This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft
File: YYky9kHWUNyGDXQRrIrrbDXInQQ.mft (raw, json)
Hash identifier: MO5BmiIIbHmSWak1xkd3sRTyVrh1bKvH/qsxk3dnQ4o=
Subject key identifier: 1B:A9:38:8E:36:54:C7:35:F2:70:8E:C6:9C:42:54:BC:5B:00:D0:C8
Authority key identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04
Certificate issuer: /CN=618932F641D650DC860D7411AC8AEB6C35C89D04
Certificate serial: 20
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft
Manifest number: 0904
Signing time: Sat 22 Nov 2025 20:08:43 +0000
Manifest this update: Sat 22 Nov 2025 20:08:43 +0000
Manifest next update: Sun 07 Dec 2025 20:08:43 +0000
Files and hashes: 1: FwD4cJTjdy7P2dMu8O_JSXgejiI.roa (hash: KhFOOPPO1IA4xLTxxzsL4K2DkHbTQHXejo9ZOpoN4lo=)
2: YYky9kHWUNyGDXQRrIrrbDXInQQ.crl (hash: 1zBSkCNRhBUQJdYlVi87ArD5ssZn+yUE5vrj2xSBRGg=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618932F641D650DC860D7411AC8AEB6C35C89D04
Validity
Not Before: Nov 15 01:42:11 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=1BA9388E3654C735F2708EC69C4254BC5B00D0C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:be:32:d8:29:13:8a:10:dd:a1:9e:38:dc:
d3:7d:4e:c9:2a:30:a2:c0:ea:49:9f:71:85:ee:bd:
d2:f0:aa:27:8c:83:79:b1:0d:9a:cd:7d:a2:ba:5f:
31:b9:e9:12:e4:8c:6f:14:b0:cd:76:91:a5:f9:fc:
7e:bc:da:85:46:44:ae:e3:80:be:c6:a6:66:29:19:
98:41:ae:49:52:6d:2c:60:08:3d:5a:0c:38:a3:96:
03:9c:1d:6d:2f:f8:68:6b:99:ee:a1:3f:ed:bc:f3:
5a:5c:fd:1a:75:b3:7e:9b:ee:f5:fb:db:5f:97:70:
1a:96:fc:7d:b7:ad:d2:9b:e1:0b:82:10:cf:1e:b8:
96:28:6c:fc:ce:93:75:fa:ba:b6:d2:9b:b4:dc:c5:
0e:4c:db:fb:2e:49:19:c3:82:87:01:ae:4d:0b:58:
27:55:bb:26:9a:55:2c:fc:9f:68:28:22:97:36:c3:
1d:b2:12:37:f5:59:24:28:d7:a2:3d:54:58:cd:16:
58:df:85:83:13:52:0a:9e:c1:be:20:51:f1:50:6a:
bf:88:42:4f:c4:be:b3:94:40:96:6b:a0:64:e4:e5:
91:cf:ad:67:5c:3e:5c:37:4c:98:61:1e:fe:22:6d:
a8:b2:fc:14:36:b2:3e:d2:38:c6:8a:be:be:92:13:
b7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A9:38:8E:36:54:C7:35:F2:70:8E:C6:9C:42:54:BC:5B:00:D0:C8
X509v3 Authority Key Identifier:
keyid:61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:b0:f5:43:f6:06:cd:86:83:04:43:f5:c4:b1:ba:2a:75:4e:
36:d0:1c:02:92:dd:b2:95:57:ee:cf:21:7b:99:77:10:ed:52:
b6:e2:ec:25:c7:76:23:bc:62:c9:00:2a:98:1e:ec:c1:2b:f8:
b3:99:d1:ec:6b:c6:e5:f1:d0:fc:b5:f4:b9:ba:02:a2:73:21:
43:27:73:b0:29:33:35:da:d7:f1:51:d6:5d:3b:47:7a:1f:fe:
29:b1:6f:e3:ee:ec:43:05:69:9e:9e:85:e3:14:8a:77:f1:4a:
61:0b:3f:df:72:ad:81:db:78:e8:8a:58:e6:6e:43:d1:6f:33:
0d:64:f0:5f:2c:87:14:56:3a:ad:05:5d:47:2b:da:24:8f:cb:
ea:9f:1e:59:9f:9f:17:31:ac:1f:b3:36:98:11:e3:b3:16:cb:
94:86:02:3d:b3:3e:7e:3a:9a:c0:f1:64:1b:a4:09:6d:75:69:
5f:8d:08:7d:4d:62:a6:37:2c:6e:c5:90:3b:05:35:2c:53:f8:
6c:b1:0c:4c:bd:59:8a:7e:cc:be:ae:a2:24:2f:19:af:08:7b:
c8:e1:63:0a:b8:7d:6d:85:64:fb:72:90:98:4a:19:29:e6:a5:
04:72:e3:cb:06:4b:ca:c0:f0:16:ef:2f:4f:e9:68:5a:69:f1:
e1:a2:0c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:28 2025 by rpki-client