This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
File: 0A4IOTaIsEc3h07NY92L545e8tA.mft (raw, json)
Hash identifier: b9HyoD8fZVGd7MO/ul1wpGUgAmA9mDP67R/A2l9PXi4=
Subject key identifier: 58:DF:50:79:4E:5E:F2:88:51:8A:8A:0B:BE:50:55:80:C5:C2:6A:64
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial: 60
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
Manifest number: 09C1
Signing time: Sat 22 Nov 2025 19:08:11 +0000
Manifest this update: Sat 22 Nov 2025 19:08:11 +0000
Manifest next update: Sun 07 Dec 2025 19:08:11 +0000
Files and hashes: 1: 0A4IOTaIsEc3h07NY92L545e8tA.crl (hash: 4qnmg/7Rcd+EKHvrVSeYhxTwM3UApjrRAgZaVKhWv9M=)
2: 0UF8pCfz8igeBzunjJD1CWRBreU.roa (hash: EhgMdNhSOUqSa70qoP2qtDxBNZj10YkhdimoZ31tMQk=)
3: 6QhFC-MJOGXJJNywAR6VT0GyFog.roa (hash: EV1C2Sclj1Hc7HwnBXTFq9NZey6B8rM/FQktXKhxop8=)
4: LQR-WaxdQNg3kHwIbs0SRQd1qxs.roa (hash: A5Y2ercycOCD04LrzpYnvmJ3BtlZZu+Wqe9CtD6Ah1I=)
5: vW4AiSp-x0IHB_hS_GrLKNx8NYk.roa (hash: vzy9Awjvy2iS8Vo6h+M+/wFce4emA/j1Z31XXVeysyY=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Validity
Not Before: Nov 15 01:33:28 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=58DF50794E5EF288518A8A0BBE505580C5C26A64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:36:28:8e:db:78:af:3b:4b:19:65:cd:b4:
7a:bd:8f:06:4c:d7:8f:dc:6a:32:67:79:f2:2e:3e:
a2:da:d0:84:bf:fe:c0:c9:58:c8:1a:8b:fe:0e:91:
85:8e:69:60:39:7e:27:6c:f6:7e:ad:a2:83:fd:81:
ab:d9:22:54:b6:44:0d:ff:be:12:53:a3:f2:e2:f3:
b5:bf:a8:30:c8:eb:e1:ea:19:74:aa:f3:6d:52:9e:
ed:b4:07:94:d5:91:19:86:b6:84:e9:2a:5e:41:23:
63:f5:82:40:70:1a:0d:f5:77:92:e9:4e:6a:0e:4c:
cf:8a:55:80:88:c8:83:7d:f0:a2:6f:80:25:de:f1:
7d:2e:b9:5e:4f:19:17:48:b3:d5:73:06:f0:95:82:
5d:3c:f5:b9:a2:f8:6d:c6:3f:4a:e5:ee:73:d9:6d:
a0:53:3f:c7:63:59:f8:df:53:54:9a:a8:f2:13:21:
03:da:2c:d2:b4:0a:44:38:b4:64:f2:21:74:ff:db:
b2:07:01:87:07:35:8b:3a:37:51:45:df:d1:d2:88:
21:35:81:c5:25:51:d0:b5:3e:5b:8b:ec:03:42:a6:
b9:92:e0:84:f7:b1:b9:fc:ba:70:63:69:89:95:9f:
73:b3:60:01:87:aa:a7:e6:72:6e:fa:18:ca:83:ff:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DF:50:79:4E:5E:F2:88:51:8A:8A:0B:BE:50:55:80:C5:C2:6A:64
X509v3 Authority Key Identifier:
keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:8c:93:96:7e:4d:2e:33:23:28:b6:04:b2:80:5d:cd:a9:64:
cd:02:9f:e5:2a:46:40:d3:94:e8:a3:53:e7:57:51:a5:5c:3e:
c6:9d:9a:1d:63:84:fc:86:2a:74:dc:a8:41:8c:35:84:0a:c5:
89:f9:5b:17:78:c5:d1:ef:16:3a:c6:f3:b4:26:de:6e:a0:1c:
06:0e:e4:d5:41:bd:d0:e1:29:fa:c5:d9:13:82:67:4c:1b:dc:
e7:ad:6a:f0:99:09:ec:39:1b:9d:8e:dc:43:ca:1d:a3:f0:c1:
c6:cc:85:53:24:32:65:77:ae:a0:87:41:34:79:df:d6:a6:2a:
4d:dd:8a:36:d2:1d:f3:19:82:69:ce:77:74:01:2b:de:8b:73:
f9:a6:68:df:51:c0:62:7a:31:59:8f:60:23:a3:97:20:d3:48:
86:3e:51:72:f1:e5:d4:8d:e4:6e:bb:c4:26:27:51:f4:e2:91:
6e:46:60:8f:d2:1e:ab:26:d1:a8:63:a8:83:d8:c8:3d:07:1b:
b2:43:9d:54:ce:f6:a5:ee:3d:ae:c8:ab:27:c4:8b:e5:4b:33:
82:8d:fd:e0:30:74:58:6d:1d:f1:cd:3e:2a:33:86:de:c7:bb:
f9:3d:fe:9f:1c:da:3c:75:3b:38:3f:0b:be:0d:5a:06:08:20:
bb:47:6c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:16:39 2025 by rpki-client