This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.mft
File: PI4MyX9YNkHmwu8HfrwWaMTuaZk.mft (raw, json)
Hash identifier: uvMwBCYX5p8ej68iYKKCzuqJqh8srl+3p7NhuKIbf6E=
Subject key identifier: 19:BD:D6:92:02:36:59:82:D6:99:AA:5E:0B:4D:A6:23:B8:1F:C9:CD
Authority key identifier: 3C:8E:0C:C9:7F:58:36:41:E6:C2:EF:07:7E:BC:16:68:C4:EE:69:99
Certificate issuer: /CN=3C8E0CC97F583641E6C2EF077EBC1668C4EE6999
Certificate serial: 1F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.mft
Manifest number: 093D
Signing time: Tue 02 Dec 2025 06:22:28 +0000
Manifest this update: Tue 02 Dec 2025 06:22:28 +0000
Manifest next update: Wed 17 Dec 2025 06:22:28 +0000
Files and hashes: 1: JJyHDuj6_YIoQ3K3i1Bg9xCdP3I.roa (hash: 8AlIi0jbf84NphtPpxw4wDpzxw5XWx1l3rKs8tRfOG0=)
2: PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl (hash: YkgRmxpZND+O6Dq7nJo5fb6kCGuJyRt1f8LKi+9/2mA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C8E0CC97F583641E6C2EF077EBC1668C4EE6999
Validity
Not Before: Nov 15 01:42:28 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=19BDD69202365982D699AA5E0B4DA623B81FC9CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:42:11:e9:5c:36:aa:f2:d0:9f:1e:a9:25:b0:
6b:1d:cf:f8:0d:2e:86:2d:d8:f0:9f:0b:b8:a9:e2:
66:f8:4a:b8:d3:05:ac:67:93:2e:c3:19:b7:fe:af:
90:84:f4:54:01:5c:11:f5:f4:fa:f8:e5:50:65:8c:
c1:6a:42:35:f9:b0:7a:a8:ca:e5:4d:c2:01:2b:df:
7d:1e:cd:b5:9e:ae:c1:9d:ce:1f:10:88:b2:4d:c7:
65:4f:12:3c:16:5a:64:40:cd:1b:61:71:7e:38:5e:
67:e6:fc:85:a9:c7:21:09:56:1f:3b:eb:81:87:fa:
b9:1d:d9:16:32:26:02:c2:2b:ae:7a:8e:91:af:33:
4b:44:ad:be:a3:60:64:32:e8:dd:90:db:61:0b:7a:
37:4d:aa:6e:30:04:39:77:b8:06:18:e9:1f:ba:98:
b8:ef:e4:e0:d3:88:80:27:e1:a5:dc:ab:f9:95:1d:
78:a1:36:fd:30:4c:fd:16:97:10:bb:4d:62:c4:0b:
4e:ca:ed:c3:15:64:f3:38:d3:e3:a8:ab:1b:81:1b:
1a:14:23:4f:0b:c5:7d:0f:5f:94:06:64:7a:0c:0a:
8c:4b:78:fc:01:94:f4:8e:27:0e:c7:4f:47:5b:6b:
5b:07:76:b2:a3:d5:8d:30:d7:f5:b2:9f:bc:76:7b:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BD:D6:92:02:36:59:82:D6:99:AA:5E:0B:4D:A6:23:B8:1F:C9:CD
X509v3 Authority Key Identifier:
keyid:3C:8E:0C:C9:7F:58:36:41:E6:C2:EF:07:7E:BC:16:68:C4:EE:69:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:48:2b:48:30:20:b9:07:1c:66:8a:ae:7c:15:d5:dd:db:db:
