This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.mft File: XssWWq18PBQ8wvhOR3XlnZ19lPk.mft (raw, json) Hash identifier: Dhppb5PknMhEyIS3BhJXg+JTJOYl1Cvtqu/TPMRLZZA= Subject key identifier: 0C:FE:69:7B:B0:A7:98:1F:C7:27:4F:AB:FE:F5:42:A0:F7:E9:D3:1C Authority key identifier: 5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9 Certificate issuer: /CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9 Certificate serial: 3B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.mft Manifest number: 0A19 Signing time: Mon 22 Dec 2025 11:49:14 +0000 Manifest this update: Mon 22 Dec 2025 11:49:14 +0000 Manifest next update: Tue 06 Jan 2026 11:49:14 +0000 Files and hashes: 1: 0qCvyxW8FniM2_gvT_9mi6BDEcI.roa (hash: Z5qqA42rLg8XSyY1Dt2LzWL/N+I2ybZPqXLYOC38TAs=) 2: S-Z-5m1SBurUbol3T9xgJ4vXx8c.roa (hash: umo6ji4QqQUt6leJpdQHyWPCEs+VEu6u6Fty7PieBvk=) 3: XssWWq18PBQ8wvhOR3XlnZ19lPk.crl (hash: p3HYEV6R/Dz3V1oN/GyzdTrLJ+CC3oiBCwEv+CAnnB8=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9 Validity Not Before: Dec 15 01:35:46 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=0CFE697BB0A7981FC7274FABFEF542A0F7E9D31C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a8:9b:bf:d5:60:aa:fe:cb:5c:0a:71:5f:4a: 16:4c:37:f1:ec:00:e7:20:5b:58:47:1a:88:32:b7: 69:65:c9:4e:42:ac:91:d4:88:8e:b9:1f:b4:ec:40: 15:6b:a0:0d:f3:84:cf:d5:41:d4:eb:3e:87:ba:aa: 69:7e:6a:8c:80:d0:14:a6:35:d7:24:c5:68:5f:17: 0e:c3:aa:43:d9:e5:6d:13:56:db:42:4c:9d:12:7d: 6d:ca:ed:fa:9c:e1:4f:eb:84:9e:a4:ca:f0:4d:67: aa:12:a9:d9:0d:ca:d6:8a:80:a0:e8:6b:d7:98:fd: 44:8d:4e:2f:8d:6c:39:4a:5a:28:f3:44:3b:e1:e6: da:2c:2e:46:fb:1c:03:a7:94:eb:cf:d6:ea:85:5b: 1b:57:f2:0b:51:fd:63:c5:47:14:3d:78:72:44:2e: 8c:60:d1:61:1b:42:d8:7c:62:50:f9:1f:de:3f:8d: 22:a0:96:38:1b:41:73:6e:9d:03:a4:f9:53:62:6c: bc:85:b9:6c:73:a5:a2:41:99:24:93:db:a2:8d:66: 0a:2e:14:3d:ef:ac:6f:c5:8a:24:53:75:e6:c9:6a: 30:0e:e8:34:68:dc:69:16:4a:e1:2b:bc:b4:3a:c0: e7:61:3e:5f:61:77:e3:87:4e:92:a1:95:5a:3a:62: 18:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FE:69:7B:B0:A7:98:1F:C7:27:4F:AB:FE:F5:42:A0:F7:E9:D3:1C X509v3 Authority Key Identifier: keyid:5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d2:2f:25:f3:c4:74:9a:38:c7:b2:8c:3e:cc:a5:1d:9a:12: cf:10:a1:c5:39:47:ec:f6:e8:aa:14:d1:43:c7:b4:ec:cb:2b: 5c:7e:f6:21:99:b7:92:7f:a1:b7:7c:d3:5f:31:fd:54:02:6b: 91:93:66:1b:0c:a3:26:9c:bb:01:c0:0f:74:4a:2d:94:f4:5f: 87:9d:21:48:08:4c:49:0e:5b:01:e1:8e:a5:f1:35:f1:34:c5: 63:db:cd:c9:35:d7:3d:c2:d0:e8:fb:10:c1:ff:d6:f0:bd:a3: 8c:5b:da:84:8c:c5:ce:34:4e:12:e1:35:6e:d9:20:ec:fd:74: bc:39:6b:c2:e8:7a:72:5e:d5:b7:6d:a5:63:fd:8d:dc:16:b4: 45:c0:3c:cf:06:20:e5:7f:af:17:e5:50:aa:f9:00:a8:c4:28: bf:ab:8d:63:25:7a:f1:94:f1:73:19:62:c3:39:b2:85:07:1c: 51:1f:d9:d6:48:d8:3a:47:b0:c4:54:64:90:82:c0:33:f3:27: 9a:bc:94:98:ba:63:55:1a:1a:1c:a3:79:f0:ca:05:a8:e3:89: b6:c1:ec:40:d0:da:20:81:02:6a:08:b7:7b:60:5b:46:93:c7: 10:e5:39:21:b8:53:0b:a5:f8:81:7d:11:17:68:ce:86:68:ff: ac:ff:28:97 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RUNC MTY1QUFEN0MzQzE0M0NDMkY4NEU0Nzc1RTU5RDlEN0Q5NEY5MB4XDTI1MTIxNTAx MzU0NloXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMENGRTY5N0JCMEE3OTgx RkM3Mjc0RkFCRkVGNTQyQTBGN0U5RDMxQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL6om7/VYKr+y1wKcV9KFkw38ewA5yBbWEcaiDK3aWXJTkKskdSI jrkftOxAFWugDfOEz9VB1Os+h7qqaX5qjIDQFKY11yTFaF8XDsOqQ9nlbRNW20JM nRJ9bcrt+pzhT+uEnqTK8E1nqhKp2Q3K1oqAoOhr15j9RI1OL41sOUpaKPNEO+Hm 2iwuRvscA6eU68/W6oVbG1fyC1H9Y8VHFD14ckQujGDRYRtC2HxiUPkf3j+NIqCW OBtBc26dA6T5U2JsvIW5bHOlokGZJJPboo1mCi4UPe+sb8WKJFN15slqMA7oNGjc aRZK4Su8tDrA52E+X2F344dOkqGVWjpiGIsCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQM/ml7sKeYH8cnT6v+9UKg9+nTHDAfBgNVHSMEGDAWgBReyxZarXw8FDzC+E5H deWdnX2U+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNDAvWHNzV1dxMThQQlE4d3ZoT1IzWGxuWjE5bFBrLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWHNzV1dxMThQQlE4d3ZoT1IzWGxu WjE5bFBrLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDQwL1hzc1dXcTE4UEJROHd2aE9SM1hsbloxOWxQay5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX0i8l88R0mjjHsow+zKUdmhLPEKHFOUfs9uiqFNFDx7TsyytcfvYh mbeSf6G3fNNfMf1UAmuRk2YbDKMmnLsBwA90Si2U9F+HnSFICExJDlsB4Y6l8TXx NMVj283JNdc9wtDo+xDB/9bwvaOMW9qEjMXONE4S4TVu2SDs/XS8OWvC6HpyXtW3 baVj/Y3cFrRFwDzPBiDlf68X5VCq+QCoxCi/q41jJXrxlPFzGWLDObKFBxxRH9nW SNg6R7DEVGSQgsAz8yeavJSYumNVGhoco3nwygWo44m2wexA0NoggQJqCLd7YFtG k8cQ5TkhuFMLpfiBfREXaM6GaP+s/yiX -----END CERTIFICATE-----Generated at Mon Dec 22 12:56:50 2025 by rpki-client