This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
File: 14hnjmTSkYTCPaqttZS_2briQFw.mft (raw, json)
Hash identifier: TIpJ/u0Y2eEr4ogoVXBeBGcV9KEo4feRX87RKL7kyxI=
Subject key identifier: CF:B8:7D:00:EA:33:E1:6E:8E:BE:6A:3E:31:9D:6F:E6:E8:AE:7E:A3
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Certificate issuer: /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial: 63
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
Manifest number: 09C3
Signing time: Sat 22 Nov 2025 19:08:09 +0000
Manifest this update: Sat 22 Nov 2025 19:08:09 +0000
Manifest next update: Sun 07 Dec 2025 19:08:09 +0000
Files and hashes: 1: -WiIDUooj0SAP5Oz-sIPCqSy7rc.roa (hash: exNfWt0z0ReAWbn8Fj4HXeEC8QI06FTKt1V+ODV5oAk=)
2: 14hnjmTSkYTCPaqttZS_2briQFw.crl (hash: R+JWWBdVprfNBU9EwVbd1RtHOsQy11aUSblfwmgtBkk=)
3: Bc3IiLWVZeJxtrUVvYzlOY62IbI.roa (hash: CNVH9cCSUACHIRyYbB/Wqx1t2yFpGmhxQzLM7PTC88o=)
4: C3DvnLBgTo8D1v6qDlZHJ_tmJtA.roa (hash: Pwk8U4lx66bD78yXfN9zimuSBoaAvFA2vACM8dUvaEg=)
5: DWN3INbymKSvsZirmb2m6sSXbCk.roa (hash: TIKKV7juqXC344xsvXs4QpmI8g8taGEVagkX2wzHNv4=)
6: JRAFyum16jaqohEf-uzBFi6uu94.roa (hash: cHhioEBbU6ncJKByzk1yUz40gwC9wxtGNUT1Z3doIME=)
7: K5-_vD7XneI3QPWVpaQZmmNeK60.roa (hash: 7nuCnXSEyo+zdMewK3d1HDsiZP3rF/yG8x5gH00yKVc=)
8: OYAu2jiKFC-0iMWMTI5X0xo0XqA.roa (hash: PqDdx22iI7MQ3inhTvj+Z2VmoCE+ouPrlS+DhkhKjJA=)
9: xDwesYop68qPlqymFKn-kMhYBPE.roa (hash: /fYNRkxtVF/J9E0kot/nUVJqR1CVGNgc3HuadQUymwU=)
10: ylAiaw9Rhk5kFtWHcfYiBKBY_Lw.roa (hash: kDpYrWAn/Sogudixnu2WVIHNnRIrMNuMvpyhGMWeV30=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Validity
Not Before: Nov 15 01:33:25 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=CFB87D00EA33E16E8EBE6A3E319D6FE6E8AE7EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:97:c6:72:75:ac:6d:57:ca:f2:6a:9a:85:
ed:79:c6:07:06:98:6b:a5:69:83:60:a1:ac:78:25:
74:52:65:31:a4:2f:6b:62:a0:d3:9c:f0:2d:37:6f:
a6:05:a3:dd:b1:cf:62:31:a5:41:39:21:99:33:45:
59:51:6a:b9:05:fd:f5:f9:de:7f:2f:4b:6f:37:1f:
d1:df:8f:a5:09:b8:d7:48:25:66:24:f9:74:2f:20:
92:dc:1c:da:f1:bb:ab:b4:93:f5:c0:5b:1d:a6:7b:
58:43:31:fe:35:9c:f2:59:62:10:ea:5d:53:81:9a:
e3:ce:ab:c8:90:f6:74:ed:3d:f8:fe:e1:c4:d6:b9:
2a:a7:28:10:de:16:b3:d4:d0:89:ea:c5:db:4f:e0:
26:ee:ba:dd:8f:45:e9:6d:96:b5:04:9a:cd:b5:8f:
4a:af:1b:97:4e:74:81:91:34:aa:5a:80:73:9e:e3:
1c:c4:66:2b:b9:3f:79:6b:32:3d:06:df:1d:bd:8e:
84:87:6a:85:23:3c:f3:eb:10:b9:1d:e1:56:b2:19:
4f:08:3a:ab:f4:21:f5:a3:94:fe:b6:ef:f9:01:1f:
f6:d6:73:ab:e6:ad:3f:e1:dd:3b:cb:f4:5e:d1:29:
8f:88:a4:34:98:3b:49:55:1e:cf:d3:8e:37:ce:6d:
