This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.mft
File: DSZtuE_cabNCwnrxFo74epWgcPU.mft (raw, json)
Hash identifier: hEFXiXmgeaoEeFgnhtG6gWs3xqDkKNR4I/9LonHvc9s=
Subject key identifier: 56:34:29:BE:08:44:F4:BE:A5:CB:15:58:7E:18:2D:02:5A:3B:49:CD
Authority key identifier: 0D:26:6D:B8:4F:DC:69:B3:42:C2:7A:F1:16:8E:F8:7A:95:A0:70:F5
Certificate issuer: /CN=0D266DB84FDC69B342C27AF1168EF87A95A070F5
Certificate serial: 20
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.mft
Manifest number: 09B3
Signing time: Mon 22 Dec 2025 11:37:23 +0000
Manifest this update: Mon 22 Dec 2025 11:37:23 +0000
Manifest next update: Tue 06 Jan 2026 11:37:23 +0000
Files and hashes: 1: DSZtuE_cabNCwnrxFo74epWgcPU.crl (hash: I/fcDE53Er+UxL8ZI0e1R7uehlXyGr219jrph5g/Xyo=)
2: Tg8PZoIof4hdUds-IDtG1hUkS00.roa (hash: ldRLfdb6OpaYh66+YzS4YAigBY/X0ERDxfS7i/EYylg=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D266DB84FDC69B342C27AF1168EF87A95A070F5
Validity
Not Before: Dec 15 01:43:15 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=563429BE0844F4BEA5CB15587E182D025A3B49CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:f7:25:55:55:5b:cf:ef:2f:32:9a:06:42:
da:75:c5:e8:a4:74:4b:6a:c4:57:5f:68:68:ae:10:
7b:4c:b4:30:dc:fa:46:66:f7:96:96:63:6c:c3:ae:
de:90:4f:09:1e:2e:84:58:a7:a9:68:8d:9d:c5:d8:
e8:c8:eb:8a:4d:7a:69:ea:12:f0:81:15:d8:0e:71:
39:53:e1:34:82:b7:3b:e5:06:bf:95:8a:9d:78:45:
e9:43:da:e6:66:64:1d:00:4d:f0:2d:75:bc:6c:55:
ee:e0:81:7e:0a:cd:da:c4:1b:7d:25:6c:d2:94:5e:
5e:d1:30:fa:ff:cb:f5:78:09:28:91:9d:60:75:20:
cd:06:99:f5:85:10:39:aa:b0:bc:58:40:ba:2b:e9:
49:3c:36:6a:4a:23:03:8c:04:6b:d1:62:b1:15:cf:
96:20:dc:e9:37:e7:67:d1:25:0b:9f:48:ab:66:08:
8f:47:eb:5d:ba:a4:bb:ee:9c:33:a5:c3:8c:9a:8a:
9d:98:f1:aa:62:5f:05:c0:03:a3:16:39:0e:59:fa:
8c:6b:9e:85:7c:eb:92:a9:53:35:1c:b4:c5:e5:8c:
d7:f2:b2:b2:4f:f7:af:bd:4a:79:3a:93:9e:37:15:
69:4b:34:0c:5e:9c:bd:20:4f:09:50:be:13:5c:48:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:34:29:BE:08:44:F4:BE:A5:CB:15:58:7E:18:2D:02:5A:3B:49:CD
X509v3 Authority Key Identifier:
keyid:0D:26:6D:B8:4F:DC:69:B3:42:C2:7A:F1:16:8E:F8:7A:95:A0:70:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:4e:eb:d3:f0:b5:91:c5:a3:1c:63:1b:3f:db:dc:b7:7e:58:
ff:5c:e1:ef:02:64:c2:26:9d:29:93:e5:74:22:53:27:14:b0:
80:33:f8:d4:c4:38:c1:00:47:c3:12:f6:72:9b:00:52:6c:4a:
90:09:32:bc:61:4f:5b:ea:fd:2f:58:c2:fe:30:ca:05:8f:f5:
2f:0e:c7:2f:f8:28:30:52:3b:cb:30:b5:ad:6b:16:9f:de:42:
79:fe:7e:ec:b3:b6:c7:13:56:ed:0e:57:0c:79:0d:0a:5c:b2:
cc:7d:5d:05:0f:d2:74:8f:f5:91:b6:90:c8:27:55:19:87:5a:
c7:3a:62:fd:37:2e:1a:00:73:3b:a8:21:d8:2e:d7:43:e9:ed:
ea:0c:55:dd:52:18:de:c7:00:93:02:33:49:ea:6a:0b:47:4c:
fa:3a:17:27:6a:0d:87:b2:d1:31:46:84:c8:71:3e:f1:48:b7:
03:f4:d7:b2:3e:53:c3:0e:12:bd:3d:57:55:c9:ed:4d:08:67:
cb:15:38:57:d0:da:a9:79:18:42:af:09:29:37:c6:35:c2:2d:
17:de:bc:31:54:3b:a3:49:3c:d1:4f:af:19:76:c2:cf:9a:5d:
9d:cf:d7:f7:9f:e0:50:78:2b:49:f0:4a:45:f4:a8:9b:67:0c:
f6:36:4f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:39 2025 by rpki-client