This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.mft File: 8nBk_-QpNs2_WeUUZeAj-uS1r6o.mft (raw, json) Hash identifier: AINM0NA6kjpHktAdKCaiA4I+KGgTdvYNYU9gKb3tEu8= Subject key identifier: 20:0E:05:BD:16:05:55:81:03:7B:2B:24:A8:7D:67:D2:E3:77:1C:E8 Authority key identifier: F2:70:64:FF:E4:29:36:CD:BF:59:E5:14:65:E0:23:FA:E4:B5:AF:AA Certificate issuer: /CN=F27064FFE42936CDBF59E51465E023FAE4B5AFAA Certificate serial: 54 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.mft Manifest number: 09CA Signing time: Sat 22 Nov 2025 19:08:04 +0000 Manifest this update: Sat 22 Nov 2025 19:08:04 +0000 Manifest next update: Sun 07 Dec 2025 19:08:04 +0000 Files and hashes: 1: 8nBk_-QpNs2_WeUUZeAj-uS1r6o.crl (hash: JLfoll7t+zj6r9WGi+rCs8Hg43f4dJBvIsj+LhSOsRE=) 2: _8DiXkJpKe6nGdssVkSQ-OMrqsU.roa (hash: hTumoPyFBwQnMRQVVAoPCvoGToMx6Zm6xgS/Va17ULY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F27064FFE42936CDBF59E51465E023FAE4B5AFAA Validity Not Before: Nov 15 01:33:15 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=200E05BD16055581037B2B24A87D67D2E3771CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d1:22:12:25:88:a5:3f:ac:9b:f7:3c:9a:70: d4:63:88:aa:45:57:07:3e:2b:c5:64:8e:58:4d:0e: 79:71:9e:22:23:32:3b:0f:9c:3a:a3:a8:05:60:76: 76:df:a9:29:72:1c:dc:2b:1e:00:de:db:6d:62:28: 99:ff:5c:25:91:3a:dc:62:0a:91:7a:59:7e:88:33: 3a:ac:f0:bc:58:43:fd:08:64:b9:13:cd:2d:56:1e: d8:d8:9e:32:a1:07:1e:fd:8b:36:70:be:15:07:d0: f2:4b:17:f7:e4:63:95:17:24:0a:39:e8:87:d7:1b: df:4d:db:eb:63:fc:cb:02:bf:92:e2:27:76:90:43: 1c:88:0d:71:e9:fc:55:85:f3:29:ff:8e:14:ed:b8: 93:db:af:0f:d3:77:37:fb:f6:bb:09:36:1c:b4:4c: 62:ce:0e:6b:ef:f2:0c:be:a3:f1:29:36:14:07:ff: aa:26:3a:8f:a4:e8:c7:a4:a9:6c:22:05:1d:f8:0b: c1:f5:2f:fb:28:88:43:e3:88:6f:04:b2:2a:ca:5f: ef:98:8d:10:b3:61:7c:5f:44:62:51:9c:94:b8:ab: b6:f9:e4:37:2f:b0:79:f5:a1:93:0e:cd:6e:57:46: 1c:02:17:f5:fe:4b:b7:6e:f1:e0:1d:65:f7:34:37: df:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0E:05:BD:16:05:55:81:03:7B:2B:24:A8:7D:67:D2:E3:77:1C:E8 X509v3 Authority Key Identifier: keyid:F2:70:64:FF:E4:29:36:CD:BF:59:E5:14:65:E0:23:FA:E4:B5:AF:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:a4:b4:c3:71:0f:e5:73:74:de:a3:38:6e:8b:6b:0f:79:fa: 9d:ce:f6:1a:e8:8c:f1:c3:f8:56:c2:ed:3d:ce:7b:5c:0c:77: db:e2:39:83:cc:b6:12:71:13:a0:fc:b7:51:2f:84:4a:69:7a: 19:21:db:11:09:84:81:c4:a9:d0:75:5f:c0:d6:aa:da:6a:90: