This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.mft
File: FobtPeLXM80SdpaTNMjHbyeW8Cs.mft (raw, json)
Hash identifier: Z/+wz5UtCOpR0ClN8fxqdplmVeQ5Q1Aypr/hWkJQjpI=
Subject key identifier: A8:65:D9:BD:EE:6F:5B:88:83:DF:EA:20:F3:1E:7E:9E:07:05:63:06
Authority key identifier: 16:86:ED:3D:E2:D7:33:CD:12:76:96:93:34:C8:C7:6F:27:96:F0:2B
Certificate issuer: /CN=1686ED3DE2D733CD1276969334C8C76F2796F02B
Certificate serial: 21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FobtPeLXM80SdpaTNMjHbyeW8Cs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.mft
Manifest number: 0A22
Signing time: Fri 09 Jan 2026 02:20:17 +0000
Manifest this update: Fri 09 Jan 2026 02:20:17 +0000
Manifest next update: Sat 24 Jan 2026 02:20:17 +0000
Files and hashes: 1: B2jEY2W8gBWSg4AtwrWkgeq2_XE.roa (hash: kdDaXdIEajt440AKH8orDpOnT3qoNCcKRG2F6jMa73s=)
2: FobtPeLXM80SdpaTNMjHbyeW8Cs.crl (hash: a6KeNjN0JJKxA740Mr+uQF/SWMe066OViRXGzmzRMNo=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FobtPeLXM80SdpaTNMjHbyeW8Cs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Jan 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1686ED3DE2D733CD1276969334C8C76F2796F02B
Validity
Not Before: Dec 15 01:42:56 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=A865D9BDEE6F5B8883DFEA20F31E7E9E07056306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:0c:0c:fd:4e:f9:3d:33:0c:21:26:33:ce:
40:10:7c:98:62:1b:f1:d1:02:27:02:c5:1f:fd:1d:
23:b2:d9:9d:f8:e7:0b:fc:51:31:61:82:62:38:08:
51:d2:11:ad:86:5d:3b:27:7d:a5:e4:00:da:c2:9c:
e2:33:04:fb:d5:25:3c:41:55:23:2e:31:8d:3b:c1:
b6:69:82:69:09:7b:2c:99:2d:49:ac:39:99:da:7c:
94:cb:54:5b:a0:37:4d:df:0a:fd:b9:6d:a5:ea:45:
10:67:36:fd:f7:3d:a0:33:b8:9e:3b:ae:32:67:19:
57:b0:3c:59:1e:c9:cc:2d:aa:32:ad:8f:44:4d:c2:
2d:d0:ad:db:c4:98:74:7d:85:7a:0b:9a:a3:bc:12:
68:d2:83:eb:72:de:78:f8:7b:62:d7:fc:a3:37:42:
df:d0:b3:9c:44:65:c7:42:fc:75:49:4a:f0:ca:1b:
80:70:d1:0f:ce:6c:f1:54:b1:91:f7:9d:25:1f:66:
f9:28:9a:95:a0:b1:c7:33:f3:1e:d9:e9:7a:b4:16:
42:ea:ef:ec:5e:71:44:f8:e6:db:0d:88:de:a7:b8:
b7:6c:54:94:c3:ec:83:80:10:5f:a1:22:5a:52:62:
aa:d0:61:3a:71:6d:4b:f7:d2:e5:86:fd:21:47:e6:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:65:D9:BD:EE:6F:5B:88:83:DF:EA:20:F3:1E:7E:9E:07:05:63:06
X509v3 Authority Key Identifier:
keyid:16:86:ED:3D:E2:D7:33:CD:12:76:96:93:34:C8:C7:6F:27:96:F0:2B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FobtPeLXM80SdpaTNMjHbyeW8Cs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:63:e2:26:ee:4a:3f:10:d1:ba:45:32:86:31:65:59:e3:1f:
8a:7f:cc:37:d0:f6:ef:ff:d6:51:a9:16:67:ee:82:44:16:70:
93:06:e0:bb:91:f8:d6:5b:79:2c:e9:77:16:7c:72:50:bf:fc:
85:c7:4c:21:dc:b0:9c:ef:84:62:ae:27:ac:5d:60:ae:09:34:
1e:8d:2a:5e:87:83:5a:cf:c8:b5:9e:0a:9f:44:ae:b4:ca:ac:
20:82:66:7f:b9:ff:80:d0:3b:4c:d8:93:1c:b3:19:b9:6a:62:
68:ac:1a:80:c6:a6:20:cc:ec:60:f0:dd:9d:b6:14:98:5d:d4:
66:ee:26:a7:88:1e:36:c8:79:42:07:0b:95:04:77:e0:f2:78:
5b:71:2a:a9:5a:d4:f4:67:d4:40:75:71:e0:86:92:5d:c7:6f:
79:4e:98:dc:66:6a:2f:22:d5:51:be:a5:b0:38:36:ba:eb:20:
11:a2:fe:e3:13:f3:74:16:54:e4:b9:a1:32:26:db:aa:fb:c7:
8b:be:03:8d:81:88:ea:a7:e4:bd:4c:cc:89:ff:a1:e3:73:5c:
05:49:38:68:96:20:1c:55:25:46:eb:10:0d:10:bc:40:39:6a:
84:3a:3f:fb:de:22:9a:b2:54:1f:f0:59:e8:37:d4:a4:e5:09:
7d:6a:88:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 06:55:52 2026 by rpki-client