This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft File: xcyVkpEJeSOm9C2PZXuQugMuX28.mft (raw, json) Hash identifier: +ea5g3MfCTMDXI57vRd6BSBboHg4DTc391O7X9PZReE= Subject key identifier: 70:F7:76:85:1E:8F:32:32:34:33:06:8C:61:55:79:49:63:FD:EA:70 Authority key identifier: C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F Certificate issuer: /CN=C5CC959291097923A6F42D8F657B90BA032E5F6F Certificate serial: 3D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft Manifest number: 0979 Signing time: Sat 22 Nov 2025 19:29:53 +0000 Manifest this update: Sat 22 Nov 2025 19:29:53 +0000 Manifest next update: Sun 07 Dec 2025 19:29:53 +0000 Files and hashes: 1: 7tCGDj_HwkjxzoQxPdnK6diEFCU.roa (hash: bT1jetR3igdWmDJjkidT06s86Ch24IhqmIgSvAAkBJ0=) 2: xcyVkpEJeSOm9C2PZXuQugMuX28.crl (hash: HDFVK/zWnkwSdQByx3vr0JUKR9QGp7ctnZ7gjBJXJdE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CC959291097923A6F42D8F657B90BA032E5F6F Validity Not Before: Nov 15 01:34:21 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=70F776851E8F32323433068C6155794963FDEA70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:9b:1d:ee:bb:69:c6:3b:dd:9c:ae:d4:eb: 7a:e2:eb:8d:70:03:58:c6:73:74:45:08:36:28:bf: b7:4b:5e:de:21:b7:87:e6:e3:fc:78:6d:f0:d0:76: 06:1b:58:6e:22:ba:88:e3:d4:b3:ce:9c:17:ac:01: 8e:6c:5c:45:b5:a0:26:3f:d6:6d:d4:42:88:b1:59: 8d:82:c3:14:6b:62:16:19:47:b2:a9:4e:e6:84:72: a0:ce:87:9f:13:91:28:4b:fb:a6:90:1c:d2:b2:80: 96:60:be:9d:19:1f:27:c1:cd:34:34:3d:e3:d0:be: 30:92:aa:9e:0c:d4:96:10:23:0d:ba:8c:54:d1:07: c8:ec:60:06:41:11:3b:ab:3d:86:fe:f9:89:7a:c6: 9c:d2:af:c3:60:2b:32:6d:ef:e0:8a:2a:26:25:d2: 9b:57:ea:d9:08:e1:ee:a6:a8:c5:b9:46:cc:c7:24: 8d:91:63:3a:eb:a5:7d:f0:4d:c6:44:b8:86:8f:79: 4b:ce:8a:7f:61:db:7c:05:5f:2e:7c:77:2b:7c:eb: 1b:f3:c5:25:bd:a4:aa:5f:7b:34:b6:60:e9:a7:b7: 38:24:1b:31:51:22:80:84:3b:94:e7:5f:b0:b3:d5: 92:80:e6:88:2a:b8:fa:84:15:64:6e:6b:e3:24:b3: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F7:76:85:1E:8F:32:32:34:33:06:8C:61:55:79:49:63:FD:EA:70 X509v3 Authority Key Identifier: keyid:C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:20:84:6d:09:90:f1:e9:ef:6d:e7:25:73:55:3e:01:ee:56: 52:40:95:28:18:66:a0:05:88:21:6f:8c:99:b5:81:ee:4c:dd: 1a:6c:15:da:66:72:aa:d3:5d:40:a3:ec:b6:72:7f:e8:93:a4: f3:56:4f:45:f3:98:b8:28:fb:39:dd:0a:d5:66:89:f2:d3:a5: ef:56:5d:c9:69:9c:4e:9f:fb:d3:30:c5:e0:cb:49:64:58:83: 52:47:22:49:2c:0b:9e:9a:09:94:d7:90:be:e1:2d:7a:48:cc: e4:45:af:35:c7:1e:da:e5:ba:60:3e:e1:f5:50:be:43:37:b5: 28:f5:1b:dd:cd:88:f1:b5:32:37:81:d9:4f:b0:b0:15:48:89: 37:2a:1b:fe:3d:18:8a:a4:56:68:ec:b0:57:4d:b2:21:4c:bb: 8f:1c:fe:6f:f4:cc:ca:1a:7b:c0:14:a8:ae:d8:eb:41:40:09: 0f:0d:db:81:78:6a:3b:88:93:44:16:22:e8:da:84:1f:65:c7: 74:3a:3f:02:b3:18:c3:63:b0:c4:d6:c1:e8:e6:8d:58:75:a6: f6:4f:7a:e6:21:07:2d:95:e2:39:77:df:de:1a:6d:e9:7d:7d: c9:d3:66:2f:ea:48:27:b7:55:3a:f8:28:6e:99:88:10:f9:78: 1e:4f:10:d3 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNUND OTU5MjkxMDk3OTIzQTZGNDJEOEY2NTdCOTBCQTAzMkU1RjZGMB4XDTI1MTExNTAx MzQyMVoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoNzBGNzc2ODUxRThGMzIz MjM0MzMwNjhDNjE1NTc5NDk2M0ZERUE3MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALfMmx3uu2nGO92crtTreuLrjXADWMZzdEUINii/t0te3iG3h+bj /Hht8NB2BhtYbiK6iOPUs86cF6wBjmxcRbWgJj/WbdRCiLFZjYLDFGtiFhlHsqlO 5oRyoM6HnxORKEv7ppAc0rKAlmC+nRkfJ8HNNDQ949C+MJKqngzUlhAjDbqMVNEH yOxgBkERO6s9hv75iXrGnNKvw2ArMm3v4IoqJiXSm1fq2Qjh7qaoxblGzMckjZFj OuulffBNxkS4ho95S86Kf2HbfAVfLnx3K3zrG/PFJb2kql97NLZg6ae3OCQbMVEi gIQ7lOdfsLPVkoDmiCq4+oQVZG5r4ySz+JMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRw93aFHo8yMjQzBoxhVXlJY/3qcDAfBgNVHSMEGDAWgBTFzJWSkQl5I6b0LY9l e5C6Ay5fbzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNjAveGN5VmtwRUplU09tOUMyUFpYdVF1Z011WDI4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveGN5VmtwRUplU09tOUMyUFpYdVF1 Z011WDI4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDYwL3hjeVZrcEVKZVNPbTlDMlBaWHVRdWdNdVgyOC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyIIRtCZDx6e9t5yVzVT4B7lZSQJUoGGagBYghb4yZtYHuTN0abBXa ZnKq011Ao+y2cn/ok6TzVk9F85i4KPs53QrVZony06XvVl3JaZxOn/vTMMXgy0lk WINSRyJJLAuemgmU15C+4S16SMzkRa81xx7a5bpgPuH1UL5DN7Uo9RvdzYjxtTI3 gdlPsLAVSIk3Khv+PRiKpFZo7LBXTbIhTLuPHP5v9MzKGnvAFKiu2OtBQAkPDduB eGo7iJNEFiLo2oQfZcd0Oj8CsxjDY7DE1sHo5o1Ydab2T3rmIQctleI5d9/eGm3p fX3J02Yv6kgnt1U6+ChumYgQ+XgeTxDT -----END CERTIFICATE-----Generated at Sat Nov 22 21:14:11 2025 by rpki-client