This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.mft
File: -MAwVpHQKoXanVqhF6diWb1m9ZY.mft (raw, json)
Hash identifier: bkSqHZbNNPw/l6p9CZOYYZkB0LPUIydOZZxTxIm9SNM=
Subject key identifier: 7A:AC:AF:B1:43:B5:46:90:5E:E3:4D:FB:0F:79:10:5D:E3:85:12:DC
Authority key identifier: F8:C0:30:56:91:D0:2A:85:DA:9D:5A:A1:17:A7:62:59:BD:66:F5:96
Certificate issuer: /CN=F8C0305691D02A85DA9D5AA117A76259BD66F596
Certificate serial: 1F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-MAwVpHQKoXanVqhF6diWb1m9ZY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.mft
Manifest number: 0992
Signing time: Tue 16 Dec 2025 22:16:47 +0000
Manifest this update: Tue 16 Dec 2025 22:16:47 +0000
Manifest next update: Wed 31 Dec 2025 22:16:47 +0000
Files and hashes: 1: -MAwVpHQKoXanVqhF6diWb1m9ZY.crl (hash: W4sf8BAPHT3YepXQhPNCJoFcNe088VXMoY0jyy5P9QM=)
2: TtfkZ1o3oFpgfvD-9e9kGrkb1ZE.roa (hash: 7u6EImkYD0NWhtvCO7WPt9yJhW9RxujXkTC7tvg9ETQ=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-MAwVpHQKoXanVqhF6diWb1m9ZY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 23:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8C0305691D02A85DA9D5AA117A76259BD66F596
Validity
Not Before: Dec 15 01:38:00 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=7AACAFB143B546905EE34DFB0F79105DE38512DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:a6:93:22:96:c4:4c:a6:ba:e6:05:71:36:
92:4c:df:9c:6a:7c:e6:0d:f8:70:93:27:78:7f:69:
f7:97:a2:4b:a5:a8:af:65:50:03:bc:73:d7:7e:e4:
c8:71:50:76:0d:c5:af:c0:f5:82:7f:63:8a:90:bb:
9f:49:e7:08:44:e8:77:b3:e6:9e:f5:a1:df:18:61:
43:d1:36:0e:cf:ce:3e:55:03:05:ee:22:c6:f4:24:
6c:b2:d9:94:11:35:f7:89:89:00:9d:86:94:5d:8c:
f1:a6:67:00:44:f6:8e:48:14:d0:65:d0:c5:91:68:
5a:1a:d3:f6:35:e9:18:56:88:e7:3c:c6:f4:b6:7e:
43:e7:8f:26:f7:c8:2c:93:ab:aa:37:93:67:f1:fd:
e7:52:09:96:7d:60:8e:25:85:fe:d7:c8:be:9c:cd:
4a:39:cc:83:74:01:8e:b5:74:78:36:be:d2:02:71:
e4:2f:88:ca:9f:f8:bb:11:65:07:c8:10:51:cc:ff:
f7:d6:c9:97:58:4b:6d:dd:b5:5c:87:85:1d:ca:25:
01:32:88:7c:e6:e7:2e:25:59:af:be:18:85:85:f5:
00:3c:b6:20:c0:26:b2:97:1a:9e:34:ce:1f:53:86:
17:e7:a1:bc:7e:48:9c:30:8d:b8:56:75:f4:1c:1b:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AC:AF:B1:43:B5:46:90:5E:E3:4D:FB:0F:79:10:5D:E3:85:12:DC
X509v3 Authority Key Identifier:
keyid:F8:C0:30:56:91:D0:2A:85:DA:9D:5A:A1:17:A7:62:59:BD:66:F5:96
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-MAwVpHQKoXanVqhF6diWb1m9ZY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:fa:1d:1f:76:33:24:45:0b:65:0b:ac:62:d0:d1:23:c7:ee:
cc:cb:9a:19:3c:f3:2f:28:fb:5c:7b:6c:9b:bc:fd:be:9d:85:
fe:12:b4:b0:a5:e4:a4:73:86:5e:86:3e:cb:01:1c:71:0c:c9:
40:54:7c:17:1e:d5:88:0e:dd:8d:38:0c:6b:54:f8:e6:73:4b:
6b:de:97:37:43:df:a3:0a:7d:51:e3:8a:a7:35:0e:90:d5:3c:
90:7b:84:78:8b:81:a0:04:33:b0:63:72:b2:4d:74:b1:4a:ee:
a4:dd:3a:06:b3:b6:53:f1:fe:ac:48:35:fb:03:50:d0:1f:60:
59:3e:18:bb:f1:b2:9d:d0:35:b2:4f:5b:78:7a:ac:3f:85:25:
41:45:eb:38:07:26:47:9c:8d:49:cb:d2:6c:c5:40:34:f4:ad:
58:12:4e:0a:c8:4e:1b:52:7f:39:c8:1e:8a:bf:fa:ec:b9:5c:
f9:89:46:f2:6c:e7:59:10:26:4f:52:24:2b:a2:eb:8b:c2:84:
d3:39:c5:f6:0e:97:18:a5:70:9f:d1:97:99:88:89:db:a0:99:
2a:be:98:9c:6d:5a:cb:11:c9:ee:cf:f8:cd:06:96:fe:e5:3c:
81:db:cd:e8:bf:04:90:32:23:35:c0:43:f5:a2:95:cc:80:a2:
da:6b:f6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 01:25:25 2025 by rpki-client