d6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B8:7D:00:EA:33:E1:6E:8E:BE:6A:3E:31:9D:6F:E6:E8:AE:7E:A3
X509v3 Authority Key Identifier:
keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:33:64:b9:c8:57:3c:16:25:ea:11:17:54:24:3c:38:6b:ef:
e3:0b:61:a7:9f:85:d6:39:86:20:9a:e9:d3:c3:20:44:ce:88:
50:67:ac:61:a0:c3:56:28:9e:fc:91:90:09:e0:96:22:58:79:
a1:e9:1e:26:4d:66:c8:c2:71:a8:78:9d:73:d2:b3:53:6e:f4:
fa:0c:a1:18:a4:81:9f:c2:7a:33:51:b1:74:67:75:fb:6b:63:
d5:02:c4:d1:b0:b3:d3:d0:f8:4f:5c:eb:f8:11:33:78:3d:82:
26:67:c8:d5:e5:3c:86:4b:39:44:dd:43:98:c1:96:90:10:f0:
45:19:35:62:23:29:cc:e5:9e:cd:c5:f1:1a:f0:b9:95:50:ae:
a6:cc:6c:9b:d2:70:d1:40:3e:f3:26:98:c7:1f:43:d3:1e:84:
0a:90:d0:45:da:91:42:9b:c2:21:d6:cc:57:00:92:de:60:ec:
19:26:c3:67:0c:7e:6b:5f:67:3d:cf:ee:10:33:73:35:a2:cb:
0e:04:89:3b:51:cc:5b:7e:b2:c5:04:1d:ca:38:7b:0d:d5:9e:
6d:72:44:5c:44:f8:ac:49:cb:98:8b:b7:6a:17:03:5c:0c:e2:
58:7c:24:99:cf:6a:c5:9d:4c:e0:61:c1:99:f3:7c:55:82:58:
62:8d:8f:fc
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzg4
Njc4RTY0RDI5MTg0QzIzREFBQURCNTk0QkZEOUJBRTI0MDVDMB4XDTI1MTExNTAx
MzMyNVoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoQ0ZCODdEMDBFQTMzRTE2
RThFQkU2QTNFMzE5RDZGRTZFOEFFN0VBMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN2Il8ZydaxtV8ryapqF7XnGBwaYa6Vpg2ChrHgldFJlMaQva2Kg
05zwLTdvpgWj3bHPYjGlQTkhmTNFWVFquQX99fnefy9Lbzcf0d+PpQm410glZiT5
dC8gktwc2vG7q7ST9cBbHaZ7WEMx/jWc8lliEOpdU4Ga486ryJD2dO09+P7hxNa5
KqcoEN4Ws9TQierF20/gJu663Y9F6W2WtQSazbWPSq8bl050gZE0qlqAc57jHMRm
K7k/eWsyPQbfHb2OhIdqhSM88+sQuR3hVrIZTwg6q/Qh9aOU/rbv+QEf9tZzq+at
P+HdO8v0XtEpj4ikNJg7SVUez9OON85t1tkCAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBTPuH0A6jPhbo6+aj4xnW/m6K5+ozAfBgNVHSMEGDAWgBTXiGeOZNKRhMI9qq21
lL/ZuuJAXDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjMzLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJyaVFGdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJy
aVFGdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMzMvMTRobmptVFNrWVRDUGFxdHRaU18yYnJpUUZ3Lm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAI8zZLnIVzwWJeoRF1QkPDhr7+MLYaefhdY5hiCa6dPDIETOiFBnrGGgw1Yo
nvyRkAngliJYeaHpHiZNZsjCcah4nXPSs1Nu9PoMoRikgZ/CejNRsXRndftrY9UC
xNGws9PQ+E9c6/gRM3g9giZnyNXlPIZLOUTdQ5jBlpAQ8EUZNWIjKczlns3F8Rrw
uZVQrqbMbJvScNFAPvMmmMcfQ9MehAqQ0EXakUKbwiHWzFcAkt5g7Bkmw2cMfmtf
Zz3P7hAzczWiyw4EiTtRzFt+ssUEHco4ew3Vnm1yRFxE+KxJy5iLt2oXA1wM4lh8
JJnPasWdTOBhwZnzfFWCWGKNj/w=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:14 2025 by rpki-client