This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft File: VHLEB0jNqem8COrkJcaCYX6S5KI.mft (raw, json) Hash identifier: PS8E+Y41mEaaMMUyDsvplxOuEFVxIz/kQJWcYf8tXpo= Subject key identifier: 89:8E:70:01:4F:CE:9D:CF:4D:ED:EE:57:13:0D:B5:B9:71:5D:96:9F Authority key identifier: 54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2 Certificate issuer: /CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2 Certificate serial: 58 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft Manifest number: 0DAA Signing time: Sat 22 Nov 2025 19:05:32 +0000 Manifest this update: Sat 22 Nov 2025 19:05:32 +0000 Manifest next update: Sun 07 Dec 2025 19:05:32 +0000 Files and hashes: 1: PZgSZK55zfwWeIr-B-GxnlKGlR8.roa (hash: aRGTgN2wyQndmc1R1mv3te/V80Qm+XfZ2sFH6XKNBOE=) 2: VHLEB0jNqem8COrkJcaCYX6S5KI.crl (hash: f21u71OWzGNgJ6+YI6K8bdnjdVR+Ea6pT5oD/sdxYCI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2 Validity Not Before: Nov 15 01:32:20 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=898E70014FCE9DCF4DEDEE57130DB5B9715D969F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:c8:b6:67:eb:d1:22:51:67:82:5e:9b:0c: 68:c9:0f:c2:d7:45:c8:46:a6:c4:64:4c:4d:a8:0e: 07:3e:91:42:e0:da:4b:dd:1d:98:e0:e6:85:42:81: 92:76:b2:4a:33:65:b0:e6:70:af:64:e4:65:0b:5a: 87:84:a7:56:72:38:04:ec:bc:cb:dc:bb:da:e6:61: c6:5f:1f:d5:e2:be:69:7c:fc:fc:3f:0b:eb:ca:6e: 01:1a:2b:3a:05:80:a4:3a:26:81:c1:7f:cc:0b:f1: 2b:c9:be:c8:8f:45:3d:aa:87:66:b2:c5:64:64:22: e2:6f:f7:d3:77:b5:9d:2d:3c:97:56:68:4f:a7:f2: 2b:31:b2:1d:e2:c9:30:1e:8a:ef:9b:dd:32:a7:71: e7:8a:51:80:bf:fa:e2:a2:18:43:83:5d:0d:a5:39: e1:92:0e:27:26:65:b7:7c:05:80:c1:c9:db:0d:2e: e5:a1:ca:f8:f3:a3:c8:11:0f:00:12:49:f1:b8:36: 07:4b:fd:11:05:aa:fc:82:30:3f:db:15:d5:00:f0: b5:8f:38:c0:a2:59:63:45:78:5b:9f:8d:2e:99:b9: a0:18:17:e8:b9:56:02:4e:56:da:4b:ea:66:1b:09: ba:aa:4d:0c:4c:79:f9:4f:0c:0f:ba:a8:dd:82:77: d0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8E:70:01:4F:CE:9D:CF:4D:ED:EE:57:13:0D:B5:B9:71:5D:96:9F X509v3 Authority Key Identifier: keyid:54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:6b:f1:27:f3:63:b1:5b:13:43:75:72:b1:96:7f:a7:5b:a2: cf:86:9f:f1:eb:6f:8a:bd:c9:96:02:1a:ee:c3:e0:33:7d:22: e5:cf:3e:65:66:59:1e:46:82:68:67:2d:c0:98:71:a6:0b:1d: 81:40:97:ee:47:c1:f8:0c:c2:45:cb:8c:e2:de:1e:f1:9e:d2: 72:5f:37:d0:d2:1a:bf:41:4d:ea:1b:f4:07:7d:70:a2:b3:76: fb:0f:23:69:8b:7b:79:72:fe:f6:a2:71:64:c3:14:75:c3:19: 89:69:8c:67:c3:58:41:07:25:75:be:8a:0c:02:e0:a6:52:23: 12:72:96:e3:67:aa:c6:86:95:8c:5f:a4:da:7a:19:9d:0e:bb: 77:24:a2:e0:00:9d:13:4d:32:43:d8:67:38:d9:23:64:c8:28: c8:b7:d9:b6:fa:36:1c:23:93:00:e4:7e:ce:ae:55:53:a5:69: 60:2c:67:b9:1e:7a:bd:5e:3c:ec:6d:3d:7d:c7:4a:2a:83:f0: c2:6a:71:4a:84:b8:8f:b9:45:0e:99:e6:cb:25:3d:2f:d1:d5: 52:53:8e:6e:f0:41:85:7f:da:4b:97:a6:ad:0b:d2:a3:29:91: 05:0d:65:d2:87:f3:23:8d:b6:e6:11:91:19:63:e5:2f:28:c6: 11:b6:2c:23 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NDcy QzQwNzQ4Q0RBOUU5QkMwOEVBRTQyNUM2ODI2MTdFOTJFNEEyMB4XDTI1MTExNTAx MzIyMFoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoODk4RTcwMDE0RkNFOURD RjRERURFRTU3MTMwREI1Qjk3MTVEOTY5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANzzyLZn69EiUWeCXpsMaMkPwtdFyEamxGRMTagOBz6RQuDaS90d mODmhUKBknaySjNlsOZwr2TkZQtah4SnVnI4BOy8y9y72uZhxl8f1eK+aXz8/D8L 68puARorOgWApDomgcF/zAvxK8m+yI9FPaqHZrLFZGQi4m/303e1nS08l1ZoT6fy KzGyHeLJMB6K75vdMqdx54pRgL/64qIYQ4NdDaU54ZIOJyZlt3wFgMHJ2w0u5aHK +POjyBEPABJJ8bg2B0v9EQWq/IIwP9sV1QDwtY84wKJZY0V4W5+NLpm5oBgX6LlW Ak5W2kvqZhsJuqpNDEx5+U8MD7qo3YJ30EMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSJjnABT86dz03t7lcTDbW5cV2WnzAfBgNVHSMEGDAWgBRUcsQHSM2p6bwI6uQl xoJhfpLkojAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMjEvVkhMRUIwak5xZW04Q09ya0pjYUNZWDZTNUtJLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVkhMRUIwak5xZW04Q09ya0pjYUNZ WDZTNUtJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzIxL1ZITEVCMGpOcWVtOENPcmtKY2FDWVg2UzVLSS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0a/En82OxWxNDdXKxln+nW6LPhp/x62+KvcmWAhruw+AzfSLlzz5l ZlkeRoJoZy3AmHGmCx2BQJfuR8H4DMJFy4zi3h7xntJyXzfQ0hq/QU3qG/QHfXCi s3b7DyNpi3t5cv72onFkwxR1wxmJaYxnw1hBByV1vooMAuCmUiMScpbjZ6rGhpWM X6TaehmdDrt3JKLgAJ0TTTJD2Gc42SNkyCjIt9m2+jYcI5MA5H7OrlVTpWlgLGe5 Hnq9XjzsbT19x0oqg/DCanFKhLiPuUUOmebLJT0v0dVSU45u8EGFf9pLl6atC9Kj KZEFDWXSh/MjjbbmEZEZY+UvKMYRtiwj -----END CERTIFICATE-----Generated at Sat Nov 22 21:13:33 2025 by rpki-client