d5:6c:0a:83:2b:32:1f:d3:9f:4b:17:1d:a3:9d:c8:56:03:a2: 7c:a0:a0:62:5b:02:04:26:06:78:78:04:8d:f7:c2:20:f5:cb: b0:13:25:28:ab:f0:d7:18:48:88:6f:e9:6a:b0:72:4b:7f:64: 75:0b:6f:b7:ef:5e:88:d5:77:f3:65:56:87:c9:1f:13:06:07: d3:9f:88:a3:f8:1a:19:c8:eb:b2:fb:c5:21:88:14:06:4b:7c: af:20:ff:a9:8a:7a:63:c4:c8:ff:b6:7e:9d:ff:d2:e4:e9:f2: c7:9e:08:6b:6d:59:b7:31:3d:d8:fa:9c:ef:59:7a:3b:32:f0: df:23:07:7d:05:43:02:94:55:20:b1:2c:24:50:cf:4d:e5:60: 23:d7:8e:04:1b:7f:b7:73:cc:e5:06:33:28:7d:0c:f8:4e:d4: 49:cf:92:a3:bb:ae:65:76:48:cf:f4:77:bc:d6:4f:7f:97:4e: 9e:ba:18:98 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMjcw NjRGRkU0MjkzNkNEQkY1OUU1MTQ2NUUwMjNGQUU0QjVBRkFBMB4XDTI1MTExNTAx MzMxNVoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoMjAwRTA1QkQxNjA1NTU4 MTAzN0IyQjI0QTg3RDY3RDJFMzc3MUNFODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMjRIhIliKU/rJv3PJpw1GOIqkVXBz4rxWSOWE0OeXGeIiMyOw+c OqOoBWB2dt+pKXIc3CseAN7bbWIomf9cJZE63GIKkXpZfogzOqzwvFhD/QhkuRPN LVYe2NieMqEHHv2LNnC+FQfQ8ksX9+RjlRckCjnoh9cb303b62P8ywK/kuIndpBD HIgNcen8VYXzKf+OFO24k9uvD9N3N/v2uwk2HLRMYs4Oa+/yDL6j8Sk2FAf/qiY6 j6Tox6SpbCIFHfgLwfUv+yiIQ+OIbwSyKspf75iNELNhfF9EYlGclLirtvnkNy+w efWhkw7NbldGHAIX9f5Lt27x4B1l9zQ332sCAwEAAaOCAkUwggJBMB0GA1UdDgQW BBQgDgW9FgVVgQN7KySofWfS43cc6DAfBgNVHSMEGDAWgBTycGT/5Ck2zb9Z5RRl 4CP65LWvqjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGA1UdHwRjMGEwX6Bd oFuGWXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMDAzMDExMy84bkJrXy1RcE5zMl9XZVVVWmVBai11UzFyNm8uY3JsMG0G CCsGAQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRv cnkubmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC84bkJrXy1RcE5zMl9XZVVVWmVB ai11UzFyNm8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvwYIKwYBBQUHAQsEgbIwga8w ZQYIKwYBBQUHMAuGWXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9h cC9BOTFBNzM4MTAwMDAvMDAzMDExMy84bkJrXy1RcE5zMl9XZVVVWmVBai11UzFy Nm8ubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMu YWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAKaS0w3EP5XN03qM4botrD3n6nc72GuiM8cP4VsLtPc57XAx3 2+I5g8y2EnEToPy3US+ESml6GSHbEQmEgcSp0HVfwNaq2mqQ1WwKgysyH9OfSxcd o53IVgOifKCgYlsCBCYGeHgEjffCIPXLsBMlKKvw1xhIiG/parByS39kdQtvt+9e iNV382VWh8kfEwYH05+Io/gaGcjrsvvFIYgUBkt8ryD/qYp6Y8TI/7Z+nf/S5Ony x54Ia21ZtzE92Pqc71l6OzLw3yMHfQVDApRVILEsJFDPTeVgI9eOBBt/t3PM5QYz KH0M+E7USc+So7uuZXZIz/R3vNZPf5dOnroYmA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:14:25 2025 by rpki-client