This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.mft
File: Tyg3I2nkguSUJO054kQzDjTrQLA.mft (raw, json)
Hash identifier: Pqb1pPqLMyPn7bWYVPwuy28aXVmJINEKMlVOBEgl3rQ=
Subject key identifier: 57:91:F2:6F:17:B1:D9:81:94:5A:11:38:DE:8C:68:37:6C:94:21:B1
Authority key identifier: 4F:28:37:23:69:E4:82:E4:94:24:ED:39:E2:44:33:0E:34:EB:40:B0
Certificate issuer: /CN=4F28372369E482E49424ED39E244330E34EB40B0
Certificate serial: 59
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.mft
Manifest number: 1191
Signing time: Tue 02 Dec 2025 08:36:44 +0000
Manifest this update: Tue 02 Dec 2025 08:36:44 +0000
Manifest next update: Wed 17 Dec 2025 08:36:44 +0000
Files and hashes: 1: Tyg3I2nkguSUJO054kQzDjTrQLA.crl (hash: hSyTAvbNrLhPK1gOIlJVd9W1Sz+7KVQGsijhvq440M0=)
2: eRTWQkQY_f_MTebxeXS6l2a-Hm4.roa (hash: R77EyI5OYvDl7EpIS0K9QpSqt0EfBYSd4OBkpT7whR4=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F28372369E482E49424ED39E244330E34EB40B0
Validity
Not Before: Nov 15 01:32:37 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=5791F26F17B1D981945A1138DE8C68376C9421B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:55:2e:95:bf:12:b9:30:11:44:2f:2c:b3:
16:0b:77:ba:1b:76:f3:00:f5:32:52:97:03:7a:3e:
7c:89:e6:5c:3a:f1:ba:dd:56:c7:89:14:29:ae:12:
9b:f3:64:bd:78:2d:b9:ac:ca:af:5d:e2:73:43:de:
33:9e:99:e1:08:de:59:03:ca:a5:0e:20:1d:42:44:
9e:bc:0d:fb:5f:96:16:da:3e:7c:c1:a4:63:f9:c7:
a9:f0:e7:3f:94:b4:9e:0d:91:31:93:ca:bd:06:3e:
d5:18:b4:00:d8:da:55:fc:75:a4:61:3f:51:00:5c:
f2:77:ba:4c:b7:aa:af:cc:b6:34:61:df:90:c9:22:
e3:c7:a7:f4:f5:4f:39:8a:47:76:38:be:3a:46:13:
22:82:3b:a3:12:d9:48:ed:13:e2:e1:53:02:eb:30:
78:e2:e3:63:d4:4c:01:71:9c:50:e0:47:02:6b:07:
3b:d0:66:44:59:e6:27:ba:e4:77:c3:6c:8a:13:12:
ab:99:b7:c5:9b:73:84:9f:4d:c5:e4:20:9d:d7:82:
7c:f3:9a:ba:fd:a0:f5:61:4c:70:57:e8:da:3a:c8:
3b:88:9c:85:cf:0d:ca:55:30:ad:f4:b2:cf:5d:ef:
bc:b8:0c:ce:a1:89:c5:be:85:0e:ec:6b:05:d2:41:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:91:F2:6F:17:B1:D9:81:94:5A:11:38:DE:8C:68:37:6C:94:21:B1
X509v3 Authority Key Identifier:
keyid:4F:28:37:23:69:E4:82:E4:94:24:ED:39:E2:44:33:0E:34:EB:40:B0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4f:bd:e1:a6:88:a1:b6:23:34:a8:db:96:9f:04:1c:bf:0b:
1a:2f:4f:6d:d2:c0:87:54:2b:3e:86:a6:12:98:c5:d1:df:0b:
b0:24:dd:84:5f:e1:ab:b2:de:cf:8a:7d:d1:9e:d1:43:24:b6:
b7:b5:10:1c:2d:12:0b:8a:22:10:7c:04:60:34:3e:eb:ed:02:
be:8b:d2:9e:fa:d5:80:9e:50:9e:57:8d:65:21:82:68:c8:f8:
ce:7a:14:f2:bd:e8:b9:f1:98:fb:ea:f3:cb:24:6e:82:a0:fa:
93:f7:d3:1f:f2:c1:3b:2f:43:3e:40:1a:cd:e2:c4:9b:5f:8c:
34:29:db:8b:37:41:15:81:3f:29:a6:51:98:94:d3:ef:47:be:
f7:32:0c:5c:0c:5c:52:09:09:e6:72:42:32:be:cc:ef:d8:43:
f3:bd:05:bf:de:ce:48:df:e5:11:c4:b4:c4:7f:7c:c3:5a:3f:
b5:cd:7a:d3:49:78:b8:55:1f:9e:d3:e7:41:2f:54:bf:0c:92:
09:6b:72:a7:b8:4d:77:41:53:3e:2a:d2:d1:8e:67:ed:3c:ec:
77:4b:3b:a8:80:62:a7:3d:da:89:ef:f9:02:e9:34:08:99:b5:
1f:12:bc:e9:32:79:95:f6:9b:6c:19:c2:c5:7a:74:89:f9:67:
61:e2:44:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:19:45 2025 by rpki-client