This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft File: VHLEB0jNqem8COrkJcaCYX6S5KI.mft (raw, json) Hash identifier: 1V0a8jvbtsUV56kODPnleqy57acM+tbpZcjyg8+tXuk= Subject key identifier: 89:8E:70:01:4F:CE:9D:CF:4D:ED:EE:57:13:0D:B5:B9:71:5D:96:9F Authority key identifier: 54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2 Certificate issuer: /CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2 Certificate serial: 5B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft Manifest number: 0F2C Signing time: Mon 26 Jan 2026 07:46:22 +0000 Manifest this update: Mon 26 Jan 2026 07:46:22 +0000 Manifest next update: Tue 10 Feb 2026 07:46:22 +0000 Files and hashes: 1: VHLEB0jNqem8COrkJcaCYX6S5KI.crl (hash: XdUjTP8Sqwx2wzKbwHazjbEWvv2VOe4QTMMCR7WAzoM=) 2: XCQvmwF16mctA9YU1XF8-vsLZKQ.roa (hash: DyNbmzIufchr6sbgzm4copTC31RVRwuJ6zPb1vCKysU=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 06:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2 Validity Not Before: Jan 15 01:38:51 2026 GMT Not After : Jan 15 01:30:02 2027 GMT Subject: CN=898E70014FCE9DCF4DEDEE57130DB5B9715D969F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:c8:b6:67:eb:d1:22:51:67:82:5e:9b:0c: 68:c9:0f:c2:d7:45:c8:46:a6:c4:64:4c:4d:a8:0e: 07:3e:91:42:e0:da:4b:dd:1d:98:e0:e6:85:42:81: 92:76:b2:4a:33:65:b0:e6:70:af:64:e4:65:0b:5a: 87:84:a7:56:72:38:04:ec:bc:cb:dc:bb:da:e6:61: c6:5f:1f:d5:e2:be:69:7c:fc:fc:3f:0b:eb:ca:6e: 01:1a:2b:3a:05:80:a4:3a:26:81:c1:7f:cc:0b:f1: 2b:c9:be:c8:8f:45:3d:aa:87:66:b2:c5:64:64:22: e2:6f:f7:d3:77:b5:9d:2d:3c:97:56:68:4f:a7:f2: 2b:31:b2:1d:e2:c9:30:1e:8a:ef:9b:dd:32:a7:71: e7:8a:51:80:bf:fa:e2:a2:18:43:83:5d:0d:a5:39: e1:92:0e:27:26:65:b7:7c:05:80:c1:c9:db:0d:2e: e5:a1:ca:f8:f3:a3:c8:11:0f:00:12:49:f1:b8:36: 07:4b:fd:11:05:aa:fc:82:30:3f:db:15:d5:00:f0: b5:8f:38:c0:a2:59:63:45:78:5b:9f:8d:2e:99:b9: a0:18:17:e8:b9:56:02:4e:56:da:4b:ea:66:1b:09: ba:aa:4d:0c:4c:79:f9:4f:0c:0f:ba:a8:dd:82:77: d0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8E:70:01:4F:CE:9D:CF:4D:ED:EE:57:13:0D:B5:B9:71:5D:96:9F X509v3 Authority Key Identifier: keyid:54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:e6:2c:ef:f1:31:2f:f6:a4:24:7d:12:84:00:e2:fc:3b:71: fc:ba:9a:98:d2:87:80:1b:1a:49:05:2d:88:91:8d:b3:01:b9: 95:91:6f:95:23:75:aa:a4:a2:5d:8b:5c:a9:15:86:c4:9b:4d: c2:bd:2d:82:53:d4:34:48:ed:f6:b4:2b:7f:19:31:a0:14:8d: ab:d0:ae:4c:ea:f6:d0:79:a1:62:42:5b:6f:f2:5f:c1:bc:0a: 63:6d:d7:73:53:e5:37:12:96:3f:93:98:81:65:94:4f:04:a4: d4:73:ed:e1:30:48:d5:73:b2:08:70:cd:ef:d2:23:26:75:b6: 0e:bc:fb:bf:88:b9:2e:9d:d9:db:3d:f0:a6:ae:d8:f1:d3:48: 46:31:1b:10:3e:7c:48:3a:89:6c:d5:0b:17:d7:3c:50:a3:14: 1b:5f:26:99:37:ec:cc:95:86:1e:30:77:3c:bc:4d:66:99:63: bb:b7:f7:62:f9:a2:ad:30:38:c9:dd:88:36:94:67:94:f7:7a: 9b:9d:8e:fb:ea:ff:46:43:5a:6a:f0:d3:a6:db:04:73:2d:13: 47:b8:89:7d:f6:a5:40:c8:55:00:25:ad:3c:29:21:ab:e4:8d: 6b:01:bc:42:7d:7c:4c:c7:2c:c6:d3:e2:6e:3c:7e:4e:0d:9a: e5:9c:d3:04 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NDcy QzQwNzQ4Q0RBOUU5QkMwOEVBRTQyNUM2ODI2MTdFOTJFNEEyMB4XDTI2MDExNTAx Mzg1MVoXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoODk4RTcwMDE0RkNFOURD RjRERURFRTU3MTMwREI1Qjk3MTVEOTY5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANzzyLZn69EiUWeCXpsMaMkPwtdFyEamxGRMTagOBz6RQuDaS90d mODmhUKBknaySjNlsOZwr2TkZQtah4SnVnI4BOy8y9y72uZhxl8f1eK+aXz8/D8L 68puARorOgWApDomgcF/zAvxK8m+yI9FPaqHZrLFZGQi4m/303e1nS08l1ZoT6fy KzGyHeLJMB6K75vdMqdx54pRgL/64qIYQ4NdDaU54ZIOJyZlt3wFgMHJ2w0u5aHK +POjyBEPABJJ8bg2B0v9EQWq/IIwP9sV1QDwtY84wKJZY0V4W5+NLpm5oBgX6LlW Ak5W2kvqZhsJuqpNDEx5+U8MD7qo3YJ30EMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSJjnABT86dz03t7lcTDbW5cV2WnzAfBgNVHSMEGDAWgBRUcsQHSM2p6bwI6uQl xoJhfpLkojAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMjEvVkhMRUIwak5xZW04Q09ya0pjYUNZWDZTNUtJLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVkhMRUIwak5xZW04Q09ya0pjYUNZ WDZTNUtJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzIxL1ZITEVCMGpOcWVtOENPcmtKY2FDWVg2UzVLSS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx5izv8TEv9qQkfRKEAOL8O3H8upqY0oeAGxpJBS2IkY2zAbmVkW+V I3WqpKJdi1ypFYbEm03CvS2CU9Q0SO32tCt/GTGgFI2r0K5M6vbQeaFiQltv8l/B vApjbddzU+U3EpY/k5iBZZRPBKTUc+3hMEjVc7IIcM3v0iMmdbYOvPu/iLkundnb PfCmrtjx00hGMRsQPnxIOols1QsX1zxQoxQbXyaZN+zMlYYeMHc8vE1mmWO7t/di +aKtMDjJ3Yg2lGeU93qbnY776v9GQ1pq8NOm2wRzLRNHuIl99qVAyFUAJa08KSGr 5I1rAbxCfXxMxyzG0+JuPH5ODZrlnNME -----END CERTIFICATE-----Generated at Mon Jan 26 11:09:32 2026 by rpki-client