This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft File: 4qAcFfKuEP_hot-5OfujIiLIHos.mft (raw, json) Hash identifier: vhEyo2fxXRLxBIq5uayCXypsWWPlKp7aqUJk2J+ZCu8= Subject key identifier: C6:CB:79:46:F6:B7:FE:B9:3E:DC:5D:C4:13:3E:65:74:03:EF:A9:9B Authority key identifier: E2:A0:1C:15:F2:AE:10:FF:E1:A2:DF:B9:39:FB:A3:22:22:C8:1E:8B Certificate issuer: /CN=E2A01C15F2AE10FFE1A2DFB939FBA32222C81E8B Certificate serial: 20 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft Manifest number: 09B5 Signing time: Mon 22 Dec 2025 11:37:30 +0000 Manifest this update: Mon 22 Dec 2025 11:37:30 +0000 Manifest next update: Tue 06 Jan 2026 11:37:30 +0000 Files and hashes: 1: 4qAcFfKuEP_hot-5OfujIiLIHos.crl (hash: ylOjFmgkmy0lBdeR6Z8TP6pJA+W7Nnra7COrwrkw/XY=) 2: GBW_VD7DOK2r1RAwqUE501IE0hw.roa (hash: b8qF1fCMRyn1zHloCjm2VRm+d5A9XnfJA4ozLK4JvKI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2A01C15F2AE10FFE1A2DFB939FBA32222C81E8B Validity Not Before: Dec 15 01:30:54 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=C6CB7946F6B7FEB93EDC5DC4133E657403EFA99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4a:e7:4a:64:d4:83:bc:9a:e7:1a:43:9c:fb: 2c:b7:2c:34:a2:17:09:61:30:55:8f:07:cd:e0:b2: 7f:44:cc:2f:57:a1:f2:9e:fa:7b:96:f8:4a:df:fb: 19:d6:44:07:47:68:54:48:49:8b:0d:cc:61:77:78: b3:11:e7:06:f0:2a:90:66:35:6e:d5:bb:96:51:ce: e6:5e:62:5c:65:6f:85:18:b3:4f:f3:d1:2a:87:5b: 3d:3a:b4:25:49:eb:7c:b8:67:3e:d8:d3:86:f4:26: d7:ce:c5:29:6a:bc:dd:50:71:18:97:7a:75:8a:a3: b5:eb:d3:87:3b:98:e5:a2:a7:06:e7:c5:a9:f6:5d: 27:5f:19:da:94:62:34:0e:a5:f1:c5:71:35:07:82: 17:fb:ac:f8:7b:63:8c:0e:c5:93:b0:ab:84:ec:22: a1:4c:6e:23:1a:3c:bb:f8:14:eb:3d:21:97:9e:da: dd:3a:92:69:98:03:40:2e:eb:9a:69:bb:d5:ea:b9: 4d:92:3b:82:d7:36:34:48:62:3f:d2:65:e7:83:f6: e5:27:7a:e4:47:3d:37:0b:13:ac:c1:24:8a:45:fa: 87:8d:20:10:d2:4b:45:b4:f1:13:28:06:8f:98:c6: 75:ee:8a:83:5a:37:d1:29:3f:25:5c:f0:31:03:38: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CB:79:46:F6:B7:FE:B9:3E:DC:5D:C4:13:3E:65:74:03:EF:A9:9B X509v3 Authority Key Identifier: keyid:E2:A0:1C:15:F2:AE:10:FF:E1:A2:DF:B9:39:FB:A3:22:22:C8:1E:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:bb:fd:2d:f8:93:bc:dd:06:6c:1c:c1:25:c3:5b:bf:6a:0d: d7:8a:ad:51:45:86:60:72:41:ac:72:81:39:65:6b:74:5f:14: 75:eb:97:e5:6f:4f:fe:c7:5b:95:16:e4:a1:e2:32:e5:c3:f8: 9c:23:11:2b:63:26:06:f7:e6:64:97:5f:fa:b9:42:bb:fc:a6: 8c:da:45:8e:66:e0:04:77:93:09:60:7f:94:94:f3:2d:0d:d0: ba:57:83:38:35:5c:d3:b3:a9:02:93:b3:f1:b5:94:2b:c1:9e: 4d:7d:66:1f:6e:d3:5c:4b:c6:4c:31:a0:3e:1e:9f:a2:45:3c: c7:e8:2a:96:f7:0e:7e:0e:4f:e1:bd:7e:cc:ec:b9:ec:a4:cb: 78:52:35:3a:bf:f7:bc:30:1f:af:24:62:3f:9f:31:f0:73:99: 93:4c:7d:7c:68:e5:26:7c:58:04:7b:76:0b:4d:36:12:79:b8: cf:bc:a5:24:41:06:89:81:7a:22:ed:87:bc:22:42:7b:3f:11: f9:7c:94:35:b3:51:84:74:8f:44:6c:b1:5f:3a:5c:52:33:5c: 01:43:f8:34:06:cc:33:b4:ff:5b:7a:cd:a8:c8:54:32:76:c3: 1f:0c:73:0c:95:9c:06:c5:d6:95:7a:69:9a:f3:de:a8:1f:af: 3c:9b:3c:71 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkEw MUMxNUYyQUUxMEZGRTFBMkRGQjkzOUZCQTMyMjIyQzgxRThCMB4XDTI1MTIxNTAx MzA1NFoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoQzZDQjc5NDZGNkI3RkVC OTNFREM1REM0MTMzRTY1NzQwM0VGQTk5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANhK50pk1IO8mucaQ5z7LLcsNKIXCWEwVY8HzeCyf0TML1eh8p76 e5b4St/7GdZEB0doVEhJiw3MYXd4sxHnBvAqkGY1btW7llHO5l5iXGVvhRizT/PR KodbPTq0JUnrfLhnPtjThvQm187FKWq83VBxGJd6dYqjtevThzuY5aKnBufFqfZd J18Z2pRiNA6l8cVxNQeCF/us+HtjjA7Fk7CrhOwioUxuIxo8u/gU6z0hl57a3TqS aZgDQC7rmmm71eq5TZI7gtc2NEhiP9Jl54P25Sd65Ec9NwsTrMEkikX6h40gENJL RbTxEygGj5jGde6Kg1o30Sk/JVzwMQM4tssCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTGy3lG9rf+uT7cXcQTPmV0A++pmzAfBgNVHSMEGDAWgBTioBwV8q4Q/+Gi37k5 +6MiIsgeizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMTIvNHFBY0ZmS3VFUF9ob3QtNU9mdWpJaUxJSG9zLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHFBY0ZmS3VFUF9ob3QtNU9mdWpJ aUxJSG9zLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTEyLzRxQWNGZkt1RVBfaG90LTVPZnVqSWlMSUhvcy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnu/0t+JO83QZsHMElw1u/ag3Xiq1RRYZgckGscoE5ZWt0XxR165fl b0/+x1uVFuSh4jLlw/icIxErYyYG9+Zkl1/6uUK7/KaM2kWOZuAEd5MJYH+UlPMt DdC6V4M4NVzTs6kCk7PxtZQrwZ5NfWYfbtNcS8ZMMaA+Hp+iRTzH6CqW9w5+Dk/h vX7M7LnspMt4UjU6v/e8MB+vJGI/nzHwc5mTTH18aOUmfFgEe3YLTTYSebjPvKUk QQaJgXoi7Ye8IkJ7PxH5fJQ1s1GEdI9EbLFfOlxSM1wBQ/g0BswztP9bes2oyFQy dsMfDHMMlZwGxdaVemma896oH688mzxx -----END CERTIFICATE-----Generated at Mon Dec 22 12:56:38 2025 by rpki-client