This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20189/5FQ6M2bODWpdpN1GMH0pk92gJrQ.mft
File: 5FQ6M2bODWpdpN1GMH0pk92gJrQ.mft (raw, json)
Hash identifier: EjLR1wkXIfkKlXgC6BfiwQz033jQQehyGTDG5+tStRE=
Subject key identifier: DA:DA:AA:BC:C3:A4:76:55:F3:AE:5E:27:B9:E8:B8:AD:12:5C:E1:F6
Authority key identifier: E4:54:3A:33:66:CE:0D:6A:5D:A4:DD:46:30:7D:29:93:DD:A0:26:B4
Certificate issuer: /CN=E4543A3366CE0D6A5DA4DD46307D2993DDA026B4
Certificate serial: 37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5FQ6M2bODWpdpN1GMH0pk92gJrQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/5FQ6M2bODWpdpN1GMH0pk92gJrQ.mft
Manifest number: 0968
Signing time: Sat 22 Nov 2025 18:41:46 +0000
Manifest this update: Sat 22 Nov 2025 18:41:46 +0000
Manifest next update: Sun 07 Dec 2025 18:41:46 +0000
Files and hashes: 1: 0TLJKLiXrp0GStF5Da3g8lRmCLc.roa (hash: xvgCT08+5V0NJXXQWTdi0h/QPLLuBvyYLfjld+oiXTY=)
2: 5FQ6M2bODWpdpN1GMH0pk92gJrQ.crl (hash: m0YWJU3vvyL8IoVyN/fWoZyfTj0b0nCB1ZzbFNig4KM=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/5FQ6M2bODWpdpN1GMH0pk92gJrQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/5FQ6M2bODWpdpN1GMH0pk92gJrQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5FQ6M2bODWpdpN1GMH0pk92gJrQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4543A3366CE0D6A5DA4DD46307D2993DDA026B4
Validity
Not Before: Nov 15 01:35:13 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=DADAAABCC3A47655F3AE5E27B9E8B8AD125CE1F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:31:89:ff:c0:dc:d3:5e:d8:88:2c:fc:8d:
4c:e7:67:e1:b6:79:56:81:4f:e0:ae:77:9a:67:5a:
d7:00:6f:8f:d9:e1:3a:07:17:32:f7:93:b8:84:d3:
c2:47:1d:06:4d:30:a4:d5:7d:7f:65:a6:15:3d:05:
b7:ab:51:51:53:f9:11:a3:e1:21:bf:82:61:39:91:
d8:60:4d:b1:7e:88:e5:c0:d7:39:49:fd:65:ca:97:
4f:55:8d:18:c5:e6:f5:91:56:ee:79:df:c8:96:67:
92:5f:16:d1:b3:d6:5d:a7:93:5f:21:4e:f6:53:e1:
7b:ed:89:28:32:9b:cc:49:30:db:f8:b6:1f:b1:4d:
e7:4a:7c:dd:16:bd:03:73:9b:09:d3:84:01:95:72:
73:40:9b:48:83:35:1f:9a:df:48:a6:78:de:4d:cc:
eb:f7:1b:ed:0d:3d:88:0c:ff:93:ed:a9:a9:4a:6d:
e0:b3:cc:fd:48:78:f9:36:0a:01:41:f4:8c:d7:91:
5f:c7:89:90:3c:36:5f:14:e2:3f:4e:ef:ce:0c:fe:
54:87:e4:4d:d9:bc:ed:5d:fa:18:33:9c:3d:38:a9:
15:a0:53:70:1c:5e:ad:ce:97:5c:f8:69:2d:46:7b:
a4:08:3e:0a:ac:47:0a:13:39:6b:f9:71:cd:8c:ba:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DA:AA:BC:C3:A4:76:55:F3:AE:5E:27:B9:E8:B8:AD:12:5C:E1:F6
X509v3 Authority Key Identifier:
keyid:E4:54:3A:33:66:CE:0D:6A:5D:A4:DD:46:30:7D:29:93:DD:A0:26:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/5FQ6M2bODWpdpN1GMH0pk92gJrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5FQ6M2bODWpdpN1GMH0pk92gJrQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/5FQ6M2bODWpdpN1GMH0pk92gJrQ.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fa:17:e6:30:ff:43:45:d1:55:7d:86:e7:83:bb:cc:0b:c3:
98:7d:f9:7d:4d:97:44:13:fe:12:0c:d0:04:a2:8b:4d:13:6f:
bc:1c:31:0c:b4:4c:e0:19:50:cb:88:86:0b:f3:28:50:22:9f:
01:b0:4e:1e:48:72:46:49:b6:9a:5d:4a:9d:01:14:30:0e:b1:
9f:74:a5:d0:22:42:54:83:55:77:f3:ab:a1:71:8a:1a:72:8d:
c4:28:f7:d2:58:46:bc:ed:9b:7f:90:80:af:2c:ca:04:58:91:
87:67:8f:f4:29:43:7f:7a:04:eb:5e:7e:64:2b:6b:64:09:ff:
fc:88:de:0b:52:71:b6:e5:f1:3b:ae:c7:a0:a9:ac:16:9a:45:
d3:ab:7a:bc:09:9f:23:aa:78:94:32:dd:05:a1:ca:bb:76:ac:
81:b3:3b:6d:8b:c8:13:19:29:11:71:68:d4:31:d1:cc:c9:6b:
eb:68:54:8f:90:bb:d8:4c:a5:e9:0a:1f:da:b0:f3:ec:3f:01:
39:7c:e1:ea:f9:d5:93:14:43:ce:19:81:5c:10:3b:08:0c:ba:
be:64:da:a1:59:9a:f2:bd:8e:70:d3:34:bd:21:ec:62:6f:6f:
53:b7:77:d5:77:e4:5f:8a:8d:9c:6e:7c:a6:fa:39:ca:54:83:
e7:e7:27:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:11 2025 by rpki-client