This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/MCTF-pqizzLZaK90UgGpk0lNNPI.mft
File: MCTF-pqizzLZaK90UgGpk0lNNPI.mft (raw, json)
Hash identifier: g9XVyWHd7/CIvkonF0WFoXV69aiIZSP+YX5vmzy8Rcw=
Subject key identifier: 09:87:5D:E1:24:8B:67:1E:B7:29:1A:D7:D3:F9:1A:6B:F9:91:26:E6
Authority key identifier: 30:24:C5:FA:9A:A2:CF:32:D9:68:AF:74:52:01:A9:93:49:4D:34:F2
Certificate issuer: /CN=3024C5FA9AA2CF32D968AF745201A993494D34F2
Certificate serial: 16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MCTF-pqizzLZaK90UgGpk0lNNPI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/MCTF-pqizzLZaK90UgGpk0lNNPI.mft
Manifest number: 0922
Signing time: Tue 02 Dec 2025 08:36:15 +0000
Manifest this update: Tue 02 Dec 2025 08:36:15 +0000
Manifest next update: Wed 17 Dec 2025 08:36:15 +0000
Files and hashes: 1: MCTF-pqizzLZaK90UgGpk0lNNPI.crl (hash: LEFIquJQQf/C1OsLGq7EFDxgIvzSjX4g+Hsf2RXPxrE=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/MCTF-pqizzLZaK90UgGpk0lNNPI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/MCTF-pqizzLZaK90UgGpk0lNNPI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MCTF-pqizzLZaK90UgGpk0lNNPI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3024C5FA9AA2CF32D968AF745201A993494D34F2
Validity
Not Before: Nov 15 01:37:21 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=09875DE1248B671EB7291AD7D3F91A6BF99126E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:a5:ee:03:87:90:97:f2:c7:17:18:45:ba:
71:7d:b7:5a:0c:4b:39:2d:47:d5:41:6e:8d:d1:c1:
bb:e1:10:75:cb:68:6a:0d:ea:8b:3b:33:f0:4a:62:
fa:3a:85:7d:32:51:65:d5:00:03:b6:64:2f:0c:e5:
5a:2c:c7:28:b3:39:4f:83:e5:cc:76:eb:00:0b:04:
5c:1f:81:c6:25:ef:79:4e:16:54:7a:70:1e:70:97:
0f:ce:81:cf:e0:5f:61:32:1c:e2:0d:f9:02:53:b6:
cb:23:25:60:98:2c:87:9c:5e:03:68:f4:98:a9:28:
42:98:63:9e:3b:95:a4:9f:af:36:f1:db:1e:00:01:
a6:c4:85:58:0d:cb:98:0d:a6:a7:f1:78:14:5d:03:
f5:df:57:88:48:82:2d:06:f6:7a:98:d5:cc:6a:90:
81:82:ff:68:d8:db:6c:ea:24:95:9c:e9:19:db:26:
d5:cd:6c:a4:ab:c8:0a:3f:39:e0:08:be:d4:38:86:
54:f3:cf:69:b9:45:78:22:39:38:33:c8:f3:04:6c:
58:83:3f:63:74:c9:1f:f6:d6:03:2a:40:19:86:0b:
dd:c2:14:e6:e6:5e:bb:dc:d9:1e:a3:ba:33:ee:bd:
9a:94:f4:88:8f:b5:c1:e8:24:8a:23:71:0d:31:c5:
ba:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:87:5D:E1:24:8B:67:1E:B7:29:1A:D7:D3:F9:1A:6B:F9:91:26:E6
X509v3 Authority Key Identifier:
