This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.mft
File: DSZtuE_cabNCwnrxFo74epWgcPU.mft (raw, json)
Hash identifier: XaABjuQzPSSV8z7zHEzm5R2/fFokhKsMn9E6dE+4g68=
Subject key identifier: 56:34:29:BE:08:44:F4:BE:A5:CB:15:58:7E:18:2D:02:5A:3B:49:CD
Authority key identifier: 0D:26:6D:B8:4F:DC:69:B3:42:C2:7A:F1:16:8E:F8:7A:95:A0:70:F5
Certificate issuer: /CN=0D266DB84FDC69B342C27AF1168EF87A95A070F5
Certificate serial: 1F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.mft
Manifest number: 0902
Signing time: Sat 22 Nov 2025 19:54:33 +0000
Manifest this update: Sat 22 Nov 2025 19:54:33 +0000
Manifest next update: Sun 07 Dec 2025 19:54:33 +0000
Files and hashes: 1: DSZtuE_cabNCwnrxFo74epWgcPU.crl (hash: 9CGTVjBvJAAMuYsXMvUC2Okgd2tfS3i5h9F9RddbjCk=)
2: Tg8PZoIof4hdUds-IDtG1hUkS00.roa (hash: ldRLfdb6OpaYh66+YzS4YAigBY/X0ERDxfS7i/EYylg=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D266DB84FDC69B342C27AF1168EF87A95A070F5
Validity
Not Before: Nov 15 01:42:03 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=563429BE0844F4BEA5CB15587E182D025A3B49CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:f7:25:55:55:5b:cf:ef:2f:32:9a:06:42:
da:75:c5:e8:a4:74:4b:6a:c4:57:5f:68:68:ae:10:
7b:4c:b4:30:dc:fa:46:66:f7:96:96:63:6c:c3:ae:
de:90:4f:09:1e:2e:84:58:a7:a9:68:8d:9d:c5:d8:
e8:c8:eb:8a:4d:7a:69:ea:12:f0:81:15:d8:0e:71:
39:53:e1:34:82:b7:3b:e5:06:bf:95:8a:9d:78:45:
e9:43:da:e6:66:64:1d:00:4d:f0:2d:75:bc:6c:55:
ee:e0:81:7e:0a:cd:da:c4:1b:7d:25:6c:d2:94:5e:
5e:d1:30:fa:ff:cb:f5:78:09:28:91:9d:60:75:20:
cd:06:99:f5:85:10:39:aa:b0:bc:58:40:ba:2b:e9:
49:3c:36:6a:4a:23:03:8c:04:6b:d1:62:b1:15:cf:
96:20:dc:e9:37:e7:67:d1:25:0b:9f:48:ab:66:08:
8f:47:eb:5d:ba:a4:bb:ee:9c:33:a5:c3:8c:9a:8a:
9d:98:f1:aa:62:5f:05:c0:03:a3:16:39:0e:59:fa:
8c:6b:9e:85:7c:eb:92:a9:53:35:1c:b4:c5:e5:8c:
d7:f2:b2:b2:4f:f7:af:bd:4a:79:3a:93:9e:37:15:
69:4b:34:0c:5e:9c:bd:20:4f:09:50:be:13:5c:48:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:34:29:BE:08:44:F4:BE:A5:CB:15:58:7E:18:2D:02:5A:3B:49:CD
X509v3 Authority Key Identifier:
keyid:0D:26:6D:B8:4F:DC:69:B3:42:C2:7A:F1:16:8E:F8:7A:95:A0:70:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:21:3e:cd:27:fb:9b:92:e0:88:1a:6a:14:8f:6e:ab:db:ea:
a9:1e:b1:14:27:a8:5f:2d:81:77:06:dd:97:05:19:a6:d9:8f:
d8:0c:a4:f6:fd:43:36:9c:cd:60:cb:41:f8:5e:ab:d7:d4:64:
85:8b:22:98:af:b7:1f:83:5a:46:d9:26:f3:07:67:02:bc:46:
95:3c:9f:fa:c4:87:95:db:66:a1:bb:9b:63:33:5d:35:a7:6d:
84:fe:de:ec:91:ff:29:d9:4b:55:d8:ee:5e:99:e1:e6:bc:64:
ec:2a:89:e7:38:6f:48:1f:e3:be:a5:9f:f7:49:be:88:f9:a1:
5d:79:fa:33:1d:8f:f3:04:a1:33:55:05:42:f0:bb:8d:3c:e2:
55:86:b1:a2:b0:31:91:cb:1f:9b:8f:96:ce:e5:a8:4c:10:ed:
ff:31:59:cf:d9:c7:c7:40:67:a5:c1:fc:1c:3e:aa:f4:76:95:
60:d5:6f:dd:81:8b:5e:d7:b8:a9:3e:a0:a6:7c:ff:d2:39:cb:
df:4e:33:60:0c:5a:69:12:d5:b3:14:4f:d3:4e:84:1b:cb:d2:
8b:04:85:64:a2:59:29:29:9a:13:56:c7:d5:47:18:0e:f3:2d:
1d:33:2b:c5:2f:8a:6e:ad:75:b7:b5:fb:32:26:cd:5c:f5:4c:
ed:d4:0c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:16:42 2025 by rpki-client