This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
File: heXxjZYxwlh7CU54zdThuGUPTLk.mft (raw, json)
Hash identifier: lAwkbT5Q75DXKJObvNbSJPG43LEVyk42QLJ9H7sr/2s=
Subject key identifier: 35:FC:D8:FE:7F:83:87:94:A6:64:EF:FC:4C:2F:EA:9A:70:65:39:30
Authority key identifier: 85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9
Certificate issuer: /CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
Certificate serial: 12
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
Manifest number: 050B
Signing time: Sat 22 Nov 2025 19:40:42 +0000
Manifest this update: Sat 22 Nov 2025 19:40:42 +0000
Manifest next update: Sun 07 Dec 2025 19:40:42 +0000
Files and hashes: 1: AdMaPSay0Od6CcGQlsjG4EWxjjE.roa (hash: 1xmO3h8be8qkvMR/p7ooCKnp8YWzdbU6YzCVP5Wn9PU=)
2: Cgr4vrEXLst_PC27lRgEE70gIf8.roa (hash: 2dBNXR/uqgzbtVj22EcWAf66T634oTntixsOJOO/Q68=)
3: QMzgb68WkMO5sso7QFJH-HR4KZc.roa (hash: SbHkB9DsLhF5GZQRXJaTixDO3UC8Tx/yGn+BoY93eEc=)
4: Qhu-g4bhbS7g2KE8qMH-n_iKn_s.roa (hash: Lvfbo+DDTDxLuvFSKmLk9/dyFX6mGFcoQd6m9Dr00FA=)
5: heXxjZYxwlh7CU54zdThuGUPTLk.crl (hash: IWCU6hgw2bZsSuHcqzmT5BpURU5UqDSTkWUBcuI5wN0=)
6: jPunJw3-EXwnD4HV8XvCVsJGLDs.roa (hash: wRy0qJsUy2sPVetIywT0v4LFP3t24hyicVNpMv9CuBc=)
7: yBe6Q0a1e8U2u5vDAidXhvuJxNQ.roa (hash: xbPHknJgKfhnqgPRFUhrwURUsCXzKvDNaiWfOj6teD8=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
Validity
Not Before: Nov 15 01:43:36 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=35FCD8FE7F838794A664EFFC4C2FEA9A70653930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:29:00:53:b7:7c:96:33:98:60:fd:8d:86:
55:c7:c4:2e:07:bb:be:b4:3a:dd:85:89:bf:8e:b3:
49:51:9a:4b:98:1f:84:22:42:26:1c:1a:8e:1d:ba:
34:8b:9e:04:ad:8f:b3:cc:48:eb:48:1d:0a:c1:e6:
9a:be:8c:5c:66:b1:e9:99:78:50:2e:f4:c2:85:fa:
a0:ea:25:87:0c:fc:f3:7f:6c:5b:93:95:0d:f7:88:
a5:44:8f:35:c3:17:2d:b7:26:9c:d3:fd:0f:9a:20:
05:67:22:41:67:f4:2b:27:6b:9a:e8:fa:1d:29:9d:
7a:25:f5:cf:3c:25:ad:b8:c1:d0:bf:f9:ea:9b:4c:
59:1c:70:10:f4:83:64:18:62:27:4a:91:51:a6:8a:
4e:c6:f0:af:34:23:de:05:a4:d0:c0:9d:65:22:b1:
bb:7a:06:70:ba:f4:ec:d2:0a:e8:69:ae:96:7e:1e:
5e:e9:b5:28:7e:3f:57:88:fc:96:e3:aa:9e:e2:37:
ba:6b:52:53:ef:b2:78:4b:b1:bf:2f:57:71:14:80:
3b:cb:36:02:e1:b3:59:fc:cb:85:ff:03:49:d1:d9:
e1:65:87:c7:a4:78:4f:52:ed:93:20:ed:6a:a9:07:
df:bf:83:0e:b9:84:21:76:e4:c7:bb:4c:f2:07:53:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:D8:FE:7F:83:87:94:A6:64:EF:FC:4C:2F:EA:9A:70:65:39:30
X509v3 Authority Key Identifier:
keyid:85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d7:56:7e:e6:25:19:0d:ee:26:d4:6d:57:ce:a7:41:d4:4c:
e9:7c:42:6a:62:94:50:6f:4d:b4:ec:10:b3:15:14:40:af:16:
32:b0:b6:6e:ab:7c:4f:a0:d9:8b:c0:d2:e1:ef:e6:a9:69:b0:
83:49:aa:bb:42:5e:38:07:11:95:e0:54:1b:84:87:02:6f:dc:
2a:00:13:20:ed:5f:d1:47:03:c7:32:85:e8:e1:dc:9f:b1:35:
7c:bd:68:be:0f:a5:ce:ec:23:4b:89:9b:5e:09:8d:32:27:2b:
06:df:34:c8:1c:77:03:3c:71:8a:74:0d:50:11:1b:f2:cd:18:
ab:bb:f2:0b:4c:1e:30:ae:60:08:ec:b8:74:42:dd:2e:d3:94:
7a:e3:d7:e8:03:0b:a6:45:b1:94:58:b6:96:79:29:be:e2:aa:
34:37:d3:97:cc:a2:64:36:5b:4d:07:9c:97:b9:00:22:c9:15:
b7:0a:47:90:38:af:60:93:d2:56:c5:09:21:99:4e:76:03:f1:
26:9d:d3:9e:94:1b:ea:69:1a:1a:77:0d:eb:29:dd:fb:59:be:
0b:99:e4:93:b7:79:46:f0:e2:84:0f:38:f7:dd:e8:8b:c7:e6:
26:b1:80:6d:fe:df:9a:87:cc:32:90:03:df:72:de:2c:ce:6d:
cc:82:c9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:16:41 2025 by rpki-client