Files and hashes: 1: 4BiAh-A-FANg1A6aElcnz9O_LcY.roa (hash: zV6CT48gYijhTxxMHABmUUiSCbGlVBxi5Zx/O5MvXY8=)
2: UrIcP3vIfuQhVlQCwqMPsivcnjw.crl (hash: vUFI13Y20CM4IR1Ud3Dencu2yggeY4WHyGC/bNSiRdQ=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrIcP3vIfuQhVlQCwqMPsivcnjw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 10:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52B21C3F7BC87EE421565402C2A30FB22BDC9E3C
Validity
Not Before: Dec 15 01:32:24 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=FE52BFAB50686696ED814D2773A460E5E126AA6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:c7:b6:d1:58:e0:15:4d:fb:f0:19:fe:a5:
91:af:0b:67:20:79:66:e2:ac:fb:fd:db:05:72:83:
c7:3e:db:d3:40:0f:45:4b:a7:a2:8c:ba:13:f8:29:
85:59:6a:19:8a:ac:11:2c:0d:5e:91:c2:53:f2:7c:
ba:38:bd:18:73:51:0a:7b:99:92:42:18:46:c9:65:
ae:73:9b:a7:52:f4:6a:cf:a5:e3:63:d3:41:b4:dc:
34:3d:f0:b8:f8:cc:1f:fb:d2:02:7b:8a:f2:55:b8:
f8:c4:22:46:50:a5:c1:f1:bf:7c:40:a1:1f:30:19:
93:18:84:d7:d2:8d:ef:6f:46:a6:c6:5a:71:3b:ca:
40:10:90:30:07:4f:04:16:e2:68:f6:c4:d3:60:9b:
3e:b4:02:4a:fc:04:79:30:13:72:9b:60:68:6f:72:
ea:54:ba:68:7f:73:31:b4:ab:d1:41:c3:9a:b2:91:
6e:e2:6c:d2:43:c9:a3:d2:cf:d2:55:0c:cd:81:6a:
c1:99:d4:df:2c:a1:11:52:8b:2c:d1:d3:fa:a4:32:
26:4b:fd:e7:ff:e7:0e:3b:8c:3c:fa:2e:73:58:2d:
24:c3:29:4d:da:4e:b1:77:9b:be:4d:2c:23:ed:1b:
32:2b:c4:bd:35:df:92:a2:d5:08:10:8b:cb:5e:08:
55:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:52:BF:AB:50:68:66:96:ED:81:4D:27:73:A4:60:E5:E1:26:AA:6F
X509v3 Authority Key Identifier:
keyid:52:B2:1C:3F:7B:C8:7E:E4:21:56:54:02:C2:A3:0F:B2:2B:DC:9E:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrIcP3vIfuQhVlQCwqMPsivcnjw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1a:41:60:13:3d:3d:56:8a:a3:da:10:2a:a6:c3:ab:4b:27:
3a:4a:18:41:37:d3:b5:14:89:8c:82:07:27:60:8c:16:52:40:
1c:24:62:c3:8b:f9:5c:3c:6a:f4:e1:f1:04:02:71:a2:28:6b:
db:3c:55:bb:a9:7b:a5:79:9b:80:d5:4b:a8:7c:39:de:f4:64:
a3:6c:4d:0b:52:f9:ea:03:77:97:f9:0d:55:3f:0a:0d:ff:50:
58:cc:50:5a:dc:f3:30:60:94:d0:56:97:3a:8f:04:dc:6a:f7:
fd:bd:b7:4f:01:a4:aa:78:15:10:b5:5a:83:8d:5c:ec:a4:60:
3b:ac:db:76:67:4f:e5:2e:98:b4:07:30:1c:29:d8:99:14:98:
7a:b2:46:03:ed:9a:16:2d:de:21:08:cf:41:d3:4c:89:84:16:
1f:d6:f3:d9:f9:93:b8:16:1a:f9:a1:f3:d3:67:8f:58:23:07:
2e:23:c2:36:2a:5d:3a:74:23:3b:49:5b:a2:10:0c:13:1c:1c:
af:98:0e:78:37:c3:6e:b0:54:08:3e:cd:fc:54:9f:57:f6:59:
87:6f:7a:da:f6:fe:4e:86:29:7c:e5:54:c6:a9:08:bf:28:6a:
f0:02:f0:6f:44:09:d1:db:86:93:d0:af:4c:28:2e:53:11:0e:
58:59:3d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:27:26 2025 by rpki-client