This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30305/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.mft File: -XAhZ9HK82iRZCyLtiBuvUB9SqQ.mft (raw, json) Hash identifier: b7KQ7TeJ8c1HQPc0eMpiFK4SjwGHQ9exsoXXJasM/14= Subject key identifier: CF:10:97:17:52:EF:D9:BD:B1:0E:3B:25:86:9C:84:7A:84:6E:DA:08 Authority key identifier: F9:70:21:67:D1:CA:F3:68:91:64:2C:8B:B6:20:6E:BD:40:7D:4A:A4 Certificate issuer: /CN=F9702167D1CAF36891642C8BB6206EBD407D4AA4 Certificate serial: 27 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.mft Manifest number: 0925 Signing time: Sat 22 Nov 2025 20:02:27 +0000 Manifest this update: Sat 22 Nov 2025 20:02:27 +0000 Manifest next update: Sun 07 Dec 2025 20:02:27 +0000 Files and hashes: 1: -XAhZ9HK82iRZCyLtiBuvUB9SqQ.crl (hash: SMrV0qh0+eq1jwiXYPt+oaXchkpbLPlxMJFIlm+WVDA=) 2: QmPgkSvdoDDQ09Eb_TH-SP5zAqg.roa (hash: m5zIqflUTQ2KazSyfTQFRFYw7WBrrUkZeFPghXUcxYw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9702167D1CAF36891642C8BB6206EBD407D4AA4 Validity Not Before: Nov 15 01:44:00 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=CF10971752EFD9BDB10E3B25869C847A846EDA08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:42:d5:60:1d:3b:a0:7d:18:ca:db:22:16:1a: 43:ec:12:e4:30:4f:af:39:63:89:92:89:57:d6:56: da:28:af:67:bd:ee:35:9e:3c:4d:c0:85:f6:79:cd: 20:fc:32:73:84:9d:ee:4f:06:b9:05:18:be:20:0d: c3:74:85:40:5a:82:0b:f5:4c:2b:4e:56:14:b6:13: 72:68:c5:f9:13:e9:4f:ae:b4:26:04:34:7d:0a:67: da:5a:ef:73:72:1b:9f:1f:1c:13:39:02:a2:04:7c: 06:79:6f:17:92:9f:30:99:f8:d5:26:cf:97:e9:39: 63:c0:d4:b2:97:bc:36:ea:31:76:33:cb:b2:c1:64: 3d:10:f1:c0:c4:57:f9:77:e3:c6:31:42:20:d1:ed: 72:3a:1f:cd:b8:22:a8:c0:a1:40:bd:51:c8:9e:63: 36:f4:b2:18:05:28:f9:51:7f:e4:64:c8:35:5b:43: bd:a8:cf:b4:da:75:8e:ac:5f:76:5a:cd:6d:3b:33: 2b:3c:90:9a:5e:c4:65:fe:e5:9f:aa:75:8d:c2:ab: 77:a6:5a:6d:aa:b3:fd:63:92:16:b8:de:b5:5b:c4: 33:9c:2f:d9:d3:84:4a:ce:ff:54:5b:d2:c1:1f:77: ac:1d:c8:7e:dd:75:78:43:a9:e8:a6:75:2f:3b:37: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:10:97:17:52:EF:D9:BD:B1:0E:3B:25:86:9C:84:7A:84:6E:DA:08 X509v3 Authority Key Identifier: keyid:F9:70:21:67:D1:CA:F3:68:91:64:2C:8B:B6:20:6E:BD:40:7D:4A:A4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:01:9a:4b:5b:5b:f2:e9:a9:f0:3f:99:5f:ed:91:a0:cc:eb: 