This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
File: HLYLQKmK6uBUyu5MCct9murePp0.mft (raw, json)
Hash identifier: Y4sKHIriJVE6wNh6ZMK78u0EJS3UrOgiwWt455GaPnw=
Subject key identifier: F1:54:AA:E4:79:00:D4:E8:D8:99:B4:0C:52:54:DB:C4:1E:C5:D5:97
Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
Certificate issuer: /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Certificate serial: 34
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
Manifest number: 09C0
Signing time: Tue 16 Dec 2025 01:55:28 +0000
Manifest this update: Tue 16 Dec 2025 01:55:28 +0000
Manifest next update: Wed 31 Dec 2025 01:55:28 +0000
Files and hashes: 1: HLYLQKmK6uBUyu5MCct9murePp0.crl (hash: ElR2MM2pdlsnDDuKBvnYQughn3gy0wuUHy+sQLgci7E=)
2: kaeLlHb8xHqdV0Dp0C_jmN5WQOk.roa (hash: xhUtJoTyozg7bEkzfD4lC5sudzqkR1pHOtyvThF1y48=)
3: lUDBu8x5MLl2XP43y5nGOVgooBs.roa (hash: phkNmEKxnfZdtJFrlM7kzF149S+qNZBL2RX6awsvVoc=)
4: oGWxKxsgjnhCviyxQ7qHexXa2H4.roa (hash: 0OBns8xPnJl/zk9YPTQB/f8wgaZjbAnGx4o2N9v9x/s=)
5: zisrajGTQa11rGE8R9YK-3lZr2k.roa (hash: v61Y2NTkyk+M3kH+AeC05ZaWxi9EFRIo8q3WW/w/uBA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 01:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Validity
Not Before: Dec 15 01:36:24 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=F154AAE47900D4E8D899B40C5254DBC41EC5D597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:53:94:51:04:9a:58:11:5b:0f:c0:6b:65:
fd:8d:99:d7:37:08:89:14:c7:02:a3:9c:db:e2:f9:
7c:37:37:d0:7f:1d:d1:d8:f8:b6:20:0c:c5:02:ec:
f6:33:5e:4d:51:eb:f5:60:f2:ca:9e:11:3a:5b:d0:
48:a0:86:c5:4a:56:d0:55:df:78:44:a3:7a:0e:d8:
a5:99:08:39:a9:bb:77:fc:54:10:79:09:66:e0:f4:
1f:9c:bf:77:e6:99:91:cd:06:e7:61:6b:bc:6b:de:
f9:17:f1:5c:7f:ed:3a:9a:8d:41:f0:a6:83:16:18:
48:a8:84:39:94:ed:60:9e:a6:01:a8:b7:6f:d8:94:
d7:28:a9:41:b4:f1:99:dc:38:b2:5e:0a:0a:96:7c:
51:f5:bf:ab:03:8d:fa:3f:2a:b6:b9:2b:81:2e:90:
ad:44:eb:03:41:af:e6:9a:65:eb:44:12:8d:e4:c7:
0f:b1:68:1a:10:73:7f:97:b1:95:6f:a2:9a:fe:0f:
50:5f:49:c6:03:13:9f:7c:e0:90:b6:88:fc:84:35:
2c:aa:fa:00:59:da:d6:98:f1:a2:a4:90:8d:45:65:
2a:10:03:69:82:97:d4:1a:0c:be:8e:f7:35:c9:b9:
0b:16:9f:8a:7a:71:ef:f9:e7:1a:f6:6f:3a:f2:41:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:54:AA:E4:79:00:D4:E8:D8:99:B4:0C:52:54:DB:C4:1E:C5:D5:97
X509v3 Authority Key Identifier:
keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a8:72:3b:d5:73:84:b8:94:42:d7:98:92:92:f7:59:7c:e2:
e8:ac:3c:01:5e:53:a5:4b:85:6a:80:cb:1e:69:98:aa:97:82:
46:45:1e:56:83:c6:3d:30:7a:11:aa:7b:6a:9f:9a:39:3a:7a:
47:b7:04:3e:b0:9d:71:0b:19:ab:52:a6:3f:e7:11:43:80:14:
fe:e7:26:ff:bf:33:65:67:0b:50:3d:36:9e:57:1c:61:e7:68:
02:60:d4:99:b3:51:34:12:04:0e:dc:69:0e:54:91:99:58:81:
d4:c6:5b:3f:6d:06:89:7b:9c:d6:15:db:fc:a8:d5:56:2b:3e:
d6:e6:78:22:ef:39:b1:45:2d:2f:47:13:5d:9f:37:d6:41:07:
06:35:63:4d:aa:af:e3:83:1d:ed:ab:0e:9b:f4:3c:14:7f:eb:
fe:35:29:5d:c6:8c:36:26:1a:f0:28:02:6f:fa:5c:63:97:ef:
91:3f:df:88:13:b4:08:a4:79:5a:4c:97:a2:c9:b0:e4:a4:f2:
ac:40:4d:24:2a:61:bc:e4:cb:3b:78:39:a9:da:f1:ca:0a:1a:
9a:16:ee:15:3b:02:ba:35:dd:64:4e:8c:4c:0a:03:00:da:99:
d8:bf:d6:af:ab:d3:8b:55:88:14:e8:ff:39:61:5b:a6:d9:26:
b8:55:ed:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 03:54:54 2025 by rpki-client