This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
File: heXxjZYxwlh7CU54zdThuGUPTLk.mft (raw, json)
Hash identifier: pnw93xUFCkp36htplkURpFO5MpUCkz7fDveaXIOQvxk=
Subject key identifier: 35:FC:D8:FE:7F:83:87:94:A6:64:EF:FC:4C:2F:EA:9A:70:65:39:30
Authority key identifier: 85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9
Certificate issuer: /CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
Certificate serial: 13
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
Manifest number: 05BC
Signing time: Mon 22 Dec 2025 11:45:44 +0000
Manifest this update: Mon 22 Dec 2025 11:45:44 +0000
Manifest next update: Tue 06 Jan 2026 11:45:44 +0000
Files and hashes: 1: AdMaPSay0Od6CcGQlsjG4EWxjjE.roa (hash: 1xmO3h8be8qkvMR/p7ooCKnp8YWzdbU6YzCVP5Wn9PU=)
2: Cgr4vrEXLst_PC27lRgEE70gIf8.roa (hash: 2dBNXR/uqgzbtVj22EcWAf66T634oTntixsOJOO/Q68=)
3: QMzgb68WkMO5sso7QFJH-HR4KZc.roa (hash: SbHkB9DsLhF5GZQRXJaTixDO3UC8Tx/yGn+BoY93eEc=)
4: Qhu-g4bhbS7g2KE8qMH-n_iKn_s.roa (hash: Lvfbo+DDTDxLuvFSKmLk9/dyFX6mGFcoQd6m9Dr00FA=)
5: heXxjZYxwlh7CU54zdThuGUPTLk.crl (hash: iUJJTjlNypHIkzOC/OjRLEOBIQKHGaitdlcV5GErIXk=)
6: jPunJw3-EXwnD4HV8XvCVsJGLDs.roa (hash: wRy0qJsUy2sPVetIywT0v4LFP3t24hyicVNpMv9CuBc=)
7: yBe6Q0a1e8U2u5vDAidXhvuJxNQ.roa (hash: xbPHknJgKfhnqgPRFUhrwURUsCXzKvDNaiWfOj6teD8=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
Validity
Not Before: Dec 15 01:44:27 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=35FCD8FE7F838794A664EFFC4C2FEA9A70653930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:29:00:53:b7:7c:96:33:98:60:fd:8d:86:
55:c7:c4:2e:07:bb:be:b4:3a:dd:85:89:bf:8e:b3:
49:51:9a:4b:98:1f:84:22:42:26:1c:1a:8e:1d:ba:
34:8b:9e:04:ad:8f:b3:cc:48:eb:48:1d:0a:c1:e6:
9a:be:8c:5c:66:b1:e9:99:78:50:2e:f4:c2:85:fa:
a0:ea:25:87:0c:fc:f3:7f:6c:5b:93:95:0d:f7:88:
a5:44:8f:35:c3:17:2d:b7:26:9c:d3:fd:0f:9a:20:
05:67:22:41:67:f4:2b:27:6b:9a:e8:fa:1d:29:9d:
7a:25:f5:cf:3c:25:ad:b8:c1:d0:bf:f9:ea:9b:4c:
59:1c:70:10:f4:83:64:18:62:27:4a:91:51:a6:8a:
4e:c6:f0:af:34:23:de:05:a4:d0:c0:9d:65:22:b1:
bb:7a:06:70:ba:f4:ec:d2:0a:e8:69:ae:96:7e:1e:
5e:e9:b5:28:7e:3f:57:88:fc:96:e3:aa:9e:e2:37:
ba:6b:52:53:ef:b2:78:4b:b1:bf:2f:57:71:14:80:
3b:cb:36:02:e1:b3:59:fc:cb:85:ff:03:49:d1:d9:
e1:65:87:c7:a4:78:4f:52:ed:93:20:ed:6a:a9:07:
df:bf:83:0e:b9:84:21:76:e4:c7:bb:4c:f2:07:53:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:D8:FE:7F:83:87:94:A6:64:EF:FC:4C:2F:EA:9A:70:65:39:30
