This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20260/23CxK0Fq4kNGQeWs0lb7IktMW5s.mft File: 23CxK0Fq4kNGQeWs0lb7IktMW5s.mft (raw, json) Hash identifier: 0IMGd8k+fJ3uFaBGLrwsrqN7NcMNpgvg2RBgKdDxZrU= Subject key identifier: 6C:01:42:3F:89:17:10:2C:D6:DD:07:EC:C9:89:C4:C8:23:85:38:64 Authority key identifier: DB:70:B1:2B:41:6A:E2:43:46:41:E5:AC:D2:56:FB:22:4B:4C:5B:9B Certificate issuer: /CN=DB70B12B416AE2434641E5ACD256FB224B4C5B9B Certificate serial: 1E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/23CxK0Fq4kNGQeWs0lb7IktMW5s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/23CxK0Fq4kNGQeWs0lb7IktMW5s.mft Manifest number: 09B1 Signing time: Mon 22 Dec 2025 15:47:40 +0000 Manifest this update: Mon 22 Dec 2025 15:47:40 +0000 Manifest next update: Tue 06 Jan 2026 15:47:40 +0000 Files and hashes: 1: 23CxK0Fq4kNGQeWs0lb7IktMW5s.crl (hash: UiL8maKkw0HXYD3wTb7SQCl2wCFk33Tp4HmWxKyPyQc=) 2: TbF7RxjjPrszr7lvXhjFhHX-W58.roa (hash: UOSh1lxOySSyjdMquVhIG7mDwSwMIi7tEcaD4PHTGHk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/23CxK0Fq4kNGQeWs0lb7IktMW5s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/23CxK0Fq4kNGQeWs0lb7IktMW5s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/23CxK0Fq4kNGQeWs0lb7IktMW5s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB70B12B416AE2434641E5ACD256FB224B4C5B9B Validity Not Before: Dec 15 01:43:45 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=6C01423F8917102CD6DD07ECC989C4C823853864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:16:2c:69:07:0a:1f:1d:5f:13:17:42:e5: 1c:a6:c8:a4:51:11:55:01:17:26:be:a6:fb:e1:e9: d9:7f:0b:76:1b:a7:30:ee:30:d2:81:1e:ac:74:38: 96:06:81:11:79:28:92:32:ce:19:2f:b7:a6:65:a4: 0f:27:4f:ca:43:e5:74:fe:13:15:52:04:89:78:b8: 34:fb:e2:a1:78:79:bc:37:8b:f7:21:3e:74:53:2b: 5f:90:2e:e1:6e:26:41:35:b9:63:bf:6b:33:b5:d6: 0c:95:3c:57:2d:df:b4:0f:44:94:58:bb:ee:a4:67: b4:c1:48:f7:ef:7e:19:a2:16:fa:3e:c9:b4:d5:2d: 24:da:a0:b3:30:a6:85:44:40:3b:8d:94:6f:fc:7e: d9:19:e6:29:10:d4:54:e1:29:1e:53:99:7a:10:3f: ba:6c:32:b9:1c:5f:15:07:81:ba:54:5e:a0:84:7c: 3b:bb:8e:0c:b1:71:4c:63:b7:6e:86:0e:ed:1c:04: d2:b0:8a:fe:97:21:cf:36:39:e9:0e:e9:13:04:3d: 2e:24:28:d2:7b:54:4c:77:e0:dd:d4:b0:1e:2a:cf: 24:a1:3c:69:49:ed:b7:05:3b:2f:5e:fd:2a:30:23: c8:8f:42:63:16:5c:fb:8f:12:0d:7d:d2:d1:1d:d0: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:01:42:3F:89:17:10:2C:D6:DD:07:EC:C9:89:C4:C8:23:85:38:64 X509v3 Authority Key Identifier: keyid:DB:70:B1:2B:41:6A:E2:43:46:41:E5:AC:D2:56:FB:22:4B:4C:5B:9B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/23CxK0Fq4kNGQeWs0lb7IktMW5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/23CxK0Fq4kNGQeWs0lb7IktMW5s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/23CxK0Fq4kNGQeWs0lb7IktMW5s.