This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.mft
File: P1xSJCKPmDVrLOk5xuoGASJR-jo.mft (raw, json)
Hash identifier: tSeBNlWTGVxTuCyL2q7uJWCObYA1/xeYsnO3NTbyC/I=
Subject key identifier: 52:74:94:45:76:3C:7A:2D:16:93:64:56:74:1E:9B:73:2F:D6:F2:07
Authority key identifier: 3F:5C:52:24:22:8F:98:35:6B:2C:E9:39:C6:EA:06:01:22:51:FA:3A
Certificate issuer: /CN=3F5C5224228F98356B2CE939C6EA06012251FA3A
Certificate serial: 14
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P1xSJCKPmDVrLOk5xuoGASJR-jo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.mft
Manifest number: 086A
Signing time: Sat 22 Nov 2025 19:38:58 +0000
Manifest this update: Sat 22 Nov 2025 19:38:58 +0000
Manifest next update: Sun 07 Dec 2025 19:38:58 +0000
Files and hashes: 1: IASEGTl_7bqXE0l1oK3IEWDA7p0.roa (hash: pJuoPq8Z3ECFpyRx6K+h4g60cNjfgnjg6OmWmlLH+jk=)
2: P1xSJCKPmDVrLOk5xuoGASJR-jo.crl (hash: Ena2wf8msOqfGxX54uBtn1EK8JXIM0nBEiQER5k7DAs=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P1xSJCKPmDVrLOk5xuoGASJR-jo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F5C5224228F98356B2CE939C6EA06012251FA3A
Validity
Not Before: Nov 15 01:43:00 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=52749445763C7A2D16936456741E9B732FD6F207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:aa:df:14:8e:24:43:6f:d9:6a:b6:36:22:
a1:d7:15:76:ac:4e:d6:07:e7:7d:97:4c:ad:e4:1c:
a1:62:70:ff:65:f2:8c:8d:48:45:b2:c6:30:90:ba:
f9:47:01:7a:c1:c5:b0:8f:0b:61:ed:1d:39:22:19:
06:0f:15:bf:9b:9a:bf:b2:22:a5:f9:a7:67:e2:4e:
7b:5f:da:2e:47:38:a2:e3:ce:dc:de:23:50:ef:d9:
86:45:67:22:af:14:b9:9a:a0:a1:2c:88:73:a1:42:
17:01:86:fc:5c:78:62:12:7c:e3:7f:28:dc:35:36:
88:a5:7e:c2:5b:d1:b7:57:b7:c5:b1:bb:fe:d6:3b:
8a:29:fc:2f:c9:7b:25:98:d6:c1:50:1e:a2:92:31:
7e:66:a4:dc:b8:04:65:82:90:de:95:96:67:56:ca:
9c:3e:c3:55:d0:11:30:5a:fb:7e:55:70:56:20:ba:
f1:d6:e9:f0:17:2f:94:23:2e:a4:26:f8:03:3d:b9:
08:b9:c8:af:f6:e8:6a:6a:c1:f4:02:1b:53:df:07:
c2:74:aa:74:0e:b6:44:1e:ad:84:40:23:60:08:d5:
89:53:c8:cc:f4:b2:08:c6:c7:0a:3d:9b:e1:0e:31:
a5:b4:f5:ce:4c:af:31:12:c8:e0:67:24:e8:18:c8:
1a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:74:94:45:76:3C:7A:2D:16:93:64:56:74:1E:9B:73:2F:D6:F2:07
X509v3 Authority Key Identifier:
keyid:3F:5C:52:24:22:8F:98:35:6B:2C:E9:39:C6:EA:06:01:22:51:FA:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P1xSJCKPmDVrLOk5xuoGASJR-jo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b1:6e:d5:76:19:0f:57:e4:57:5a:a6:7e:74:ff:b6:c4:e3:
96:b1:eb:37:6d:e9:f4:3d:37:ce:5d:d0:12:4d:2e:0d:40:0d:
7a:7d:9c:64:2d:cd:dc:d1:d0:0b:39:65:36:56:07:d6:fa:53:
ee:ce:63:ef:5b:a9:d8:dc:74:f1:86:8a:de:fd:35:a9:f3:0e:
3c:5c:13:1a:0b:ac:43:62:23:80:37:01:2d:39:81:80:2a:d4:
b6:25:78:fe:8d:62:c5:6d:1f:e8:00:49:53:67:cd:56:a5:82:
c4:13:0b:95:63:23:5e:9d:be:f4:40:3e:00:56:fd:a3:e9:e2:
00:e9:94:61:ef:cb:51:84:10:8b:0a:d4:c3:c3:d8:e5:ea:11:
8c:4d:f0:c7:92:df:16:dd:b0:10:cd:7c:d1:5f:de:b8:57:ae:
12:75:5e:a0:b4:40:3f:62:cb:1d:9b:8e:cc:0d:7e:d0:07:60:
b7:07:2a:31:93:61:55:f4:a2:0a:2f:82:57:18:0f:17:70:7f:
cc:57:38:f7:d6:95:b3:12:37:8d:82:31:97:39:56:6c:30:1a:
58:60:a3:f0:c0:c1:df:68:ce:4a:ed:f7:2a:2e:18:85:2c:24:
49:d0:e6:42:5e:19:6b:3e:ec:d1:e9:9e:97:30:da:36:f3:9f:
bc:bc:30:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:12 2025 by rpki-client