X509v3 Authority Key Identifier:
keyid:85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:eb:72:c5:17:d6:d0:ae:a2:96:c5:cb:c7:8d:9b:8e:26:fa:
57:1e:26:14:e4:8c:06:46:e9:6b:2d:5b:a8:34:bb:0a:86:50:
09:5a:e1:76:76:63:38:cc:1d:f4:ef:7e:d2:38:f9:77:a0:ad:
9e:b7:00:00:6d:63:d8:a9:8e:d6:5c:a6:65:a3:b8:cc:ff:5a:
0f:f3:db:76:c5:c7:36:3d:67:ba:d3:1f:48:00:8a:47:65:28:
08:c1:01:b6:17:1a:ee:5d:c1:2a:97:50:b0:54:ba:89:13:c1:
7a:6f:ce:51:d4:e8:24:68:58:e2:7c:df:3b:f4:b4:02:1c:bf:
39:5f:90:62:cf:fc:81:ce:3c:9c:38:9d:1d:33:43:9a:07:f7:
5b:a7:e8:f3:2d:e9:3d:a2:d1:c4:4d:f4:eb:df:62:96:8e:c0:
b0:1b:80:1b:ff:2c:80:ff:cd:9a:bb:19:a7:9c:53:f6:c5:c0:
38:44:7b:63:cd:12:6c:5f:a4:25:91:d9:94:5f:7a:42:9f:5c:
23:e6:a1:7a:44:97:9a:6d:a8:21:4c:ec:37:b7:b2:d1:fa:4d:
9e:af:6b:34:b5:13:08:68:71:a3:a0:24:98:0d:e0:73:39:64:
d1:11:17:49:2f:7a:b2:b1:ba:2d:c0:7a:1f:47:7f:41:5a:be:
03:6d:0a:b9
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUU1
RjE4RDk2MzFDMjU4N0IwOTRFNzhDREQ0RTFCODY1MEY0Q0I5MB4XDTI1MTIxNTAx
NDQyN1oXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMzVGQ0Q4RkU3RjgzODc5
NEE2NjRFRkZDNEMyRkVBOUE3MDY1MzkzMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALoGKQBTt3yWM5hg/Y2GVcfELge7vrQ63YWJv46zSVGaS5gfhCJC
Jhwajh26NIueBK2Ps8xI60gdCsHmmr6MXGax6Zl4UC70woX6oOolhwz8839sW5OV
DfeIpUSPNcMXLbcmnNP9D5ogBWciQWf0Kydrmuj6HSmdeiX1zzwlrbjB0L/56ptM
WRxwEPSDZBhiJ0qRUaaKTsbwrzQj3gWk0MCdZSKxu3oGcLr07NIK6Gmuln4eXum1
KH4/V4j8luOqnuI3umtSU++yeEuxvy9XcRSAO8s2AuGzWfzLhf8DSdHZ4WWHx6R4
T1LtkyDtaqkH37+DDrmEIXbkx7tM8gdT9x8CAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBQ1/Nj+f4OHlKZk7/xML+qacGU5MDAfBgNVHSMEGDAWgBSF5fGNljHCWHsJTnjN
1OG4ZQ9MuTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjc3L2hlWHhqWll4d2xoN0NVNTR6ZFRodUdVUFRMay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hlWHhqWll4d2xoN0NVNTR6ZFRodUdV
UFRMay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzcvaGVYeGpaWXh3bGg3Q1U1NHpkVGh1R1VQVExrLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHfrcsUX1tCuopbFy8eNm44m+lceJhTkjAZG6WstW6g0uwqGUAla4XZ2YzjM
HfTvftI4+XegrZ63AABtY9ipjtZcpmWjuMz/Wg/z23bFxzY9Z7rTH0gAikdlKAjB
AbYXGu5dwSqXULBUuokTwXpvzlHU6CRoWOJ83zv0tAIcvzlfkGLP/IHOPJw4nR0z
Q5oH91un6PMt6T2i0cRN9OvfYpaOwLAbgBv/LID/zZq7GaecU/bFwDhEe2PNEmxf
pCWR2ZRfekKfXCPmoXpEl5ptqCFM7De3stH6TZ6vazS1EwhocaOgJJgN4HM5ZNER
F0kverKxui3Aeh9Hf0FavgNtCrk=
-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:38 2025 by rpki-client