This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
File: 0KlSoA2yFUF1wgtMiH76L4CsbwU.mft (raw, json)
Hash identifier: XWodHjB5vS/Q1l+dY/056lyLbY0kSyT+/TqEI85ueY8=
Subject key identifier: 2B:6B:D8:AF:3A:27:D8:49:62:04:0A:9B:31:6C:43:17:B2:EA:06:77
Authority key identifier: D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05
Certificate issuer: /CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
Certificate serial: 4E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
Manifest number: 09DC
Signing time: Tue 18 Nov 2025 10:48:30 +0000
Manifest this update: Tue 18 Nov 2025 10:48:30 +0000
Manifest next update: Wed 03 Dec 2025 10:48:30 +0000
Files and hashes: 1: 0KlSoA2yFUF1wgtMiH76L4CsbwU.crl (hash: EsSdzwAa6kQNvGcfDXcRwokKOk560FEdqTgz+xs9R8E=)
2: MyckJyek9ji7eE6xv1jl26s-o8Y.roa (hash: DupaFcN1Jnb/CThzl3B54BAXvTZdDf9U0QE9+9haZEE=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Nov 2025 12:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
Validity
Not Before: Nov 15 01:39:24 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=2B6BD8AF3A27D84962040A9B316C4317B2EA0677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:f7:e4:84:2a:c5:77:c9:09:3c:45:bc:d5:
29:14:ce:6f:99:04:b3:75:4c:e4:bc:b4:5b:10:bd:
2a:3b:a9:b3:17:ea:e1:f6:ad:f3:ff:11:60:a9:d3:
f9:7a:81:8b:2a:91:6f:42:fb:d1:b0:87:50:87:f3:
ec:b7:d6:e3:c5:ff:65:83:d2:e9:a0:bb:b5:4d:67:
99:6f:53:0d:3e:45:50:49:0d:9a:16:74:12:2d:30:
f4:9e:d8:64:c4:02:2c:ce:bb:30:07:cd:98:6e:df:
ac:31:9a:47:30:fb:b9:75:2f:b6:cd:79:e4:d6:1a:
4e:9b:04:65:5d:6d:66:66:c3:d6:72:9e:1a:6b:a6:
13:f0:3c:95:f3:d5:62:96:a6:9f:70:0d:4b:0a:0e:
c6:a2:be:96:9f:25:e9:18:4a:8d:2e:ee:f9:cd:70:
82:3f:62:5b:2d:64:0b:61:8e:05:6f:f6:63:28:f2:
6e:62:1d:71:f5:3a:40:02:59:34:60:ca:30:a4:b3:
99:27:ca:75:1a:a9:39:a9:16:e7:df:10:e9:23:4c:
94:e3:df:d1:fe:ac:84:38:24:74:26:d0:88:4b:c7:
a6:34:19:4a:5e:0f:51:a8:ea:97:21:cc:5d:88:cc:
d9:3a:55:71:81:9a:08:d6:9b:5c:db:d5:cb:85:e1:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6B:D8:AF:3A:27:D8:49:62:04:0A:9B:31:6C:43:17:B2:EA:06:77
X509v3 Authority Key Identifier:
keyid:D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:74:80:3a:c0:8d:9c:bb:75:77:66:6c:ae:6a:37:cd:7d:35:
e8:e7:fd:8a:d4:c7:a9:ce:f7:ba:37:06:78:f0:83:05:eb:17:
a7:fd:fc:f2:99:59:34:8b:2d:16:94:15:5a:d9:68:3f:8e:02:
71:3f:8b:bd:b3:00:18:1e:70:ab:cb:4b:79:54:cc:35:2f:94:
fe:b4:a3:ae:34:c8:36:1a:79:c9:f2:b2:cd:da:df:c3:6f:7d:
f4:2c:8e:07:be:2c:1f:13:e4:52:69:36:08:8c:c2:1a:89:c6:
5e:97:76:f8:34:4d:af:c9:8a:8f:13:03:7f:ce:81:c8:e9:02:
1a:be:16:f5:10:03:ba:ef:f5:d4:89:82:e0:dd:0f:ae:4f:8b:
4c:2c:06:a4:8d:8f:aa:87:07:e0:8c:2e:08:f3:c5:34:b4:c0:
52:d9:81:06:5e:fb:82:de:17:8c:b1:28:10:6a:da:8b:7c:19:
0a:8f:d2:b8:aa:f9:13:b0:60:20:6b:d3:7f:4f:64:65:18:5d:
74:86:7e:a1:71:fe:f3:b5:71:dd:c0:6f:3f:1b:e7:2e:1c:f1:
3f:75:ea:55:cb:e9:ca:33:eb:95:bf:dd:f8:79:64:c3:7a:18:
6a:67:02:14:14:cd:c1:76:ff:43:ca:2a:56:8f:51:97:b6:b2:
64:07:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 13:57:00 2025 by rpki-client