This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
File: xcyVkpEJeSOm9C2PZXuQugMuX28.mft (raw, json)
Hash identifier: iY/aMrpBkGdk7wuhM9YUKGlMGwktkurUkcJ+DYzuQ+4=
Subject key identifier: 70:F7:76:85:1E:8F:32:32:34:33:06:8C:61:55:79:49:63:FD:EA:70
Authority key identifier: C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F
Certificate issuer: /CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
Certificate serial: 3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
Manifest number: 0A29
Signing time: Mon 22 Dec 2025 07:24:57 +0000
Manifest this update: Mon 22 Dec 2025 07:24:57 +0000
Manifest next update: Tue 06 Jan 2026 07:24:57 +0000
Files and hashes: 1: 7tCGDj_HwkjxzoQxPdnK6diEFCU.roa (hash: bT1jetR3igdWmDJjkidT06s86Ch24IhqmIgSvAAkBJ0=)
2: xcyVkpEJeSOm9C2PZXuQugMuX28.crl (hash: 2hcXBJ/7anp/piQ/lDfv4ieFXAwBA6Ia0pMi7DMorSA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 08:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
Validity
Not Before: Dec 15 01:34:59 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=70F776851E8F32323433068C6155794963FDEA70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:9b:1d:ee:bb:69:c6:3b:dd:9c:ae:d4:eb:
7a:e2:eb:8d:70:03:58:c6:73:74:45:08:36:28:bf:
b7:4b:5e:de:21:b7:87:e6:e3:fc:78:6d:f0:d0:76:
06:1b:58:6e:22:ba:88:e3:d4:b3:ce:9c:17:ac:01:
8e:6c:5c:45:b5:a0:26:3f:d6:6d:d4:42:88:b1:59:
8d:82:c3:14:6b:62:16:19:47:b2:a9:4e:e6:84:72:
a0:ce:87:9f:13:91:28:4b:fb:a6:90:1c:d2:b2:80:
96:60:be:9d:19:1f:27:c1:cd:34:34:3d:e3:d0:be:
30:92:aa:9e:0c:d4:96:10:23:0d:ba:8c:54:d1:07:
c8:ec:60:06:41:11:3b:ab:3d:86:fe:f9:89:7a:c6:
9c:d2:af:c3:60:2b:32:6d:ef:e0:8a:2a:26:25:d2:
9b:57:ea:d9:08:e1:ee:a6:a8:c5:b9:46:cc:c7:24:
8d:91:63:3a:eb:a5:7d:f0:4d:c6:44:b8:86:8f:79:
4b:ce:8a:7f:61:db:7c:05:5f:2e:7c:77:2b:7c:eb:
1b:f3:c5:25:bd:a4:aa:5f:7b:34:b6:60:e9:a7:b7:
38:24:1b:31:51:22:80:84:3b:94:e7:5f:b0:b3:d5:
92:80:e6:88:2a:b8:fa:84:15:64:6e:6b:e3:24:b3:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F7:76:85:1E:8F:32:32:34:33:06:8C:61:55:79:49:63:FD:EA:70
X509v3 Authority Key Identifier:
keyid:C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:08:72:03:da:59:49:fc:bb:b8:dc:42:10:38:92:b9:00:8a:
f0:8c:7d:62:de:85:71:d0:a5:ed:4e:c8:b8:02:7f:d9:5d:74:
e9:13:70:7a:59:33:97:4f:56:d6:aa:8a:9c:20:a7:6a:ec:4c:
05:73:29:16:e2:1b:1d:9b:41:77:b3:f4:59:ea:83:ad:80:56:
fb:c9:d8:4f:7d:75:c2:ad:eb:76:de:1e:68:a7:a0:95:d2:3b:
93:ce:64:13:46:b2:13:d5:d3:e5:b3:33:d0:c4:84:c4:ec:34:
d0:85:f4:97:ff:1e:ae:41:58:93:48:a8:8a:ce:70:77:9f:b0:
f0:a3:37:0c:16:19:de:37:dc:76:f7:78:e2:d9:69:3f:e5:3b:
85:7d:c1:64:3b:38:54:7f:79:f9:9b:f4:a2:db:0c:b5:5e:a7:
54:f3:10:60:98:37:fc:3e:4c:d7:50:5b:8d:38:d0:51:8f:c4:
14:8c:ba:3b:c7:89:bd:5d:dc:2d:d6:9b:6e:66:d9:e2:a0:58:
8b:1e:8f:c3:4b:be:ba:01:91:80:e9:19:32:96:9a:f1:60:1a:
9e:9a:a9:f5:c6:18:9a:71:5b:ff:8a:ae:56:1a:f7:89:eb:c1:
36:b1:97:53:5a:61:55:d9:c8:db:7f:4c:eb:a2:4b:b8:6c:9a:
44:13:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:12:53 2025 by rpki-client