This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.mft File: nhRg0miPbRBouXwfkUBAQ0uPAyQ.mft (raw, json) Hash identifier: Vn7rUC2e8MMC9Z1xzXso/SeadmAoqqBj9UJnQxSiLXY= Subject key identifier: 81:5B:82:09:6E:DF:10:59:95:95:2F:64:7D:A7:3D:9D:A5:E7:73:2F Authority key identifier: 9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24 Certificate issuer: /CN=9E1460D2688F6D1068B97C1F914040434B8F0324 Certificate serial: 51 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.mft Manifest number: 09D2 Signing time: Sat 22 Nov 2025 19:29:40 +0000 Manifest this update: Sat 22 Nov 2025 19:29:40 +0000 Manifest next update: Sun 07 Dec 2025 19:29:40 +0000 Files and hashes: 1: 7PaQZjqCefRmWBL5iT2SRqUNRaE.roa (hash: DNVuYVrHHjsJYxFSEJRBP/a/TFRgzleETEzN0/BUIMU=) 2: nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl (hash: ihldbG0jgwCR/IhxV83qs8mljRFqj8I0n2jmFmQu1UI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 15:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E1460D2688F6D1068B97C1F914040434B8F0324 Validity Not Before: Nov 15 01:39:11 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=815B82096EDF105995952F647DA73D9DA5E7732F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3d:91:3f:af:cb:f6:08:62:90:26:92:c7:8f: b9:d8:2f:a4:06:53:b7:fe:b9:86:fd:f8:0d:60:51: 29:2c:6f:a3:b1:fb:67:5d:a7:83:52:cc:14:94:50: fe:db:84:ad:db:ec:b4:6a:46:82:71:0b:df:70:dd: 6b:ee:4a:5b:b7:3d:6e:5c:b5:3f:79:ce:11:2b:56: f7:fa:49:00:0d:cf:97:88:d5:07:3d:4f:ae:85:4b: 7c:44:ee:32:68:97:db:c0:da:e5:05:ce:3a:08:99: 79:0d:e1:c8:e7:7a:c6:9f:9e:31:d7:59:72:60:15: 27:c1:e8:0b:12:0a:bb:48:72:c7:36:45:58:c2:d9: 58:3b:07:b6:5e:c1:b5:d7:f9:b1:5b:b4:06:ba:4e: 49:e1:3b:7c:65:ed:9b:6e:71:11:39:31:ef:20:11: 27:5c:20:18:08:41:66:50:89:c4:6f:9b:e2:1d:03: 49:91:4b:eb:13:97:53:d4:31:aa:27:0f:2e:51:b1: 7f:79:44:b8:7f:9d:f4:77:43:ef:b3:9f:2b:57:35: 81:45:86:09:d7:89:ba:d8:39:7a:73:88:a5:bf:68: 34:54:dd:f0:2b:d7:1d:73:ea:78:7d:3a:44:ac:00: c5:f8:16:db:1b:6f:dd:ac:cc:53:c0:06:7e:72:8b: 4a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5B:82:09:6E:DF:10:59:95:95:2F:64:7D:A7:3D:9D:A5:E7:73:2F X509v3 Authority Key Identifier: keyid:9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:21:ae:83:0a:ec:88:cf:6f:6e:87:fe:bd:eb:62:c8:1e:61: f4:b1:06:5b:af:8b:69:ab:1b:ef:f6:62:14:17:b7:01:fe:78: 93:d7:ff:b0:fe:c0:d9:03:cc:34:fb:76:c1:d6:36:f2:6c:fc: 9b:37:71:3c:aa:1f:2d:9e:d0:bb:e6:af:17:1a:4a:a2:f9:d4: 2d:71:0b:7e:a5:9c:67:7c:0c:8c:5c:f7:be:1e:22:1e:c0:d0: de:ac:72:11:5f:65:5b:79:2d:2c:2a:5b:7c:87:b6:36:0a:36: 69:0a:08:52:f1:4b:f7:94:87:fa:27:26:47:89:72:c4:72:25: 24:e6:ed:7d:ef:0a:75:d5:67:5e:43:14:e4:92:1b:3d:1c:f2: 47:72:21:5f:fd:95:8d:8a:b0:4a:03:8f:a6:2f:37:30:cc:14: 3c:31:07:47:9f:17:30:4c:5e:c8:cd:f3:7d:50:31:bf:b4:be: 9a:ef:8d:12:05:6e:77:1d:1a:6e:9e:f9:a6:07:e6:36:5d:6f: 53:70:4e:29:07:a5:d8:41:88:43:cb:e6:bc:e0:08:7c:0c:b3: 79:89:17:ee:2d:2c:65:3b:35:db:5e:53:e0:9d:58:48:7c:81: d6:04:31:1b:e3:64:14:5b:c9:a8:d8:61:39:eb:82:03:e3:d5: 4c:81:1e:fa -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTE0 NjBEMjY4OEY2RDEwNjhCOTdDMUY5MTQwNDA0MzRCOEYwMzI0MB4XDTI1MTExNTAx MzkxMVoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoODE1QjgyMDk2RURGMTA1 OTk1OTUyRjY0N0RBNzNEOURBNUU3NzMyRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANw9kT+vy/YIYpAmksePudgvpAZTt/65hv34DWBRKSxvo7H7Z12n g1LMFJRQ/tuErdvstGpGgnEL33Dda+5KW7c9bly1P3nOEStW9/pJAA3Pl4jVBz1P roVLfETuMmiX28Da5QXOOgiZeQ3hyOd6xp+eMddZcmAVJ8HoCxIKu0hyxzZFWMLZ WDsHtl7Btdf5sVu0BrpOSeE7fGXtm25xETkx7yARJ1wgGAhBZlCJxG+b4h0DSZFL 6xOXU9QxqicPLlGxf3lEuH+d9HdD77OfK1c1gUWGCdeJutg5enOIpb9oNFTd8CvX HXPqeH06RKwAxfgW2xtv3azMU8AGfnKLSmECAwEAAaOCAj8wggI7MB0GA1UdDgQW BBSBW4IJbt8QWZWVL2R9pz2dpedzLzAfBgNVHSMEGDAWgBSeFGDSaI9tEGi5fB+R QEBDS48DJDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjI1MS9uaFJnMG1pUGJSQm91WHdma1VCQVEwdVBBeVEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9uaFJnMG1pUGJSQm91WHdma1VCQVEw dVBBeVEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjI1MS9uaFJnMG1pUGJSQm91WHdma1VCQVEwdVBBeVEubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAPyGugwrsiM9vbof+vetiyB5h9LEGW6+Laasb7/ZiFBe3Af54k9f/sP7A 2QPMNPt2wdY28mz8mzdxPKofLZ7Qu+avFxpKovnULXELfqWcZ3wMjFz3vh4iHsDQ 3qxyEV9lW3ktLCpbfIe2Ngo2aQoIUvFL95SH+icmR4lyxHIlJObtfe8KddVnXkMU 5JIbPRzyR3IhX/2VjYqwSgOPpi83MMwUPDEHR58XMExeyM3zfVAxv7S+mu+NEgVu dx0abp75pgfmNl1vU3BOKQel2EGIQ8vmvOAIfAyzeYkX7i0sZTs1215T4J1YSHyB 1gQxG+NkFFvJqNhhOeuCA+PVTIEe+g== -----END CERTIFICATE-----Generated at Sat Nov 22 21:50:14 2025 by rpki-client