This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft File: OmLEe2ORFPaCyeWihWvA-cM-xkg.mft (raw, json) Hash identifier: cIa5dIueMZ1DdBVZEPXECQZNKibZPRRVynU8X2YCg8g= Subject key identifier: 2B:BE:FA:32:98:23:BA:2A:5C:09:D9:A4:CB:69:0D:A3:7A:76:B7:7A Authority key identifier: 3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48 Certificate issuer: /CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648 Certificate serial: 03 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft Manifest number: 3A Signing time: Sat 22 Nov 2025 19:43:04 +0000 Manifest this update: Sat 22 Nov 2025 19:43:04 +0000 Manifest next update: Sun 07 Dec 2025 19:43:04 +0000 Files and hashes: 1: NDGfuEmDvaCi_GhO61N8J2K1Xng.roa (hash: dsvd77mJ+RQNbqFsTYqI0Pl1NiaCRuf12fOpfk16lNY=) 2: OmLEe2ORFPaCyeWihWvA-cM-xkg.crl (hash: 6NZG2rHT/OGpcOVisCFcWLo4i+dIavPdhUV7Q69wFVY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 15:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648 Validity Not Before: Nov 15 01:31:21 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=2BBEFA329823BA2A5C09D9A4CB690DA37A76B77A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:3f:36:cd:44:6c:56:f5:2b:3f:47:d1:57: ff:e7:74:de:11:8f:fa:81:32:c9:96:25:73:7b:46: 58:cf:ec:0e:e7:b5:3e:9e:1a:78:70:e0:2f:16:87: b9:a1:06:07:20:12:7e:01:fa:a9:11:bf:0f:bd:a0: 33:84:87:e6:58:d4:05:63:3a:ba:dd:1c:f8:ca:6e: cb:f0:5e:d9:82:ee:2e:c5:86:b7:4a:be:e0:ed:17: 76:81:59:36:05:53:fe:8b:35:88:91:8a:ac:df:d4: ea:5f:c9:2e:d9:e8:18:89:69:0b:86:30:67:5e:eb: 9e:ff:fc:18:60:13:50:05:e2:c7:f9:06:62:c3:80: 32:d3:1c:b5:7a:d0:91:c6:46:6d:8e:fc:6a:f0:e4: f6:15:49:ff:94:f5:f8:f2:81:f4:3e:f4:ce:34:1b: d2:ac:5a:02:23:9b:8b:1e:be:d2:3b:39:20:56:60: aa:cc:23:f2:e7:8d:ef:2c:c7:14:d4:0a:88:a4:c5: cd:83:28:6d:19:c0:a6:dd:cb:11:44:61:e1:bf:4a: 6b:17:c1:ef:56:58:78:e4:9e:25:99:3d:94:72:09: 0c:c1:fc:f6:53:55:50:37:53:fb:0c:6a:13:5d:7a: 0e:d3:42:44:2f:39:7c:82:aa:d9:25:2d:9d:ae:a1: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BE:FA:32:98:23:BA:2A:5C:09:D9:A4:CB:69:0D:A3:7A:76:B7:7A X509v3 Authority Key Identifier: keyid:3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:eb:dc:7e:35:85:ce:58:b4:49:5a:80:90:53:8d:04:f4:12: b9:5c:87:9f:63:b2:92:5e:91:13:ea:cb:6a:56:9d:5e:a2:77: f1:b9:b3:2c:6e:6b:4c:6c:ca:20:12:00:8f:62:01:50:e3:23: d9:3d:eb:b8:a9:10:dd:40:88:29:25:89:51:43:70:6c:70:a9: 6f:dc:89:b6:42:5e:a2:6d:99:fa:66:81:a4:42:d4:05:2d:b1: d4:b1:1a:7e:3e:a0:c1:8c:26:82:21:37:b4:3a:60:34:d2:4c: f5:b7:2f:f2:e0:d8:86:71:9d:7a:ab:70:3c:5f:13:70:90:3b: df:f0:6e:c0:b0:36:49:c5:16:b0:96:25:a5:cc:8e:df:62:c0: ae:96:66:a8:c9:4f:45:cd:56:30:02:8f:3b:99:d5:38:02:d4: b4:45:f5:48:0d:a5:43:d9:23:84:f3:0d:ff:b8:a5:0e:77:f9: 5b:9e:57:2c:c8:ff:9c:76:0d:dc:02:6c:b7:8e:29:14:b9:0d: 63:af:b8:46:d8:86:b7:89:b9:9d:4a:c8:03:8c:ec:36:d3:68: 15:27:4f:24:c2:89:32:20:5d:34:21:97:f7:2e:78:16:96:69: ef:7c:c5:5e:12:75:77:42:87:f4:7d:90:d3:7e:6c:45:b3:e5: 58:f0:f6:fc -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQTYy QzQ3QjYzOTExNEY2ODJDOUU1QTI4NTZCQzBGOUMzM0VDNjQ4MB4XDTI1MTExNTAx MzEyMVoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoMkJCRUZBMzI5ODIzQkEy QTVDMDlEOUE0Q0I2OTBEQTM3QTc2Qjc3QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALquPzbNRGxW9Ss/R9FX/+d03hGP+oEyyZYlc3tGWM/sDue1Pp4a eHDgLxaHuaEGByASfgH6qRG/D72gM4SH5ljUBWM6ut0c+Mpuy/Be2YLuLsWGt0q+ 4O0XdoFZNgVT/os1iJGKrN/U6l/JLtnoGIlpC4YwZ17rnv/8GGATUAXix/kGYsOA MtMctXrQkcZGbY78avDk9hVJ/5T1+PKB9D70zjQb0qxaAiObix6+0js5IFZgqswj 8ueN7yzHFNQKiKTFzYMobRnApt3LEURh4b9KaxfB71ZYeOSeJZk9lHIJDMH89lNV UDdT+wxqE116DtNCRC85fIKq2SUtna6hNFUCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQrvvoymCO6KlwJ2aTLaQ2jena3ejAfBgNVHSMEGDAWgBQ6YsR7Y5EU9oLJ5aKF a8D5wz7GSDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyODIvT21MRWUyT1JGUGFDeWVXaWhXdkEtY00teGtnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT21MRWUyT1JGUGFDeWVXaWhXdkEt Y00teGtnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjgyL09tTEVlMk9SRlBhQ3llV2loV3ZBLWNNLXhrZy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq69x+NYXOWLRJWoCQU40E9BK5XIefY7KSXpET6stqVp1eonfxubMs bmtMbMogEgCPYgFQ4yPZPeu4qRDdQIgpJYlRQ3BscKlv3Im2Ql6ibZn6ZoGkQtQF LbHUsRp+PqDBjCaCITe0OmA00kz1ty/y4NiGcZ16q3A8XxNwkDvf8G7AsDZJxRaw liWlzI7fYsCulmaoyU9FzVYwAo87mdU4AtS0RfVIDaVD2SOE8w3/uKUOd/lbnlcs yP+cdg3cAmy3jikUuQ1jr7hG2Ia3ibmdSsgDjOw202gVJ08kwokyIF00IZf3LngW lmnvfMVeEnV3Qof0fZDTfmxFs+VY8Pb8 -----END CERTIFICATE-----Generated at Sat Nov 22 21:41:11 2025 by rpki-client