This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
File: cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft (raw, json)
Hash identifier: cxs+NNPAH2Lvxl26mTBZ/snvmAHtSLlTpwlXhUYIvTY=
Subject key identifier: B1:72:A9:09:F7:D4:0F:11:B7:C5:1F:4D:66:4C:B8:BD:18:64:D3:94
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Certificate issuer: /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial: 3F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
Manifest number: 09B6
Signing time: Thu 18 Dec 2025 06:45:32 +0000
Manifest this update: Thu 18 Dec 2025 06:45:32 +0000
Manifest next update: Fri 02 Jan 2026 06:45:32 +0000
Files and hashes: 1: -WYlhYLrNLBpWlgsJMQR6DxLPXQ.roa (hash: k/8mcdzaASO9MFiTnYNOnKaVIuWuSncevQCraoLqD8E=)
2: 6oklst0zAPXz6IH2vDIaJB-kKGQ.roa (hash: CVhIIOfpa2l88bQGyfPnWSGyIlWDZfNykUILBLUgy+E=)
3: aXBJ9MW0sRrLmrzdGXKGgQeF6QI.roa (hash: u1DoyiQSFcZd4DRU3/9KZFlzxiDy3TaGdYesRQk4YkA=)
4: cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl (hash: cUMJslYah0LVoUuFXTKLG98oFRVDJ90Y2fr8ldCHM3g=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Validity
Not Before: Dec 15 01:42:35 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=B172A909F7D40F11B7C51F4D664CB8BD1864D394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:e3:98:cd:63:26:9f:84:fb:0e:e5:94:09:
fe:4f:f8:ce:20:98:6f:e2:fe:23:ff:d0:f8:71:d6:
1e:36:fd:50:1f:37:47:9e:c9:2d:f4:6a:a6:49:fe:
f2:cb:cd:8c:6d:dc:7a:6f:d8:e4:dc:cf:bc:f0:18:
30:81:1b:3d:79:a4:3e:38:a6:ef:07:c1:f6:d6:12:
2e:4f:3b:e9:a2:e2:96:26:26:4a:b8:ae:73:59:89:
9d:3c:83:0a:2d:69:bd:18:c8:ca:6e:5e:16:92:30:
32:2d:f6:99:2c:b1:4a:13:7f:dc:5c:28:4c:62:4c:
ba:9d:87:f2:2e:03:b2:d0:db:f1:e4:75:46:fc:85:
3a:58:dd:dc:24:00:93:0c:89:0c:83:9d:f3:2f:a3:
0e:08:14:28:d0:3c:4e:b4:d3:dc:36:c0:fc:d3:a0:
a7:a7:b5:0e:59:7e:19:86:9c:5c:13:78:85:5d:f2:
bf:48:94:33:cf:ba:97:0e:81:ec:49:b3:bd:ae:78:
b5:3d:fa:33:01:3a:c4:57:fe:b1:b0:97:3e:69:d2:
35:f1:49:5e:0e:c8:70:c6:9a:5e:66:57:cc:79:d2:
7d:42:ac:a9:38:50:c5:37:3d:dd:c4:c7:6f:64:5a:
f5:94:0b:c0:c0:4a:e5:eb:0c:cc:9a:ce:9e:c8:c0:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:72:A9:09:F7:D4:0F:11:B7:C5:1F:4D:66:4C:B8:BD:18:64:D3:94
X509v3 Authority Key Identifier:
keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:ad:7c:25:2e:bf:ef:04:8b:28:d0:e5:29:0b:55:1c:61:03:
82:6c:5e:a1:a0:9b:f6:dd:7f:5c:f5:24:63:2f:a5:ff:4f:37:
b3:15:04:17:b9:a3:b2:cb:08:49:6b:fd:bf:67:31:37:d7:f1:
99:8c:cb:b6:35:47:2a:05:99:4e:b3:13:5b:e2:d0:52:b5:8c:
79:63:00:fa:0a:de:da:e4:19:04:51:eb:3a:c5:c2:2e:2b:49:
fd:6a:33:72:6c:4b:3d:11:10:96:b0:a4:b1:e5:91:38:0c:ad:
c2:6a:b1:3b:40:7b:f0:49:21:43:0b:68:98:63:78:e9:7c:97:
63:02:db:20:aa:56:ad:3a:eb:3b:f6:85:9a:66:19:f6:73:82:
ea:14:4c:04:c5:38:e3:b4:35:6f:5e:f7:66:c9:c0:fc:d5:4b:
2e:32:65:88:17:a9:9c:c0:f0:97:df:94:95:38:97:4a:52:ad:
86:16:d8:bc:37:0c:4d:71:94:6d:bf:0c:ea:fe:a0:e0:b4:47:
cc:b8:d1:5f:7c:a5:33:90:1e:4e:86:a3:49:e2:55:de:85:b3:
c3:c2:c1:fa:b9:f4:bb:9f:b9:56:8f:c7:9e:0a:1c:b9:60:c2:
30:3b:6e:60:70:a6:55:72:1c:6a:5d:25:d4:ca:44:fb:74:52:
37:8e:00:80
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTkx
Q0I5RjRDNDIyRDNCM0Q2NzUzNzFCMThBOERBRERBRTg3OThEMB4XDTI1MTIxNTAx
NDIzNVoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoQjE3MkE5MDlGN0Q0MEYx
MUI3QzUxRjRENjY0Q0I4QkQxODY0RDM5NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALeo45jNYyafhPsO5ZQJ/k/4ziCYb+L+I//Q+HHWHjb9UB83R57J
LfRqpkn+8svNjG3cem/Y5NzPvPAYMIEbPXmkPjim7wfB9tYSLk876aLiliYmSriu
c1mJnTyDCi1pvRjIym5eFpIwMi32mSyxShN/3FwoTGJMup2H8i4DstDb8eR1RvyF
Oljd3CQAkwyJDIOd8y+jDggUKNA8TrTT3DbA/NOgp6e1Dll+GYacXBN4hV3yv0iU
M8+6lw6B7Emzva54tT36MwE6xFf+sbCXPmnSNfFJXg7IcMaaXmZXzHnSfUKsqThQ
xTc93cTHb2Ra9ZQLwMBK5esMzJrOnsjASJsCAwEAAaOCAj8wggI7MB0GA1UdDgQW
BBSxcqkJ99QPEbfFH01mTLi9GGTTlDAfBgNVHSMEGDAWgBRxkcufTEItOz1nU3Gx
io2t2uh5jTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy9jWkhMbjB4Q0xUczlaMU54c1lxTnJkcm9lWTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9jWkhMbjB4Q0xUczlaMU54c1lxTnJk
cm9lWTAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTkzNy9jWkhMbjB4Q0xUczlaMU54c1lxTnJkcm9lWTAubWZ0
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEANq18JS6/7wSLKNDlKQtVHGEDgmxeoaCb9t1/XPUkYy+l/083sxUEF7mj
sssISWv9v2cxN9fxmYzLtjVHKgWZTrMTW+LQUrWMeWMA+gre2uQZBFHrOsXCLitJ
/WozcmxLPREQlrCkseWROAytwmqxO0B78EkhQwtomGN46XyXYwLbIKpWrTrrO/aF
mmYZ9nOC6hRMBMU447Q1b173ZsnA/NVLLjJliBepnMDwl9+UlTiXSlKthhbYvDcM
TXGUbb8M6v6g4LRHzLjRX3ylM5AeToajSeJV3oWzw8LB+rn0u5+5Vo/HngocuWDC
MDtuYHCmVXIcal0l1MpE+3RSN44AgA==
-----END CERTIFICATE-----
Generated at Thu Dec 18 09:34:53 2025 by rpki-client