This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
File: KJldaw3cIFs1lZMy0csdnYzwIoM.mft (raw, json)
Hash identifier: USUxQRFAC//Hm2zfx7qohLdRvhKNDu26jmVFXO9nQUM=
Subject key identifier: 19:3C:C2:D3:EA:C8:3C:A5:06:17:97:A4:12:C8:BA:15:F7:B3:C2:8C
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial: 6C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
Manifest number: 0A67
Signing time: Tue 16 Dec 2025 22:15:36 +0000
Manifest this update: Tue 16 Dec 2025 22:15:36 +0000
Manifest next update: Wed 31 Dec 2025 22:15:36 +0000
Files and hashes: 1: 0YCypEMxhBUZZyAegjyN-LOXmB0.roa (hash: /jd1E/tl90Y9hH/ThKOpMVawvJPqpja/t6AKp7mFY/A=)
2: 4_aF5M-wBHdarNLxhx9F-F88sw8.roa (hash: xNxhOSDytZNtvMr8wyOCaO230F+Xa5TeAvFUApNsZ0A=)
3: EHipQLRuAwJfnm0co8e2aGlz8A8.roa (hash: uORlXXMAvEU2p8TtnWvdGkFG+XXqqzQMI1VX9/rq9sI=)
4: FFn5AbBCBRSlHsnWUK-d60cuo8w.roa (hash: 71yI8gRXRy1HLhoJe52lZRE0X5v5ErJLQ+n76nwKeWo=)
5: K9tgEZdC6KdIsEErkCIW9cmcNko.roa (hash: 1PBngLcewCOFglCP7yUnf+rTGq4BKIKscPgFyK307is=)
6: KJldaw3cIFs1lZMy0csdnYzwIoM.crl (hash: 1kXxusIHIT1B8zfEMRdEMpxVFKs0lTAwBSRYQmulEcU=)
7: Z4gfS-NSVk8uSXYQZPQVQIGMNis.roa (hash: RscVWPgr9QHh1PsJF/zZ1D1BykUnzSPiQwEgofdmUOU=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 21:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Validity
Not Before: Dec 15 01:39:33 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=193CC2D3EAC83CA5061797A412C8BA15F7B3C28C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f5:bc:29:a4:07:80:be:bb:cc:43:98:23:7b:
ab:9d:4c:c8:06:88:9b:b5:bd:e8:f9:ab:ad:8b:9f:
fb:1b:02:4a:7b:bc:f2:cf:24:75:69:b6:71:89:63:
a5:fc:5b:b5:bc:7d:9e:4b:89:1b:bd:ce:37:31:0d:
2e:60:2c:78:09:ea:02:a1:4f:d1:88:55:88:51:df:
b4:0a:ef:95:1b:e7:fe:10:32:7c:1d:99:4a:cc:0b:
10:b4:6c:7d:18:ea:5d:c8:db:19:c0:df:0b:fc:5c:
9e:c4:92:30:62:f2:ce:f4:d7:c6:d4:64:03:5e:c4:
ce:33:9c:13:ea:65:3c:e5:0a:df:69:42:42:a0:76:
1c:ef:e9:a7:99:f8:49:3d:7c:fa:46:14:d0:5b:d1:
c6:b1:51:d8:3f:f1:bc:4b:88:02:25:1c:8d:36:1d:
60:2a:5c:33:e8:17:e6:ad:f5:f1:39:49:ca:88:e0:
14:51:cb:30:a0:7e:11:ae:9d:53:ae:0c:8c:89:34:
97:66:c4:e7:78:5a:c1:36:df:b1:cf:71:1e:d6:91:
ba:3b:c3:a8:bf:f3:d1:58:fb:e0:3a:7d:84:a6:81:
4a:6c:0e:ff:c3:91:13:67:ea:48:9c:e3:1f:d2:a6:
50:ee:8a:e3:05:06:8e:f5:92:8c:b3:1e:58:53:f5:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3C:C2:D3:EA:C8:3C:A5:06:17:97:A4:12:C8:BA:15:F7:B3:C2:8C
X509v3 Authority Key Identifier:
keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:0d:60:43:fd:91:81:db:7b:66:77:c8:7e:3b:d8:a8:64:78:
cb:69:ae:46:53:b6:f8:7e:41:45:2c:dd:45:6f:91:97:fa:a8:
25:1e:36:c6:5b:9a:32:a3:80:dd:ee:9a:72:b1:6b:ad:d3:5d:
ae:27:2e:01:f9:df:a0:fc:c6:ca:1a:65:50:78:00:50:8b:48:
70:13:74:3a:45:a4:d9:3c:5d:e8:f9:f2:f4:6c:fe:0b:9f:40:
53:f2:db:ee:5c:21:17:ff:bd:c3:c7:70:ca:3f:22:42:35:69:
62:f0:fb:d8:a0:e9:63:cd:91:0d:23:f1:12:b8:32:69:3b:97:
fa:4a:a7:79:4d:11:d0:69:4b:c5:bb:4f:4d:3f:78:e7:60:9d:
d4:f9:17:c1:d6:6f:cb:ce:ad:d9:f2:9a:50:be:9f:1a:e2:5d:
f7:82:6a:3b:d5:62:ae:bd:e2:da:73:25:6d:f6:ea:dd:53:25:
93:6c:f0:90:c1:ea:74:aa:0c:e8:b9:26:94:c3:37:20:3a:39:
22:ca:8a:d6:e6:88:cf:f1:d2:ca:1d:df:20:f7:58:b3:3b:4f:
29:45:ff:15:18:6e:ff:37:dc:79:e5:a3:17:6a:b0:aa:d3:b9:
c2:c0:d8:a4:aa:fe:21:a4:47:4e:76:f7:3e:3c:a6:3a:3b:3a:
33:7f:4c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:53:48 2025 by rpki-client