This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft File: NaqlmFHjkt-JLly3q-YiUWWuyJc.mft (raw, json) Hash identifier: j3jURj6jr8GUntnJi65koyr9qlx+ZX8XmpJFnQWprNo= Subject key identifier: A2:06:FD:E9:F6:B3:F5:C4:1E:11:44:EC:14:43:F2:F8:1D:E4:87:CF Authority key identifier: 35:AA:A5:98:51:E3:92:DF:89:2E:5C:B7:AB:E6:22:51:65:AE:C8:97 Certificate issuer: /CN=35AAA59851E392DF892E5CB7ABE6225165AEC897 Certificate serial: 2F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft Manifest number: 0948 Signing time: Sat 22 Nov 2025 20:04:27 +0000 Manifest this update: Sat 22 Nov 2025 20:04:27 +0000 Manifest next update: Sun 07 Dec 2025 20:04:27 +0000 Files and hashes: 1: CtgX_NzVdLr-hFq4oahW4ObXvD0.roa (hash: F4KdnOCv+y2DHyMy1llZ3D6YHtL1g3hYzOGlk3T8nik=) 2: NaqlmFHjkt-JLly3q-YiUWWuyJc.crl (hash: NEO5f61ZQSu0xf0Ets3rZuwxg2OBY4VrLGCjWAE8OpY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AAA59851E392DF892E5CB7ABE6225165AEC897 Validity Not Before: Nov 15 01:41:02 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=A206FDE9F6B3F5C41E1144EC1443F2F81DE487CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:01:4e:1d:25:0d:12:d3:1a:ba:01:07:b4: 2d:0c:60:ce:43:5f:1a:1e:58:ac:1c:de:4a:78:34: 87:e3:6f:ae:de:f4:2a:84:15:85:26:68:f6:85:69: 0b:e3:48:93:8b:1c:77:57:2f:79:a6:f9:01:02:33: 10:9f:17:7c:8b:0c:71:14:ad:3d:5e:d6:b7:3f:03: 30:b1:56:5c:3f:ac:a6:37:4a:e2:9e:dc:2b:46:15: 10:75:ea:50:60:3a:27:0d:f1:45:84:93:b1:23:3f: 9c:6f:a7:a7:c1:b5:c2:93:08:fb:6b:59:13:c2:51: e7:f7:92:f7:81:f2:c0:fd:34:79:91:dd:05:0d:94: 6d:53:e5:68:49:52:91:6f:fa:07:39:92:af:b6:f4: f9:78:cd:c9:52:67:00:f9:ea:e4:0b:f5:8b:27:2a: 50:2e:7a:a2:31:2e:8d:8c:91:a8:ae:af:c0:04:15: 65:24:c7:69:bb:f3:94:65:e7:81:2e:2e:9d:a3:fe: 0b:38:f4:14:30:dd:25:ec:ba:ce:9d:9f:d7:73:a6: ff:e0:af:85:52:75:8d:2f:21:25:75:72:8b:c9:71: 42:7c:2d:d9:9a:d6:f1:ec:24:3e:4c:46:44:1c:5a: 06:29:be:ac:46:b8:ac:2d:41:3a:23:f7:f6:58:36: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:06:FD:E9:F6:B3:F5:C4:1E:11:44:EC:14:43:F2:F8:1D:E4:87:CF X509v3 Authority Key Identifier: keyid:35:AA:A5:98:51:E3:92:DF:89:2E:5C:B7:AB:E6:22:51:65:AE:C8:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:0d:2e:56:90:1a:4c:54:ec:b3:7b:fc:25:b3:a8:c7:c3:aa: a5:0b:87:e2:16:8e:2f:cb:35:3c:f4:17:90:08:33:62:c6:1d: f4:79:00:4b:8b:c0:c0:dc:11:7a:ac:2f:dc:56:3e:48:d3:b3: f9:e8:1c:2b:29:00:38:ad:5a:81:7f:70:ab:5a:6d:6e:d9:3a: 8f:89:ac:33:6d:1b:10:f8:41:51:56:31:53:4e:0b:41:00:b3: 26:31:60:b6:49:fd:a5:cd:d7:38:a5:8a:ad:a0:fa:e5:e0:5c: 0d:b4:62:7c:97:76:b2:29:a5:8b:ce:e2:b3:43:fe:2f:02:66: 08:63:9d:62:57:90:e4:47:a6:d4:89:d4:57:d3:94:06:b8:5c: 3b:44:eb:b6:05:8f:f4:60:37:90:4f:be:50:16:08:f5:62:72: 89:e1:6c:90:60:ee:7f:b3:42:ef:ac:bb:80:cf:27:a6:bb:87: df:19:0b:06:50:56:b7:a6:2d:bf:35:d1:70:f3:7d:da:99:77: 76:e0:3d:55:63:ff:73:e1:f8:09:e6:23:30:2d:cb:2b:f7:80: 0f:47:25:5d:cd:c0:42:24:ec:c1:2f:c6:94:53:c2:a0:54:c4: 31:a2:9e:d6:59:a7:5d:5e:33:e5:a8:c2:b1:6f:5c:b2:a1:86: 63:2e:6a:33 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNUFB QTU5ODUxRTM5MkRGODkyRTVDQjdBQkU2MjI1MTY1QUVDODk3MB4XDTI1MTExNTAx NDEwMloXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoQTIwNkZERTlGNkIzRjVD NDFFMTE0NEVDMTQ0M0YyRjgxREU0ODdDRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK1KAU4dJQ0S0xq6AQe0LQxgzkNfGh5YrBzeSng0h+Nvrt70KoQV hSZo9oVpC+NIk4scd1cveab5AQIzEJ8XfIsMcRStPV7Wtz8DMLFWXD+spjdK4p7c K0YVEHXqUGA6Jw3xRYSTsSM/nG+np8G1wpMI+2tZE8JR5/eS94HywP00eZHdBQ2U bVPlaElSkW/6BzmSr7b0+XjNyVJnAPnq5Av1iycqUC56ojEujYyRqK6vwAQVZSTH abvzlGXngS4unaP+Czj0FDDdJey6zp2f13Om/+CvhVJ1jS8hJXVyi8lxQnwt2ZrW 8ewkPkxGRBxaBim+rEa4rC1BOiP39lg2dj8CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSiBv3p9rP1xB4RROwUQ/L4HeSHzzAfBgNVHSMEGDAWgBQ1qqWYUeOS34kuXLer 5iJRZa7IlzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MTIvTmFxbG1GSGprdC1KTGx5M3EtWWlVV1d1eUpjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTmFxbG1GSGprdC1KTGx5M3EtWWlV V1d1eUpjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDEyL05hcWxtRkhqa3QtSkxseTNxLVlpVVdXdXlKYy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2DS5WkBpMVOyze/wls6jHw6qlC4fiFo4vyzU89BeQCDNixh30eQBL i8DA3BF6rC/cVj5I07P56BwrKQA4rVqBf3CrWm1u2TqPiawzbRsQ+EFRVjFTTgtB ALMmMWC2Sf2lzdc4pYqtoPrl4FwNtGJ8l3ayKaWLzuKzQ/4vAmYIY51iV5DkR6bU idRX05QGuFw7ROu2BY/0YDeQT75QFgj1YnKJ4WyQYO5/s0LvrLuAzyemu4ffGQsG UFa3pi2/NdFw833amXd24D1VY/9z4fgJ5iMwLcsr94APRyVdzcBCJOzBL8aUU8Kg VMQxop7WWaddXjPlqMKxb1yyoYZjLmoz -----END CERTIFICATE-----Generated at Sat Nov 22 21:16:40 2025 by rpki-client