1b:9f:be:23:d6:72:16:db:7c:86:eb:08:8a:c9:f9:3a:ae:48:
72:d2:ff:0b:6b:82:5b:68:2f:71:62:43:1a:e7:d5:c1:f2:20:
51:95:91:d6:30:4e:a8:39:18:cc:3c:5a:b9:14:32:65:f7:11:
53:9e:74:1c:7b:43:dd:9e:63:2e:8d:b0:0a:3d:3a:4a:21:43:
e3:ce:3f:44:74:d1:48:fb:d6:2c:70:fb:a0:92:da:35:c8:fc:
4a:2d:c9:8c:d6:93:72:5f:db:f0:4b:ec:03:56:ec:9b:4c:2e:
30:e6:b9:a6:f1:41:eb:5b:d8:a1:92:11:e9:5e:18:70:ea:74:
ad:34:d2:d8:13:42:a5:79:1a:13:3d:b8:b7:75:4d:cb:e1:d4:
53:94:2c:c7:09:75:e1:e4:06:d1:9c:63:e4:bf:3e:4c:52:dd:
eb:5d:ee:87:44:d5:33:a0:e1:88:00:70:9f:57:39:01:cc:04:
56:f5:ea:e6:88:f9:25:0c:22:c3:5e:99:d9:2d:63:ee:73:ae:
5c:6d:be:e1:dc:3c:3f:9d:a8:3a:4a:b6:df:55:a0:d1:1f:82:
d0:7f:f3:28:6c:6e:27:fe:01:49:09:6e:cb:9d:2d:24:16:c6:
82:ec:4d:21
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQzhF
MENDOTdGNTgzNjQxRTZDMkVGMDc3RUJDMTY2OEM0RUU2OTk5MB4XDTI1MTExNTAx
NDIyOFoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoMTlCREQ2OTIwMjM2NTk4
MkQ2OTlBQTVFMEI0REE2MjNCODFGQzlDRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN1CEelcNqry0J8eqSWwax3P+A0uhi3Y8J8LuKniZvhKuNMFrGeT
LsMZt/6vkIT0VAFcEfX0+vjlUGWMwWpCNfmweqjK5U3CASvffR7NtZ6uwZ3OHxCI
sk3HZU8SPBZaZEDNG2FxfjheZ+b8hanHIQlWHzvrgYf6uR3ZFjImAsIrrnqOka8z
S0StvqNgZDLo3ZDbYQt6N02qbjAEOXe4BhjpH7qYuO/k4NOIgCfhpdyr+ZUdeKE2
/TBM/RaXELtNYsQLTsrtwxVk8zjT46irG4EbGhQjTwvFfQ9flAZkegwKjEt4/AGU
9I4nDsdPR1trWwd2sqPVjTDX9bKfvHZ7SfMCAwEAAaOCAj8wggI7MB0GA1UdDgQW
BBQZvdaSAjZZgtaZql4LTaYjuB/JzTAfBgNVHSMEGDAWgBQ8jgzJf1g2QebC7wd+
vBZoxO5pmTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTI2My9QSTRNeVg5WU5rSG13dThIZnJ3V2FNVHVhWmsuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9QSTRNeVg5WU5rSG13dThIZnJ3V2FN
VHVhWmsuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTI2My9QSTRNeVg5WU5rSG13dThIZnJ3V2FNVHVhWmsubWZ0
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAhUgrSDAguQccZoqufBXV3dvbG5++I9ZyFtt8husIisn5Oq5IctL/C2uC
W2gvcWJDGufVwfIgUZWR1jBOqDkYzDxauRQyZfcRU550HHtD3Z5jLo2wCj06SiFD
484/RHTRSPvWLHD7oJLaNcj8Si3JjNaTcl/b8EvsA1bsm0wuMOa5pvFB61vYoZIR
6V4YcOp0rTTS2BNCpXkaEz24t3VNy+HUU5Qsxwl14eQG0Zxj5L8+TFLd613uh0TV
M6DhiABwn1c5AcwEVvXq5oj5JQwiw16Z2S1j7nOuXG2+4dw8P52oOkq231Wg0R+C
0H/zKGxuJ/4BSQluy50tJBbGguxNIQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:38:02 2025 by rpki-client