This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
File: heXxjZYxwlh7CU54zdThuGUPTLk.mft (raw, json)
Hash identifier: uY5QQaHqVpHAx/lHO+EpzktAua5aq+WJq18pYP5xcU8=
Subject key identifier: 35:FC:D8:FE:7F:83:87:94:A6:64:EF:FC:4C:2F:EA:9A:70:65:39:30
Authority key identifier: 85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9
Certificate issuer: /CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
Certificate serial: 14
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
Manifest number: 0689
Signing time: Sun 25 Jan 2026 19:47:36 +0000
Manifest this update: Sun 25 Jan 2026 19:47:36 +0000
Manifest next update: Mon 09 Feb 2026 19:47:36 +0000
Files and hashes: 1: AdMaPSay0Od6CcGQlsjG4EWxjjE.roa (hash: 1xmO3h8be8qkvMR/p7ooCKnp8YWzdbU6YzCVP5Wn9PU=)
2: Cgr4vrEXLst_PC27lRgEE70gIf8.roa (hash: 2dBNXR/uqgzbtVj22EcWAf66T634oTntixsOJOO/Q68=)
3: QMzgb68WkMO5sso7QFJH-HR4KZc.roa (hash: SbHkB9DsLhF5GZQRXJaTixDO3UC8Tx/yGn+BoY93eEc=)
4: Qhu-g4bhbS7g2KE8qMH-n_iKn_s.roa (hash: Lvfbo+DDTDxLuvFSKmLk9/dyFX6mGFcoQd6m9Dr00FA=)
5: heXxjZYxwlh7CU54zdThuGUPTLk.crl (hash: N5Y6XWFY0RMVbWBIQi/BCia+78mcYTkjZ+WtmhYjO5Y=)
6: jPunJw3-EXwnD4HV8XvCVsJGLDs.roa (hash: wRy0qJsUy2sPVetIywT0v4LFP3t24hyicVNpMv9CuBc=)
7: yBe6Q0a1e8U2u5vDAidXhvuJxNQ.roa (hash: xbPHknJgKfhnqgPRFUhrwURUsCXzKvDNaiWfOj6teD8=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 23:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
Validity
Not Before: Jan 15 01:30:42 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=35FCD8FE7F838794A664EFFC4C2FEA9A70653930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:29:00:53:b7:7c:96:33:98:60:fd:8d:86:
55:c7:c4:2e:07:bb:be:b4:3a:dd:85:89:bf:8e:b3:
49:51:9a:4b:98:1f:84:22:42:26:1c:1a:8e:1d:ba:
34:8b:9e:04:ad:8f:b3:cc:48:eb:48:1d:0a:c1:e6:
9a:be:8c:5c:66:b1:e9:99:78:50:2e:f4:c2:85:fa:
a0:ea:25:87:0c:fc:f3:7f:6c:5b:93:95:0d:f7:88:
a5:44:8f:35:c3:17:2d:b7:26:9c:d3:fd:0f:9a:20:
05:67:22:41:67:f4:2b:27:6b:9a:e8:fa:1d:29:9d:
7a:25:f5:cf:3c:25:ad:b8:c1:d0:bf:f9:ea:9b:4c:
59:1c:70:10:f4:83:64:18:62:27:4a:91:51:a6:8a:
4e:c6:f0:af:34:23:de:05:a4:d0:c0:9d:65:22:b1:
bb:7a:06:70:ba:f4:ec:d2:0a:e8:69:ae:96:7e:1e:
5e:e9:b5:28:7e:3f:57:88:fc:96:e3:aa:9e:e2:37:
ba:6b:52:53:ef:b2:78:4b:b1:bf:2f:57:71:14:80:
3b:cb:36:02:e1:b3:59:fc:cb:85:ff:03:49:d1:d9:
e1:65:87:c7:a4:78:4f:52:ed:93:20:ed:6a:a9:07:
df:bf:83:0e:b9:84:21:76:e4:c7:bb:4c:f2:07:53:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:D8:FE:7F:83:87:94:A6:64:EF:FC:4C:2F:EA:9A:70:65:39:30
X509v3 Authority Key Identifier:
keyid:85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:5b:61:81:ac:15:e0:c0:6a:b5:82:9a:61:52:e1:97:9b:d9:
20:17:68:d6:64:e3:43:88:cb:ad:72:98:9b:b8:bf:63:c0:0b:
d7:6d:b9:98:e9:02:55:cf:d5:11:2d:6b:43:55:11:0b:39:d8:
49:61:57:26:9c:c8:57:36:2f:a1:a6:93:72:21:94:92:26:5d:
15:a2:30:07:12:96:ba:38:2b:a1:e5:51:d2:e7:78:69:ec:b1:
81:e6:56:56:42:ad:e4:18:51:f1:b8:00:8e:2f:9d:80:e7:55:
76:1b:cb:c0:98:fd:ce:a6:55:85:29:c8:5e:c1:3b:8e:62:62:
19:9f:b7:cd:a0:e1:51:5a:f6:ed:53:ef:c2:da:7c:95:b3:5b:
81:1f:50:8c:70:19:fc:47:53:89:43:a4:21:63:22:fd:fa:8d:
95:39:14:d5:8f:1e:86:0e:48:9b:39:36:bb:6f:8e:14:3f:f7:
04:3c:4d:38:ce:39:2c:92:e3:2b:85:df:41:28:34:67:f5:36:
1a:20:4d:b2:aa:d6:55:ef:d6:91:a8:66:88:d7:47:62:93:a1:
31:6c:8c:7f:0a:fa:70:14:85:d8:4c:58:26:f9:8f:cc:e6:c7:
a6:7b:2a:ab:aa:57:a7:e3:92:5a:f0:88:f3:03:fb:c1:17:45:
2e:64:2b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:04:19 2026 by rpki-client