This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft File: VHLEB0jNqem8COrkJcaCYX6S5KI.mft (raw, json) Hash identifier: /5ON+4jKO4SL9u9uFMlrN8p7hi5s3WeDYW7zRWTdrWs= Subject key identifier: 89:8E:70:01:4F:CE:9D:CF:4D:ED:EE:57:13:0D:B5:B9:71:5D:96:9F Authority key identifier: 54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2 Certificate issuer: /CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2 Certificate serial: 59 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft Manifest number: 0E5A Signing time: Mon 22 Dec 2025 07:18:12 +0000 Manifest this update: Mon 22 Dec 2025 07:18:12 +0000 Manifest next update: Tue 06 Jan 2026 07:18:12 +0000 Files and hashes: 1: PZgSZK55zfwWeIr-B-GxnlKGlR8.roa (hash: aRGTgN2wyQndmc1R1mv3te/V80Qm+XfZ2sFH6XKNBOE=) 2: VHLEB0jNqem8COrkJcaCYX6S5KI.crl (hash: pwPQN7uAzHkGZz3a8s0TmxEWwxONRQG9oO82HxwTqAI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 10:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2 Validity Not Before: Dec 15 01:38:57 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=898E70014FCE9DCF4DEDEE57130DB5B9715D969F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:c8:b6:67:eb:d1:22:51:67:82:5e:9b:0c: 68:c9:0f:c2:d7:45:c8:46:a6:c4:64:4c:4d:a8:0e: 07:3e:91:42:e0:da:4b:dd:1d:98:e0:e6:85:42:81: 92:76:b2:4a:33:65:b0:e6:70:af:64:e4:65:0b:5a: 87:84:a7:56:72:38:04:ec:bc:cb:dc:bb:da:e6:61: c6:5f:1f:d5:e2:be:69:7c:fc:fc:3f:0b:eb:ca:6e: 01:1a:2b:3a:05:80:a4:3a:26:81:c1:7f:cc:0b:f1: 2b:c9:be:c8:8f:45:3d:aa:87:66:b2:c5:64:64:22: e2:6f:f7:d3:77:b5:9d:2d:3c:97:56:68:4f:a7:f2: 2b:31:b2:1d:e2:c9:30:1e:8a:ef:9b:dd:32:a7:71: e7:8a:51:80:bf:fa:e2:a2:18:43:83:5d:0d:a5:39: e1:92:0e:27:26:65:b7:7c:05:80:c1:c9:db:0d:2e: e5:a1:ca:f8:f3:a3:c8:11:0f:00:12:49:f1:b8:36: 07:4b:fd:11:05:aa:fc:82:30:3f:db:15:d5:00:f0: b5:8f:38:c0:a2:59:63:45:78:5b:9f:8d:2e:99:b9: a0:18:17:e8:b9:56:02:4e:56:da:4b:ea:66:1b:09: ba:aa:4d:0c:4c:79:f9:4f:0c:0f:ba:a8:dd:82:77: d0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8E:70:01:4F:CE:9D:CF:4D:ED:EE:57:13:0D:B5:B9:71:5D:96:9F X509v3 Authority Key Identifier: keyid:54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d8:97:e7:3b:91:28:93:ce:ff:25:c1:59:17:d3:7f:24:51: b4:0c:15:46:34:48:ac:41:67:51:5f:7e:03:d8:b0:da:35:d3: af:1e:42:41:28:5d:0b:2e:6e:a7:07:b6:b5:f8:fa:6d:4d:71: 98:3c:aa:c1:55:7e:2f:ab:ab:c8:32:88:17:ec:de:c6:d1:46: 3b:15:86:83:f0:3e:2a:a3:b5:bc:7c:35:f3:86:97:eb:72:e1: 12:91:43:74:f7:59:9a:42:ce:9d:ac:89:58:9d:ce:7c:6f:08: 6b:f2:d5:dc:85:22:f5:d6:74:4a:01:e1:37:b6:a3:a4:05:e5: f1:9c:3f:e7:d3:5a:aa:39:0c:51:ce:1a:31:4e:2c:6e:ff:b0: c3:55:de:ba:84:79:ed:65:78:78:6a:fc:92:88:65:4b:e9:e4: e6:79:06:2a:1b:7c:a5:ad:1b:b1:84:63:7f:e1:24:82:6a:44: c7:c8:1b:39:df:ea:66:02:c2:ff:61:2c:f6:77:53:fa:30:92: 94:27:ec:63:5c:27:c0:a4:8d:b9:bb:52:5e:11:c0:e9:4f:d1: 09:be:71:8f:72:9a:bd:49:87:89:7c:65:fb:50:5f:b3:5e:c6: e2:a8:d3:e0:95:6c:31:fe:68:ad:a7:ba:11:51:34:50:84:8e: c0:40:26:de -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NDcy QzQwNzQ4Q0RBOUU5QkMwOEVBRTQyNUM2ODI2MTdFOTJFNEEyMB4XDTI1MTIxNTAx Mzg1N1oXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoODk4RTcwMDE0RkNFOURD RjRERURFRTU3MTMwREI1Qjk3MTVEOTY5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANzzyLZn69EiUWeCXpsMaMkPwtdFyEamxGRMTagOBz6RQuDaS90d mODmhUKBknaySjNlsOZwr2TkZQtah4SnVnI4BOy8y9y72uZhxl8f1eK+aXz8/D8L 68puARorOgWApDomgcF/zAvxK8m+yI9FPaqHZrLFZGQi4m/303e1nS08l1ZoT6fy KzGyHeLJMB6K75vdMqdx54pRgL/64qIYQ4NdDaU54ZIOJyZlt3wFgMHJ2w0u5aHK +POjyBEPABJJ8bg2B0v9EQWq/IIwP9sV1QDwtY84wKJZY0V4W5+NLpm5oBgX6LlW Ak5W2kvqZhsJuqpNDEx5+U8MD7qo3YJ30EMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSJjnABT86dz03t7lcTDbW5cV2WnzAfBgNVHSMEGDAWgBRUcsQHSM2p6bwI6uQl xoJhfpLkojAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMjEvVkhMRUIwak5xZW04Q09ya0pjYUNZWDZTNUtJLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVkhMRUIwak5xZW04Q09ya0pjYUNZ WDZTNUtJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzIxL1ZITEVCMGpOcWVtOENPcmtKY2FDWVg2UzVLSS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW2JfnO5Eok87/JcFZF9N/JFG0DBVGNEisQWdRX34D2LDaNdOvHkJB KF0LLm6nB7a1+PptTXGYPKrBVX4vq6vIMogX7N7G0UY7FYaD8D4qo7W8fDXzhpfr cuESkUN091maQs6drIlYnc58bwhr8tXchSL11nRKAeE3tqOkBeXxnD/n01qqOQxR zhoxTixu/7DDVd66hHntZXh4avySiGVL6eTmeQYqG3ylrRuxhGN/4SSCakTHyBs5 3+pmAsL/YSz2d1P6MJKUJ+xjXCfApI25u1JeEcDpT9EJvnGPcpq9SYeJfGX7UF+z XsbiqNPglWwx/mitp7oRUTRQhI7AQCbe -----END CERTIFICATE-----Generated at Mon Dec 22 12:27:29 2025 by rpki-client