This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft
File: 8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft (raw, json)
Hash identifier: lcRaYE0xL4RPgWMEDfKZm1n7kpHHeW1W7MMr3ZEWmN8=
Subject key identifier: 0E:CE:2C:66:F6:5D:89:66:AC:5A:F5:2E:C1:B3:27:69:79:63:18:24
Authority key identifier: F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF
Certificate issuer: /CN=F1627C3C233E79637AC9DC035CDF50B789FC67AF
Certificate serial: 36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft
Manifest number: 096A
Signing time: Sat 22 Nov 2025 18:49:42 +0000
Manifest this update: Sat 22 Nov 2025 18:49:42 +0000
Manifest next update: Sun 07 Dec 2025 18:49:42 +0000
Files and hashes: 1: 8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.crl (hash: o0r+LZmqZfgcM9zUoT4xniEoM8jrhf/MwJYEMWCPniA=)
2: 9fbAmqRsNqcbJgwuvmR9ep4sdY0.roa (hash: nMqj2SfatBep+6/uc/hHfwQTQCdiCrPV4TV/nzGfzRY=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1627C3C233E79637AC9DC035CDF50B789FC67AF
Validity
Not Before: Nov 15 01:35:01 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=0ECE2C66F65D8966AC5AF52EC1B3276979631824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:a7:00:28:95:8f:04:62:85:95:60:38:d9:
97:35:72:1b:cb:79:59:f3:15:92:d4:c4:cf:8d:48:
2c:eb:be:7b:4f:7a:9e:ed:14:39:9d:3d:21:a5:75:
cb:c4:28:27:06:9f:66:ed:20:57:a0:61:27:97:e0:
34:d2:56:f6:fb:db:10:36:46:1d:ba:a3:43:19:3a:
4d:77:8b:69:38:b0:73:8b:95:a1:08:8c:11:68:48:
e7:f4:58:9a:05:3b:55:f7:86:be:05:fb:0e:69:b7:
36:26:1f:5b:5e:88:17:e9:1e:87:76:50:20:48:3a:
d1:e2:56:72:00:c1:da:e2:1b:95:f4:1f:e7:cd:3d:
78:ff:e0:ae:48:5d:92:91:3c:41:24:1c:99:ee:ce:
76:96:85:c2:39:eb:6b:74:21:75:c6:84:1a:4e:6a:
5d:36:e2:7b:c0:c4:64:db:f9:cc:19:34:97:44:c4:
12:92:69:c7:62:29:ca:6b:6d:5f:dd:20:3d:f9:99:
28:c2:4e:c7:d5:61:ee:07:47:db:df:3b:05:0c:4d:
5f:5b:d0:09:9a:48:dd:f8:3e:22:15:c8:d0:18:08:
20:42:54:1f:b2:c5:31:17:3c:1b:7b:16:ef:72:23:
9b:a8:f4:47:1c:0d:aa:42:56:1d:c5:68:f0:85:0e:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CE:2C:66:F6:5D:89:66:AC:5A:F5:2E:C1:B3:27:69:79:63:18:24
X509v3 Authority Key Identifier:
keyid:F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:55:07:f0:72:c6:3a:ca:69:1a:7e:1e:7a:9a:f5:90:b0:21:
b4:22:f6:f0:19:f0:d5:0a:e7:49:88:70:6d:9c:ce:d4:84:04:
24:2d:aa:73:e0:6e:7c:47:67:d8:bf:fe:ab:c6:da:aa:25:fc:
69:db:b8:3f:1c:1a:28:2d:c1:62:f1:19:38:26:02:4f:91:10:
b0:d9:92:40:89:3e:8b:fa:2a:30:96:8f:08:80:88:4e:5f:90:
c6:a6:95:af:f6:24:f8:27:ca:a7:ba:fb:c9:07:a9:0b:b0:ab:
d1:f8:9f:bc:08:61:a8:c9:6d:11:af:af:00:6f:90:7e:4e:d3:
f7:9e:ca:f8:82:fe:19:49:c6:13:c4:be:d0:3d:d7:91:43:3c:
b0:1a:22:39:4c:8f:72:63:6e:8e:f4:fc:b9:4e:80:7d:01:14:
7d:52:a3:0d:74:9c:7a:68:fd:56:e7:51:f9:45:33:76:1a:9f:
2b:d3:91:8e:68:4d:a0:ad:82:f2:e2:ab:37:ad:25:1c:e2:a7:
2f:fa:54:09:79:a6:f5:d0:49:d5:35:6e:38:2a:dd:4c:39:e1:
a9:b2:37:e4:ca:cd:b4:7b:ca:96:70:2e:ee:14:0b:cd:c5:d5:
34:31:56:cf:f2:24:2b:19:dc:80:33:13:ea:99:3b:37:1a:39:
cd:08:98:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:30 2025 by rpki-client