This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
File: Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft (raw, json)
Hash identifier: lph1Iz3gIyOVjvuBaoJOGGwo1ddzHmRf3ZUjKlBZ/to=
Subject key identifier: C7:0D:F9:55:06:1E:0D:64:7C:29:B9:08:FE:0C:7C:C6:29:6B:D0:21
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial: 7F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
Manifest number: 0EFE
Signing time: Sat 22 Nov 2025 19:25:23 +0000
Manifest this update: Sat 22 Nov 2025 19:25:23 +0000
Manifest next update: Sun 07 Dec 2025 19:25:23 +0000
Files and hashes: 1: FWZxeuK4FmAlZTY7bBHKX7fHNSk.roa (hash: wAuMEfzwgKdk2wsu1KsCgzFaEuI7AcSW7gimkQ9T6zc=)
2: Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl (hash: pdmbTaWDSCig3zKf7PvhFSnceYnrKy51DOnotHAP0Nc=)
3: M1IbO4xpGq2PAjECj8RBJGVH6j0.roa (hash: 8mdw/KPbdNY4XVcYT18kmViMN8SJ9W76dfTaB7YlwZE=)
4: Q5CyPJm0nWMfYgiss6vZvOvjfrY.roa (hash: A25wmr5IIAYIYKGhQGDQgsiVmOizxfzKiCwKeYnWC30=)
5: SiFWIKErSsr8Wwck-CgO7FVaY-o.roa (hash: +ZgoJrgI5ESwKvhfcVLTPuL/gHDC3N/9YhG6HqeB5gc=)
6: fokcuLQdi7lL5niihvSROYk9t3E.roa (hash: zZUVNVMAKWHGkuNskVMdDJuoIYYw5xNZt7m3U0ZTY1Y=)
7: sxlH9Vbrh9FwdwUpIExy5lv3WGI.roa (hash: g0GFoHwKkqhaG2HkDdT7ACrSY3EVucdJesKObBMWEsU=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Validity
Not Before: Nov 15 01:38:49 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=C70DF955061E0D647C29B908FE0C7CC6296BD021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f7:90:79:e7:a5:b8:25:28:52:52:50:a9:7a:
9b:45:31:e9:23:d6:f8:ee:45:d6:4f:89:fa:6e:39:
1c:8e:f9:9f:ea:ae:6e:cc:00:f0:b7:4d:6f:1f:e0:
d2:88:86:04:79:9b:19:c0:d0:f0:24:d2:bd:f6:0b:
58:9b:04:ab:86:6c:80:55:fe:11:74:be:80:b7:5d:
a7:b7:5a:44:d2:46:63:7f:96:4f:b9:27:f9:74:d9:
0f:3f:8b:41:89:ed:d5:60:99:a5:5f:e2:4e:0c:12:
3e:15:f4:4e:a8:f4:60:f7:1d:de:6b:f8:ca:55:cb:
69:ab:31:a2:a3:d7:40:5f:3b:90:b8:19:e0:83:4f:
7f:a5:eb:fb:73:c5:14:f2:b0:f6:3c:af:8a:15:23:
b9:21:96:4c:5a:f5:ef:a8:bf:04:1d:0e:3d:7d:58:
82:76:87:ae:59:51:7a:53:c2:b6:ea:c1:ea:d5:ad:
b5:9a:09:d5:0b:92:75:77:47:b8:50:d2:3f:7c:65:
f6:46:76:7d:8c:b6:8f:95:e1:f2:df:fb:11:ba:eb:
76:1d:a6:c9:02:8f:eb:94:1e:86:92:36:c0:7a:30:
a1:cd:e5:00:8a:7e:48:2d:5f:b0:4a:ec:1d:17:06:
d6:f5:d8:9c:b4:6e:86:63:75:8c:ac:ad:c7:a0:40:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0D:F9:55:06:1E:0D:64:7C:29:B9:08:FE:0C:7C:C6:29:6B:D0:21
X509v3 Authority Key Identifier:
keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:62:78:0b:a8:70:dd:74:21:7e:52:cc:6f:04:cc:18:a4:1a:
3a:17:bc:3f:06:fd:ae:d4:5d:90:44:3a:99:58:eb:98:d0:eb:
ba:92:79:0d:a7:6d:17:32:6d:93:dc:1d:be:3a:e3:a9:7c:5e:
d1:78:2e:09:a9:c8:22:75:5e:cd:fb:fa:e3:aa:f6:4e:bb:c7:
ec:23:80:12:25:4c:a8:ed:81:86:55:6f:74:cf:6b:83:df:4c:
21:05:6d:3f:c8:e5:1b:61:89:57:c3:da:70:26:c1:ae:83:7f:
9d:ae:01:c4:e4:22:17:b7:38:4a:82:1f:bf:ce:13:64:0c:1b:
50:63:39:a9:61:cc:c4:9d:51:92:e2:8e:0e:e9:27:3b:1d:81:
7e:df:7c:21:d2:9f:1e:30:f7:69:e7:72:02:e8:75:a0:94:04:
b4:35:b7:96:ad:5f:c8:42:3c:c8:5f:9c:b7:0f:8b:5b:f9:00:
8a:db:0f:d1:eb:7d:c2:aa:23:b2:d6:4f:43:5f:16:54:a7:33:
8d:83:e8:48:25:3d:c7:34:fa:75:6e:45:a0:cc:8e:a9:62:49:
64:f6:4e:4d:d9:ff:14:1f:e3:ab:5c:7f:ae:77:40:d4:01:dd:
4b:f8:92:6f:18:9f:a1:b4:3b:38:7f:24:bf:e2:1a:21:ad:11:
81:15:bc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:16:42 2025 by rpki-client