This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.mft
File: _ufdluSTIkYOCgEOyNmD7aLyVMU.mft (raw, json)
Hash identifier: 7+ymGvhDs8PVqXjQwxMwKKCZZ8U8SiulQPt2Xg1V4uc=
Subject key identifier: 5C:0A:F4:D7:64:CA:F9:7E:98:43:50:6D:DF:08:34:A6:60:34:9C:74
Authority key identifier: FE:E7:DD:96:E4:93:22:46:0E:0A:01:0E:C8:D9:83:ED:A2:F2:54:C5
Certificate issuer: /CN=FEE7DD96E49322460E0A010EC8D983EDA2F254C5
Certificate serial: 33
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_ufdluSTIkYOCgEOyNmD7aLyVMU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.mft
Manifest number: 0A06
Signing time: Mon 22 Dec 2025 07:51:11 +0000
Manifest this update: Mon 22 Dec 2025 07:51:11 +0000
Manifest next update: Tue 06 Jan 2026 07:51:11 +0000
Files and hashes: 1: BWaOMTFH21cJwb1K7Hiw1_1rt5c.roa (hash: tKBtTqB4ji8ByUIfIOzlXQ1ASu+WxF4dO6NH30/p/bI=)
2: _ufdluSTIkYOCgEOyNmD7aLyVMU.crl (hash: HnumfvKf/Vny5NvE5+5tw1LXL6q+bZoiIhe/mLrKbBs=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_ufdluSTIkYOCgEOyNmD7aLyVMU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 08:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FEE7DD96E49322460E0A010EC8D983EDA2F254C5
Validity
Not Before: Dec 15 01:42:17 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=5C0AF4D764CAF97E9843506DDF0834A660349C74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:65:88:2e:67:7d:8c:f4:5b:c9:ef:ed:6a:
58:1c:26:d9:28:a6:93:4a:e0:e8:9f:7b:fa:ce:ed:
42:59:93:bc:03:f2:f7:83:ac:af:ad:49:c6:e6:af:
b0:9c:d7:d6:0a:44:08:6a:51:9d:5e:80:2c:ab:08:
4b:ae:48:de:f6:18:d1:2b:db:1e:f5:fd:c7:30:a6:
ea:be:18:97:08:27:81:af:85:5c:a3:65:d7:ad:f8:
dc:81:8d:c6:cb:21:af:e9:f6:e7:c3:28:30:1d:0c:
d1:59:eb:ca:b1:91:20:85:fb:91:bb:ac:be:94:53:
34:89:9e:6a:40:c9:ee:b2:4d:8a:70:b8:52:2d:8c:
dc:8d:f3:cd:fd:2c:ef:e5:4b:b7:38:e0:82:fb:a2:
ba:f6:af:a4:b1:79:99:16:fc:90:0e:8c:a8:5a:83:
22:0e:bc:e4:b1:59:b5:00:3f:8d:b9:8b:e3:af:aa:
65:a9:20:28:d9:2c:70:ac:5f:07:66:49:09:bb:ec:
64:bb:99:c4:34:ff:03:fa:48:25:f1:7c:7a:02:89:
b2:9e:c3:bb:fd:4b:99:f6:ba:44:3c:b5:59:55:99:
5f:73:b4:78:66:15:75:85:3b:57:34:ca:72:36:e8:
51:3d:15:70:d5:08:cf:59:be:e2:a7:4a:c2:8f:52:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0A:F4:D7:64:CA:F9:7E:98:43:50:6D:DF:08:34:A6:60:34:9C:74
X509v3 Authority Key Identifier:
keyid:FE:E7:DD:96:E4:93:22:46:0E:0A:01:0E:C8:D9:83:ED:A2:F2:54:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_ufdluSTIkYOCgEOyNmD7aLyVMU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:2c:14:ba:ea:50:a1:6b:f6:a5:95:4d:cf:8d:0c:f2:b8:fb:
7d:2a:71:77:63:c9:5d:a3:a2:03:ce:40:4b:a3:f5:cb:06:92:
c6:a7:d5:1f:9d:d6:e1:a8:65:a3:f9:23:d6:c4:71:86:6e:06:
1f:41:c8:be:ff:30:99:e5:5f:07:99:e9:0e:0d:8d:6c:4e:24:
07:f5:c0:aa:d4:bb:f3:40:25:d5:d2:14:50:ed:77:db:6d:ed:
15:b2:17:41:b8:c2:38:d4:14:cd:04:ae:00:04:98:e0:96:8a:
fe:2b:cf:00:28:ca:dd:7e:d7:37:92:5e:1a:ed:da:a7:82:ba:
1f:fa:c3:26:e7:d9:86:b4:11:b3:96:2b:cf:a0:b0:7f:e0:5b:
2a:70:6c:3e:98:05:eb:b8:a8:6b:71:df:bb:d3:83:45:ac:d2:
58:7f:d4:a6:ae:e5:3b:db:a8:f0:52:14:11:15:bc:91:03:2d:
d1:f1:25:9e:f7:75:cd:fb:7f:e0:33:bd:49:4f:36:9b:2e:ee:
3e:da:58:cd:d0:89:f9:24:53:de:47:8b:aa:f5:e5:4a:c1:19:
59:51:d7:13:71:b4:94:f1:b6:6a:1d:cd:41:01:7e:9b:e3:28:
fc:e7:1b:17:00:0b:5b:1c:0d:0c:44:9c:cd:b6:9a:f9:d3:aa:
9e:7e:82:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:09:26 2025 by rpki-client