This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft
File: SmXbIimWPt7-qaQStXMeo8UH5xQ.mft (raw, json)
Hash identifier: 97R6xM1/Uw/syPyk3Y1/BOyqEU8cJ9pbxzMj8gbncHA=
Subject key identifier: 68:AF:CD:A0:7A:17:8C:4F:36:69:EA:92:19:BB:81:94:B2:61:CA:40
Authority key identifier: 4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14
Certificate issuer: /CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
Certificate serial: 51
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft
Manifest number: 09B1
Signing time: Sat 22 Nov 2025 19:19:42 +0000
Manifest this update: Sat 22 Nov 2025 19:19:42 +0000
Manifest next update: Sun 07 Dec 2025 19:19:42 +0000
Files and hashes: 1: 1i0SyD7c_aqG2oEuncju0MZzvx4.roa (hash: yco8LME3BPdlBvS2xfS5G2t3Jd+WsIcgys0RpMD+l18=)
2: 6nzjX_eQXURYRPaB6OEuzcPM7Z4.roa (hash: i2aPouTvUrEdYAXGoe6C2ABQBk76qofhoSnRieGhEos=)
3: Aek99iOiNm7WkQR9vheV9mfAqfA.roa (hash: pCTB50rJz7ALmGikd5j00b/xDGcjeN2X29Y6IfL562c=)
4: P9qZGvneiyWuMmzdoykElHfCELQ.roa (hash: s2ZcW2VwMNATnWVlW5f9LGzyf7Lve3pv0E/ejNRsR+Q=)
5: SmXbIimWPt7-qaQStXMeo8UH5xQ.crl (hash: xZwqeGaCuF2EGa634R6fOGebMV5GdtapvdnajdWrz9s=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
Validity
Not Before: Nov 15 01:33:51 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=68AFCDA07A178C4F3669EA9219BB8194B261CA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:b6:6e:71:39:3b:b1:ad:c8:21:79:de:91:
f1:a1:0c:6d:d4:18:2c:54:43:9b:a7:35:8e:a7:0f:
05:ed:3a:3d:e5:94:02:3d:66:84:28:9b:6c:50:b4:
7e:3c:1f:a5:79:79:3c:a0:d7:61:92:56:4e:18:f5:
b4:ab:8a:65:3e:71:28:3a:03:29:90:89:f0:2d:09:
5a:c8:30:76:5a:82:46:28:9e:0c:c6:d1:22:f5:29:
e8:ec:cc:c6:b3:8a:6b:b2:7d:2b:83:74:ea:d2:2d:
70:19:2e:f5:ca:9a:bb:04:92:1e:76:01:c1:54:be:
ab:12:16:ef:83:fa:95:b7:23:36:63:34:8d:cf:44:
70:45:49:4e:c1:da:63:99:c5:c2:19:b9:06:17:61:
6b:ba:86:d7:3c:d0:a0:bc:36:7e:ac:fd:c0:32:17:
26:5a:41:a5:3d:2e:35:32:61:25:f5:d7:fe:15:6b:
ba:99:66:84:6d:a7:d6:c0:36:4b:2a:d8:43:0d:8b:
3c:1b:94:ab:68:6f:69:33:32:20:eb:e0:ab:96:7d:
d8:27:8f:db:ea:f0:7b:32:b3:4b:ca:c2:99:c4:a0:
a3:7a:dd:c0:88:63:cc:9e:03:cc:2f:9c:a0:c5:ea:
0b:4c:a8:df:d7:75:d5:df:e2:e9:2a:97:af:c8:bf:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AF:CD:A0:7A:17:8C:4F:36:69:EA:92:19:BB:81:94:B2:61:CA:40
X509v3 Authority Key Identifier:
keyid:4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:47:6c:49:5d:c5:1b:49:07:0e:00:e0:f5:53:0a:63:69:a1:
40:9a:ce:22:71:e6:88:3b:30:ee:ec:84:10:4f:5f:fb:fa:b0:
a6:c4:98:4b:d3:d9:fc:5a:c3:7b:3c:cd:55:a5:a9:65:c4:a3:
c9:84:1b:bf:54:81:a4:bb:8c:8f:6c:f1:49:1d:6d:b7:54:6a:
e1:ac:ee:20:3e:fb:a5:ac:05:4d:f8:b4:40:83:87:6b:26:a3:
05:9c:a3:5e:3b:e0:03:b4:77:f8:b4:3c:fb:79:ef:64:f8:de:
a7:e2:cc:48:98:7f:dd:c1:4d:43:14:db:94:23:6a:01:92:f1:
96:f1:22:9b:e4:60:73:60:bf:81:18:b7:d9:07:47:de:52:f0:
fb:d5:67:be:87:dd:62:72:c1:93:bd:9d:aa:33:16:4a:92:7f:
c6:32:d5:79:e4:d5:03:b0:73:de:9a:f6:00:00:24:15:bf:99:
8d:ee:0a:24:93:b2:40:23:05:ad:58:00:16:00:79:a0:4e:cb:
6f:bb:cb:5d:02:06:5e:1f:92:a0:3d:3e:1f:cb:b8:db:f8:09:
a4:1f:a1:43:07:3d:cd:a9:ec:d2:f3:0a:c5:17:07:06:a6:00:
d2:65:63:c4:16:85:c1:e8:f4:50:50:1e:6b:a9:13:38:09:40:
9e:56:43:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:28 2025 by rpki-client