This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft File: nbB2TG38Hj32vVgOpplKHnCY9So.mft (raw, json) Hash identifier: DrtgnLG1wMM55LC8Ai+9DpQiwz91SVOG8lbZ9ccL/+M= Subject key identifier: E5:05:68:92:5C:7D:8A:DF:CF:4D:83:CD:E7:37:62:40:6C:9C:7E:06 Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A Certificate issuer: /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A Certificate serial: A7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft Manifest number: 0A5B Signing time: Mon 22 Dec 2025 11:38:30 +0000 Manifest this update: Mon 22 Dec 2025 11:38:30 +0000 Manifest next update: Tue 06 Jan 2026 11:38:30 +0000 Files and hashes: 1: Kz91HkeQjh4fK9IQa14DIBLhHcs.roa (hash: OiZeIG5Z7iJl2KPslUN7LXpNree/aPmzHo1KraDZpAE=) 2: LJbzIXvN8xJ5rryQ2EMXAaJTu48.roa (hash: 9R+mB9XABKoH3ITjsCxBrQEitFyGiZxb4HDCY7Kkm9Q=) 3: PZPly0ziW6a6cqb3haW1z6kyLr8.roa (hash: iN6+y6OUKrZGKu8MY1RLNYveH/F5ynJsx07LnMfuZ7s=) 4: fBja1lE4uv85FlzI0-EMZ9b-6RM.roa (hash: Z3zQ/hl+T1m07oIJ5i1YjjkGJT6tpXFBrXo7YwZpkK4=) 5: nbB2TG38Hj32vVgOpplKHnCY9So.crl (hash: AJQPHau+J+RbJNUQR4o8Bvnpv7IY96vQUocvYlk/6Xk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A Validity Not Before: Dec 15 01:41:14 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=E50568925C7D8ADFCF4D83CDE73762406C9C7E06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d9:cc:bb:f9:61:09:99:bd:48:ad:3b:d8:bc: 2b:13:55:3c:5d:3a:b2:69:0e:96:2b:40:bb:36:df: fa:5d:39:7e:ed:85:9c:7e:9b:5a:34:07:c9:64:0d: 33:85:5a:4b:7f:17:87:d5:38:7b:a1:6f:0e:b4:e8: f6:94:6a:b6:f5:45:55:91:f0:23:56:cc:83:99:20: 77:22:32:c5:d5:b3:34:05:18:d3:c0:38:89:81:e1: 60:fa:63:02:37:f1:dc:86:6a:99:13:66:7d:56:08: ee:e1:d5:cd:db:34:9a:53:19:a7:e1:ce:86:d1:d9: 46:0f:1c:b7:ab:ad:01:d1:a5:21:6c:7c:b5:2e:69: 3c:e6:54:65:4e:83:a8:9f:b7:79:a8:65:87:78:fa: 25:58:87:a4:da:6e:6a:5e:1d:5e:ca:e8:87:66:30: fb:a0:91:1c:85:9e:78:7d:86:14:8c:6e:d4:b8:9a: f6:67:04:ce:31:42:86:98:d3:ee:c4:71:ef:30:94: 55:1f:33:6c:f0:91:b5:65:4e:b4:48:20:40:d7:77: 48:68:a4:66:d5:40:c1:3f:54:26:3b:cc:ea:b7:49: 78:3d:e6:2e:24:4a:e2:9c:70:8e:dc:be:f1:80:81: 14:b1:83:68:74:de:ad:2d:b1:9c:5d:89:db:d9:28: 5a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:05:68:92:5C:7D:8A:DF:CF:4D:83:CD:E7:37:62:40:6C:9C:7E:06 X509v3 Authority Key Identifier: keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:05:a7:85:36:d0:ce:48:14:e4:a7:48:c0:41:bd:ff:e7:58: ee:aa:cf:ab:c5:0e:85:9c:db:82:17:28:28:9c:c0:fb:30:ee: 50:19:14:fa:b9:74:b4:2a:20:43:0b:e8:74:b3:dc:ad:2b:75: 4d:4a:47:fb:6b:f7:5e:f1:17:e7:c4:c9:e7:ca:dc:cf:fa:5d: 62:ca:fe:45:6a:51:cf:ca:c7:39:ea:73:c6:4d:b1:44:e1:6a: d9:48:20:a2:09:2e:cb:a1:86:99:91:ad:07:0e:5b:30:ae:d1: ab:73:f1:c0:af:fb:48:db:e3:3d:81:ee:54:69:3a:cc:81:74: df:97:f1:6e:73:e1:88:8e:82:90:7d:1a:8d:76:c0:ed:f1:9b: 64:33:75:c8:00:4b:f3:30:17:a3:b5:30:ec:02:42:0f:91:66: 13:71:4a:e3:67:eb:bb:b9:1d:97:2a:63:f4:62:74:23:f5:7f: 6f:7e:80:26:bf:01:37:4d:b7:49:4b:68:c4:9f:12:6b:cb:b1: c5:3d:1e:e2:1f:e5:48:30:28:cb:16:eb:ba:67:14:fc:6b:78: 40:b0:1d:ed:ff:e8:53:3a:1c:84:92:4f:de:03:fb:3f:3a:aa: a9:30:02:80:50:72:c6:d0:14:4b:71:5c:09:11:a6:a4:2c:e9: d3:16:7c:25 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOURC MDc2NEM2REZDMUUzREY2QkQ1ODBFQTY5OTRBMUU3MDk4RjUyQTAeFw0yNTEyMTUw MTQxMTRaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU1MDU2ODkyNUM3RDhB REZDRjREODNDREU3Mzc2MjQwNkM5QzdFMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDj2cy7+WEJmb1IrTvYvCsTVTxdOrJpDpYrQLs23/pdOX7thZx+ m1o0B8lkDTOFWkt/F4fVOHuhbw606PaUarb1RVWR8CNWzIOZIHciMsXVszQFGNPA OImB4WD6YwI38dyGapkTZn1WCO7h1c3bNJpTGafhzobR2UYPHLerrQHRpSFsfLUu aTzmVGVOg6ift3moZYd4+iVYh6TabmpeHV7K6IdmMPugkRyFnnh9hhSMbtS4mvZn BM4xQoaY0+7Ece8wlFUfM2zwkbVlTrRIIEDXd0hopGbVQME/VCY7zOq3SXg95i4k SuKccI7cvvGAgRSxg2h03q0tsZxdidvZKFpLAgMBAAGjggJBMIICPTAdBgNVHQ4E FgQU5QVoklx9it/PTYPN5zdiQGycfgYwHwYDVR0jBBgwFoAUnbB2TG38Hj32vVgO pplKHnCY9SowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDYzL25iQjJURzM4SGozMnZWZ09wcGxLSG5DWTlTby5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL25iQjJURzM4SGozMnZWZ09wcGxL SG5DWTlTby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA2My9uYkIyVEczOEhqMzJ2VmdPcHBsS0huQ1k5U28u bWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0B AQsFAAOCAQEALgWnhTbQzkgU5KdIwEG9/+dY7qrPq8UOhZzbghcoKJzA+zDuUBkU +rl0tCogQwvodLPcrSt1TUpH+2v3XvEX58TJ58rcz/pdYsr+RWpRz8rHOepzxk2x ROFq2Uggogkuy6GGmZGtBw5bMK7Rq3PxwK/7SNvjPYHuVGk6zIF035fxbnPhiI6C kH0ajXbA7fGbZDN1yABL8zAXo7Uw7AJCD5FmE3FK42fru7kdlypj9GJ0I/V/b36A Jr8BN023SUtoxJ8Sa8uxxT0e4h/lSDAoyxbrumcU/Gt4QLAd7f/oUzochJJP3gP7 PzqqqTACgFByxtAUS3FcCRGmpCzp0xZ8JQ== -----END CERTIFICATE-----Generated at Mon Dec 22 12:56:28 2025 by rpki-client