68:27:ba:17:af:eb:a8:a9:ac:89:19:23:89:4c:f3:67:f3:9c: 8f:f3:70:22:8b:82:82:1f:ff:ed:63:46:bf:60:ea:11:e2:42: 1f:4d:40:5b:4f:0a:88:bb:a1:25:7d:11:0d:07:98:59:dd:56: 2a:2f:eb:9c:75:f1:a0:6e:78:9c:b8:3d:35:60:de:3a:7f:41: 65:a7:a1:cd:4a:f7:df:40:e3:e6:b3:da:9c:32:41:58:af:02: ce:7e:74:cd:c2:95:2e:1c:76:5b:8b:44:f8:44:47:cf:15:a4: 2b:23:c8:89:00:13:3b:a5:be:f1:03:cd:ba:de:a0:79:e5:fd: a4:ee:ba:67:45:0f:5c:f8:49:10:26:6e:ea:09:b1:b1:67:fd: 28:44:dd:87:5a:28:c3:28:31:27:20:68:5d:4a:58:da:21:5f: bf:1c:c2:e6:a2:94:c0:af:1f:48:06:d4:6c:18:fe:1d:e1:6f: db:61:9d:d6:08:b8:79:7c:26:34:84:70:b3:cd:1a:54:5b:70: f7:ac:f3:c6:02:1e:ba:d3:bd:b1:54:11:97:19:67:7a:1d:03: 8c:12:d0:d0:a7:4a:97:55:d9:f6:b2:81:0a:0d:85:bc:ab:29: 36:13:4f:94 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGOTcw MjE2N0QxQ0FGMzY4OTE2NDJDOEJCNjIwNkVCRDQwN0Q0QUE0MB4XDTI1MTExNTAx NDQwMFoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoQ0YxMDk3MTc1MkVGRDlC REIxMEUzQjI1ODY5Qzg0N0E4NDZFREEwODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANhC1WAdO6B9GMrbIhYaQ+wS5DBPrzljiZKJV9ZW2iivZ73uNZ48 TcCF9nnNIPwyc4Sd7k8GuQUYviANw3SFQFqCC/VMK05WFLYTcmjF+RPpT660JgQ0 fQpn2lrvc3Ibnx8cEzkCogR8BnlvF5KfMJn41SbPl+k5Y8DUspe8NuoxdjPLssFk PRDxwMRX+XfjxjFCINHtcjofzbgiqMChQL1RyJ5jNvSyGAUo+VF/5GTINVtDvajP tNp1jqxfdlrNbTszKzyQml7EZf7ln6p1jcKrd6Zabaqz/WOSFrjetVvEM5wv2dOE Ss7/VFvSwR93rB3Ift11eEOp6KZ1Lzs3VeMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTPEJcXUu/ZvbEOOyWGnIR6hG7aCDAfBgNVHSMEGDAWgBT5cCFn0crzaJFkLIu2 IG69QH1KpDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMDUvLVhBaFo5SEs4MmlSWkN5THRpQnV2VUI5U3FRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLVhBaFo5SEs4MmlSWkN5THRpQnV2 VUI5U3FRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzA1Ly1YQWhaOUhLODJpUlpDeUx0aUJ1dlVCOVNxUS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/AZpLW1vy6anwP5lf7ZGgzOtoJ7oXr+uoqayJGSOJTPNn85yP83Ai i4KCH//tY0a/YOoR4kIfTUBbTwqIu6ElfRENB5hZ3VYqL+ucdfGgbnicuD01YN46 f0Flp6HNSvffQOPms9qcMkFYrwLOfnTNwpUuHHZbi0T4REfPFaQrI8iJABM7pb7x A8263qB55f2k7rpnRQ9c+EkQJm7qCbGxZ/0oRN2HWijDKDEnIGhdSljaIV+/HMLm opTArx9IBtRsGP4d4W/bYZ3WCLh5fCY0hHCzzRpUW3D3rPPGAh66072xVBGXGWd6 HQOMEtDQp0qXVdn2soEKDYW8qyk2E0+U -----END CERTIFICATE-----Generated at Sat Nov 22 21:16:19 2025 by rpki-client