This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
File: lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft (raw, json)
Hash identifier: g8ijyHoEP3J3YGBqZCkZud4/5o8yOx1MZ2BTa6bNyQM=
Subject key identifier: 30:DD:D5:43:F4:60:1A:7C:1E:B6:2C:56:88:A0:E6:6B:69:70:97:19
Authority key identifier: 96:61:EC:D9:D7:D5:87:03:B8:FE:C8:61:83:A6:22:54:50:AD:F0:F8
Certificate issuer: /CN=9661ECD9D7D58703B8FEC86183A6225450ADF0F8
Certificate serial: 04
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
Manifest number: 023C
Signing time: Sat 22 Nov 2025 19:42:49 +0000
Manifest this update: Sat 22 Nov 2025 19:42:49 +0000
Manifest next update: Sun 07 Dec 2025 19:42:49 +0000
Files and hashes: 1: lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl (hash: 61FFVUXGNk4qXp1/8owYXw5rnqHOweY77wT6RiQsRtY=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9661ECD9D7D58703B8FEC86183A6225450ADF0F8
Validity
Not Before: Nov 15 01:30:54 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=30DDD543F4601A7C1EB62C5688A0E66B69709719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:b6:ea:8f:ae:dc:ee:6f:24:dd:e3:25:2c:
f0:81:7c:c5:47:6e:c1:cb:d8:0b:f7:7c:b3:78:ef:
87:8c:7b:ee:b6:be:7c:3a:0d:14:18:99:e5:33:9d:
b6:f7:fe:d1:dd:8a:54:25:4c:84:bf:72:61:70:aa:
e4:cb:be:4f:cf:65:85:b9:b5:11:1f:a7:85:d6:96:
ef:12:ee:fd:13:d5:c5:f3:f2:d8:25:d7:64:2d:31:
34:97:62:3e:a7:e2:7f:6d:aa:a9:38:8f:03:fe:3c:
1a:3c:4a:3b:d9:ec:38:8b:3d:03:fb:a1:c7:c0:f8:
ae:67:ac:10:59:d3:d6:03:01:42:82:48:47:be:e0:
cc:b6:07:3d:98:b1:f5:1a:32:5a:bd:ee:26:bc:02:
2b:21:c8:87:61:33:83:06:16:aa:50:05:8c:2f:3a:
62:d8:f9:a3:b5:e8:81:d8:f4:80:21:58:ca:d0:93:
6e:af:db:5b:bf:af:8e:4b:fe:44:ed:63:d7:86:5a:
75:56:16:38:b9:b7:cf:78:87:0b:41:b8:72:b6:7b:
00:05:fb:68:4d:18:c1:dd:16:82:61:6c:dc:54:65:
87:73:48:63:97:36:69:e9:2a:6f:63:1b:45:e5:30:
9c:34:51:bf:14:ba:9c:33:02:0a:74:dd:72:73:20:
74:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DD:D5:43:F4:60:1A:7C:1E:B6:2C:56:88:A0:E6:6B:69:70:97:19
X509v3 Authority Key Identifier:
keyid:96:61:EC:D9:D7:D5:87:03:B8:FE:C8:61:83:A6:22:54:50:AD:F0:F8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:17:cc:f6:4f:e4:48:df:59:d1:74:79:61:2b:5d:90:ed:f8:
eb:03:f9:17:0b:77:8b:a4:0d:7a:b6:54:54:3a:a5:e8:e9:e2:
47:d3:d5:44:18:cc:22:f4:88:e4:89:69:90:d8:80:be:6a:0c:
68:a3:53:63:59:98:95:f6:ab:fe:15:fa:8e:8c:64:a1:df:52:
cd:db:94:d2:ce:0b:fe:08:7c:30:67:1c:ee:66:94:8d:11:85:
ec:b4:20:64:a4:b7:f5:9d:7f:c4:27:52:bc:90:12:09:6e:d8:
62:aa:8f:28:3e:11:41:2b:73:94:90:ae:41:82:af:a3:3e:49:
7f:cb:5e:dd:0f:76:11:32:be:15:bc:89:e0:36:e8:cc:a6:d9:
c7:2b:b3:98:1a:59:7f:66:e8:8d:60:b1:82:a9:b3:b2:78:17:
8a:ca:9b:4f:e0:64:5f:38:7e:5d:8b:c8:c8:08:0d:95:3b:61:
76:67:76:dd:72:10:14:ae:7b:db:df:e9:f7:68:46:7c:6c:ce:
6a:ff:29:8e:9c:ff:79:e9:33:bc:17:3e:c7:78:66:1d:9c:b0:
b8:d5:77:c0:6d:79:14:ff:82:6f:c1:f5:f8:e6:dd:2f:d5:e3:
27:62:2e:36:8b:69:e1:ab:9c:f9:73:96:77:74:1c:73:99:31:
dc:64:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:24 2025 by rpki-client