keyid:30:24:C5:FA:9A:A2:CF:32:D9:68:AF:74:52:01:A9:93:49:4D:34:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/MCTF-pqizzLZaK90UgGpk0lNNPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MCTF-pqizzLZaK90UgGpk0lNNPI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/MCTF-pqizzLZaK90UgGpk0lNNPI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:1f:01:6b:4d:e3:46:07:18:16:1a:2b:82:d7:aa:03:20:d1:
77:83:b9:97:69:b9:83:e0:08:71:87:a4:72:7f:26:79:d1:7a:
25:7f:e8:74:b6:01:b4:a7:5b:b2:26:c2:1b:c5:16:dc:64:86:
91:2d:55:62:35:c6:dc:ef:5d:f2:6b:5b:6a:45:4d:4f:77:7c:
3b:f2:80:51:42:e3:09:74:24:b7:08:63:45:f0:b9:ac:ab:cf:
1c:d4:10:6e:d3:17:b9:66:13:c8:c6:5f:1c:64:08:a0:eb:61:
39:1a:8c:83:e9:fe:24:c1:48:ba:75:59:df:83:4a:22:65:c0:
40:ca:99:32:5d:50:c7:58:25:8c:c5:f1:9a:56:b5:15:35:47:
d0:98:18:bb:5c:6d:a3:5b:c1:cf:5f:6e:4d:48:aa:6e:52:88:
3e:3d:63:ed:cb:38:96:1c:8a:b8:ec:b9:dd:f1:49:e1:17:92:
47:56:55:37:69:83:d1:63:b4:10:1d:fb:ce:de:6c:4d:5e:1d:
24:d1:64:6a:c3:35:a9:12:90:f5:36:4e:af:15:bc:30:f7:a3:
7d:0a:f3:09:a6:68:6b:bd:ac:84:5a:03:c4:49:a5:5e:09:d6:
2c:c1:f9:e5:1c:ee:77:4c:1e:5b:7c:60:23:77:9d:77:44:92:
41:5c:a8:c1
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzMDI0
QzVGQTlBQTJDRjMyRDk2OEFGNzQ1MjAxQTk5MzQ5NEQzNEYyMB4XDTI1MTExNTAx
MzcyMVoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoMDk4NzVERTEyNDhCNjcx
RUI3MjkxQUQ3RDNGOTFBNkJGOTkxMjZFNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALWbpe4Dh5CX8scXGEW6cX23WgxLOS1H1UFujdHBu+EQdctoag3q
izsz8Epi+jqFfTJRZdUAA7ZkLwzlWizHKLM5T4PlzHbrAAsEXB+BxiXveU4WVHpw
HnCXD86Bz+BfYTIc4g35AlO2yyMlYJgsh5xeA2j0mKkoQphjnjuVpJ+vNvHbHgAB
psSFWA3LmA2mp/F4FF0D9d9XiEiCLQb2epjVzGqQgYL/aNjbbOoklZzpGdsm1c1s
pKvICj854Ai+1DiGVPPPablFeCI5ODPI8wRsWIM/Y3TJH/bWAypAGYYL3cIU5uZe
u9zZHqO6M+69mpT0iI+1wegkiiNxDTHFussCAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBQJh13hJItnHrcpGtfT+Rpr+ZEm5jAfBgNVHSMEGDAWgBQwJMX6mqLPMtlor3RS
AamTSU008jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyL01DVEYtcHFpenpMWmFLOTBVZ0dwazBsTk5QSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL01DVEYtcHFpenpMWmFLOTBVZ0dwazBs
Tk5QSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTIvTUNURi1wcWl6ekxaYUs5MFVnR3BrMGxOTlBJLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBABMfAWtN40YHGBYaK4LXqgMg0XeDuZdpuYPgCHGHpHJ/JnnReiV/6HS2AbSn
W7ImwhvFFtxkhpEtVWI1xtzvXfJrW2pFTU93fDvygFFC4wl0JLcIY0XwuayrzxzU
EG7TF7lmE8jGXxxkCKDrYTkajIPp/iTBSLp1Wd+DSiJlwEDKmTJdUMdYJYzF8ZpW
tRU1R9CYGLtcbaNbwc9fbk1Iqm5SiD49Y+3LOJYcirjsud3xSeEXkkdWVTdpg9Fj
tBAd+87ebE1eHSTRZGrDNakSkPU2Tq8VvDD3o30K8wmmaGu9rIRaA8RJpV4J1izB
+eUc7ndMHlt8YCN3nXdEkkFcqME=
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:50:24 2025 by rpki-client