This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.mft
File: FobtPeLXM80SdpaTNMjHbyeW8Cs.mft (raw, json)
Hash identifier: zwNDE4Cce5JrjEYeTe93E+DMv0ix/UaSMNIpBcIPp44=
Subject key identifier: A8:65:D9:BD:EE:6F:5B:88:83:DF:EA:20:F3:1E:7E:9E:07:05:63:06
Authority key identifier: 16:86:ED:3D:E2:D7:33:CD:12:76:96:93:34:C8:C7:6F:27:96:F0:2B
Certificate issuer: /CN=1686ED3DE2D733CD1276969334C8C76F2796F02B
Certificate serial: 20
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FobtPeLXM80SdpaTNMjHbyeW8Cs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.mft
Manifest number: 0908
Signing time: Sat 22 Nov 2025 20:04:38 +0000
Manifest this update: Sat 22 Nov 2025 20:04:38 +0000
Manifest next update: Sun 07 Dec 2025 20:04:38 +0000
Files and hashes: 1: B2jEY2W8gBWSg4AtwrWkgeq2_XE.roa (hash: kdDaXdIEajt440AKH8orDpOnT3qoNCcKRG2F6jMa73s=)
2: FobtPeLXM80SdpaTNMjHbyeW8Cs.crl (hash: Chrb0aGjI+7eDqX04whdbbbFV2wPVoos6Ah5SwwufSA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FobtPeLXM80SdpaTNMjHbyeW8Cs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1686ED3DE2D733CD1276969334C8C76F2796F02B
Validity
Not Before: Nov 15 01:36:38 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=A865D9BDEE6F5B8883DFEA20F31E7E9E07056306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:0c:0c:fd:4e:f9:3d:33:0c:21:26:33:ce:
40:10:7c:98:62:1b:f1:d1:02:27:02:c5:1f:fd:1d:
23:b2:d9:9d:f8:e7:0b:fc:51:31:61:82:62:38:08:
51:d2:11:ad:86:5d:3b:27:7d:a5:e4:00:da:c2:9c:
e2:33:04:fb:d5:25:3c:41:55:23:2e:31:8d:3b:c1:
b6:69:82:69:09:7b:2c:99:2d:49:ac:39:99:da:7c:
94:cb:54:5b:a0:37:4d:df:0a:fd:b9:6d:a5:ea:45:
10:67:36:fd:f7:3d:a0:33:b8:9e:3b:ae:32:67:19:
57:b0:3c:59:1e:c9:cc:2d:aa:32:ad:8f:44:4d:c2:
2d:d0:ad:db:c4:98:74:7d:85:7a:0b:9a:a3:bc:12:
68:d2:83:eb:72:de:78:f8:7b:62:d7:fc:a3:37:42:
df:d0:b3:9c:44:65:c7:42:fc:75:49:4a:f0:ca:1b:
80:70:d1:0f:ce:6c:f1:54:b1:91:f7:9d:25:1f:66:
f9:28:9a:95:a0:b1:c7:33:f3:1e:d9:e9:7a:b4:16:
42:ea:ef:ec:5e:71:44:f8:e6:db:0d:88:de:a7:b8:
b7:6c:54:94:c3:ec:83:80:10:5f:a1:22:5a:52:62:
aa:d0:61:3a:71:6d:4b:f7:d2:e5:86:fd:21:47:e6:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:65:D9:BD:EE:6F:5B:88:83:DF:EA:20:F3:1E:7E:9E:07:05:63:06
X509v3 Authority Key Identifier:
keyid:16:86:ED:3D:E2:D7:33:CD:12:76:96:93:34:C8:C7:6F:27:96:F0:2B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FobtPeLXM80SdpaTNMjHbyeW8Cs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9e:51:5d:c5:4b:79:d3:55:98:a1:f4:a0:e2:60:ca:bf:f0:
54:71:de:82:55:1d:7d:a0:2d:01:9d:3f:8e:ed:1a:d8:dc:fd:
8b:ab:78:e4:5e:9a:23:82:0a:2f:b1:e5:a9:26:0c:51:13:0f:
af:aa:37:a6:76:19:57:35:9b:81:47:71:a4:53:91:24:0f:b7:
43:37:40:e8:b2:fc:ed:d4:2c:a4:06:4e:6b:fc:cd:9e:34:2e:
d0:fa:d8:05:be:d8:a2:84:52:d5:a2:fd:3a:e6:9c:22:45:19:
4f:a1:b1:fb:bc:a2:9b:3e:61:89:7f:17:4d:4a:5b:64:a3:91:
96:05:be:5a:36:f5:23:b2:9f:25:87:5d:95:79:c5:ba:61:d2:
30:c6:8e:63:e8:8d:75:38:61:77:b8:fd:b0:32:f7:f8:c6:db:
1f:70:62:ef:1f:78:87:f6:0b:00:0c:3a:21:7c:b9:32:62:98:
e4:83:3f:88:b3:a4:91:0c:fa:a5:4e:54:3b:bf:ff:03:d8:e5:
ad:f1:fc:4f:b7:d1:b8:e4:84:2a:3e:13:8c:9a:18:a0:40:60:
d1:38:ef:ed:4c:1a:f0:53:73:1f:a2:54:44:16:fa:a9:fb:9f:
12:a4:82:62:eb:20:20:98:6d:1b:e1:05:ec:a0:2f:2f:4f:de:
39:7f:88:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:20 2025 by rpki-client