This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.mft
File: CobmwN1HM8FC8B3VMvs-ruQjsyA.mft (raw, json)
Hash identifier: 4/SZGH2wR1UDHA+gHRC55XR4D89Mu4bTPcPbzzBLnvA=
Subject key identifier: 9D:A2:C8:C5:55:91:4B:3D:10:EB:15:B7:C2:78:A0:F9:D0:67:77:A6
Authority key identifier: 0A:86:E6:C0:DD:47:33:C1:42:F0:1D:D5:32:FB:3E:AE:E4:23:B3:20
Certificate issuer: /CN=0A86E6C0DD4733C142F01DD532FB3EAEE423B320
Certificate serial: 32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CobmwN1HM8FC8B3VMvs-ruQjsyA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.mft
Manifest number: 0956
Signing time: Sat 22 Nov 2025 20:02:25 +0000
Manifest this update: Sat 22 Nov 2025 20:02:25 +0000
Manifest next update: Sun 07 Dec 2025 20:02:25 +0000
Files and hashes: 1: CobmwN1HM8FC8B3VMvs-ruQjsyA.crl (hash: 2PDH8Xda7+bOtzR4whwPNYDLzUtDecVZxbQUbU3m1ms=)
2: yq9woHc_QybUnRERYK6p3VxzyXg.roa (hash: IltfYlKz2d2zF5Dh5q8MRK1tkyK7AvfuwX/ToFFHfhs=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CobmwN1HM8FC8B3VMvs-ruQjsyA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A86E6C0DD4733C142F01DD532FB3EAEE423B320
Validity
Not Before: Nov 15 01:40:44 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=9DA2C8C555914B3D10EB15B7C278A0F9D06777A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:78:7b:ee:70:81:e9:74:47:eb:05:01:26:
d2:0b:3e:8c:9a:43:37:31:b2:8e:90:b0:03:d1:a5:
a6:15:23:80:e2:43:51:9d:0c:c3:d5:e7:6d:3d:fe:
62:ce:b5:e8:dd:6c:06:0c:73:10:4b:ab:49:fc:20:
1e:04:10:9b:90:04:04:32:2f:8c:7d:26:f3:a3:b2:
9a:e6:32:84:5a:59:fb:1c:41:02:54:f6:33:e3:b1:
a3:45:d0:94:8f:8b:23:37:2c:ab:c5:26:f7:86:c2:
46:d2:70:b5:6f:57:3d:70:81:12:67:d5:e1:1b:df:
89:87:70:59:f3:3d:0e:63:11:64:fb:71:19:f3:fa:
76:29:75:4b:ee:ed:5c:f8:9a:fc:a3:03:3c:cd:af:
6d:df:c7:0e:7f:f1:62:77:54:f8:10:5a:bf:ff:a4:
05:ad:2b:f1:14:79:2f:41:82:46:ab:a2:81:8a:f1:
a6:e1:02:24:3d:75:11:3a:8f:40:3a:51:9c:1c:28:
ce:aa:15:c5:30:e2:e2:01:9b:d5:5f:85:ae:2f:f3:
04:6b:aa:02:43:25:90:f4:9b:b5:a0:04:e4:42:57:
07:42:5a:74:66:06:f5:b5:2e:d4:af:17:45:82:f3:
0f:f9:29:30:38:40:be:bd:28:3a:45:ff:2b:77:d9:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A2:C8:C5:55:91:4B:3D:10:EB:15:B7:C2:78:A0:F9:D0:67:77:A6
X509v3 Authority Key Identifier:
keyid:0A:86:E6:C0:DD:47:33:C1:42:F0:1D:D5:32:FB:3E:AE:E4:23:B3:20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CobmwN1HM8FC8B3VMvs-ruQjsyA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:82:27:a0:99:84:ec:8c:1b:0e:4e:81:ed:8d:59:b4:99:8f:
e6:72:a2:d6:40:87:8f:0f:fe:59:99:b5:d7:3a:ca:d0:1e:29:
7b:9a:61:d8:59:87:04:c9:83:42:54:07:d2:b3:ac:8d:b1:f6:
fc:ba:ff:26:ac:d2:26:2b:9d:07:d0:6f:f8:94:aa:a5:01:33:
ac:c1:dc:f4:77:aa:bc:bf:ff:ed:17:a0:a5:c2:1a:3f:8e:8c:
3c:d0:42:c5:7b:56:68:56:69:80:0a:1a:5c:ef:81:df:04:25:
08:f9:4c:6e:d8:59:a9:bb:5e:8f:ab:e9:3c:f1:82:cd:6f:2e:
eb:61:9a:e4:a7:fa:76:a1:96:3a:d6:66:09:d5:9f:f9:d4:0f:
58:bb:13:31:ee:21:18:66:f9:31:94:57:0d:d3:cb:a6:40:d3:
78:d8:1e:51:f6:86:fc:c7:9b:21:d9:0d:c8:94:fe:e1:a6:24:
0b:41:96:af:e4:8f:53:a9:f7:eb:89:db:2e:f5:1c:32:b6:2c:
a0:50:1b:98:ca:b7:59:56:e9:ce:ee:bf:8c:0b:c1:7e:4f:10:
e4:f5:74:de:26:c6:b1:49:71:3c:d9:67:a1:cb:15:a2:cd:0c:
58:0f:67:69:a6:7b:b4:14:d6:d2:1c:23:1c:50:f7:e6:f1:65:
9e:58:26:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:16:22 2025 by rpki-client