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:08:fe:1b:ad:86:3e:a9:23:49:74:ca:47:89:13:88:b1:01: 51:5b:96:a6:88:92:35:fa:f6:43:df:2d:44:55:90:73:8a:e6: 48:01:e6:68:ef:c4:30:ec:fa:76:59:5f:40:2c:ee:9c:a4:0c: cc:8f:0c:6f:89:d8:11:55:d1:78:73:3f:46:70:2d:e2:9b:5c: 7d:17:59:60:f6:2e:09:2c:88:f6:4d:ff:70:87:e1:4f:20:78: 5a:94:60:c4:52:51:d6:70:12:6d:05:4d:cf:13:80:68:54:3d: ce:be:af:0b:00:6a:e7:01:90:97:63:4d:e0:45:28:70:57:17: 3a:ab:81:4e:0b:73:5a:17:0d:77:55:28:c1:71:4a:02:34:32: 7f:68:5a:da:90:f6:3d:de:d3:22:10:12:b2:4f:09:10:0f:01: e6:7f:13:4f:0e:1c:e4:55:2e:72:63:4b:a1:91:9a:82:e4:7d: a7:1f:f7:8c:0a:a2:08:bb:10:46:b8:bb:ee:77:53:7d:cb:84: 9b:ed:a0:c3:f6:e5:11:77:b8:50:65:1e:ed:7d:d9:11:ca:76: 6b:4d:2e:3f:38:86:3b:52:c7:60:a7:4d:3b:4b:4e:5c:a4:ca: 9c:2c:49:aa:99:e0:61:70:f5:c0:c5:b8:75:f2:95:e6:25:74: 2b:15:11:2f -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQjcw QjEyQjQxNkFFMjQzNDY0MUU1QUNEMjU2RkIyMjRCNEM1QjlCMB4XDTI1MTIxNTAx NDM0NVoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoNkMwMTQyM0Y4OTE3MTAy Q0Q2REQwN0VDQzk4OUM0QzgyMzg1Mzg2NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANPrFixpBwofHV8TF0LlHKbIpFERVQEXJr6m++Hp2X8LdhunMO4w 0oEerHQ4lgaBEXkokjLOGS+3pmWkDydPykPldP4TFVIEiXi4NPvioXh5vDeL9yE+ dFMrX5Au4W4mQTW5Y79rM7XWDJU8Vy3ftA9ElFi77qRntMFI9+9+GaIW+j7JtNUt JNqgszCmhURAO42Ub/x+2RnmKRDUVOEpHlOZehA/umwyuRxfFQeBulReoIR8O7uO DLFxTGO3boYO7RwE0rCK/pchzzY56Q7pEwQ9LiQo0ntUTHfg3dSwHirPJKE8aUnt twU7L179KjAjyI9CYxZc+48SDX3S0R3QEYcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRsAUI/iRcQLNbdB+zJicTII4U4ZDAfBgNVHSMEGDAWgBTbcLErQWriQ0ZB5azS VvsiS0xbmzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyNjAvMjNDeEswRnE0a05HUWVXczBsYjdJa3RNVzVzLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMjNDeEswRnE0a05HUWVXczBsYjdJ a3RNVzVzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjYwLzIzQ3hLMEZxNGtOR1FlV3MwbGI3SWt0TVc1cy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNCP4brYY+qSNJdMpHiROIsQFRW5amiJI1+vZD3y1EVZBziuZIAeZo 78Qw7Pp2WV9ALO6cpAzMjwxvidgRVdF4cz9GcC3im1x9F1lg9i4JLIj2Tf9wh+FP IHhalGDEUlHWcBJtBU3PE4BoVD3Ovq8LAGrnAZCXY03gRShwVxc6q4FOC3NaFw13 VSjBcUoCNDJ/aFrakPY93tMiEBKyTwkQDwHmfxNPDhzkVS5yY0uhkZqC5H2nH/eM CqIIuxBGuLvud1N9y4Sb7aDD9uURd7hQZR7tfdkRynZrTS4/OIY7Usdgp007S05c pMqcLEmqmeBhcPXAxbh18pXmJXQrFREv -----END CERTIFICATE-----Generated at Mon Dec 22 19:35:57 2025 by rpki-client