This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft File: 0KlSoA2yFUF1wgtMiH76L4CsbwU.mft (raw, json) Hash identifier: Bf0m+xXDbwjlM3pcA5MIp69O5hIKkfkxa97ksHNvo+M= Subject key identifier: 2B:6B:D8:AF:3A:27:D8:49:62:04:0A:9B:31:6C:43:17:B2:EA:06:77 Authority key identifier: D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05 Certificate issuer: /CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05 Certificate serial: 4F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft Manifest number: 0AA5 Signing time: Mon 22 Dec 2025 02:58:18 +0000 Manifest this update: Mon 22 Dec 2025 02:58:18 +0000 Manifest next update: Tue 06 Jan 2026 02:58:18 +0000 Files and hashes: 1: 0KlSoA2yFUF1wgtMiH76L4CsbwU.crl (hash: wADOY6bUkP3hTfsvS6nXQtGdVTTrvYVdgtPlAG7tFeI=) 2: MyckJyek9ji7eE6xv1jl26s-o8Y.roa (hash: DupaFcN1Jnb/CThzl3B54BAXvTZdDf9U0QE9+9haZEE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 04:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05 Validity Not Before: Dec 15 01:40:13 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=2B6BD8AF3A27D84962040A9B316C4317B2EA0677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2f:f7:e4:84:2a:c5:77:c9:09:3c:45:bc:d5: 29:14:ce:6f:99:04:b3:75:4c:e4:bc:b4:5b:10:bd: 2a:3b:a9:b3:17:ea:e1:f6:ad:f3:ff:11:60:a9:d3: f9:7a:81:8b:2a:91:6f:42:fb:d1:b0:87:50:87:f3: ec:b7:d6:e3:c5:ff:65:83:d2:e9:a0:bb:b5:4d:67: 99:6f:53:0d:3e:45:50:49:0d:9a:16:74:12:2d:30: f4:9e:d8:64:c4:02:2c:ce:bb:30:07:cd:98:6e:df: ac:31:9a:47:30:fb:b9:75:2f:b6:cd:79:e4:d6:1a: 4e:9b:04:65:5d:6d:66:66:c3:d6:72:9e:1a:6b:a6: 13:f0:3c:95:f3:d5:62:96:a6:9f:70:0d:4b:0a:0e: c6:a2:be:96:9f:25:e9:18:4a:8d:2e:ee:f9:cd:70: 82:3f:62:5b:2d:64:0b:61:8e:05:6f:f6:63:28:f2: 6e:62:1d:71:f5:3a:40:02:59:34:60:ca:30:a4:b3: 99:27:ca:75:1a:a9:39:a9:16:e7:df:10:e9:23:4c: 94:e3:df:d1:fe:ac:84:38:24:74:26:d0:88:4b:c7: a6:34:19:4a:5e:0f:51:a8:ea:97:21:cc:5d:88:cc: d9:3a:55:71:81:9a:08:d6:9b:5c:db:d5:cb:85:e1: 20:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6B:D8:AF:3A:27:D8:49:62:04:0A:9B:31:6C:43:17:B2:EA:06:77 X509v3 Authority Key Identifier: keyid:D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:99:33:3d:53:51:0c:45:db:da:a8:fe:2e:af:26:06:8e:86: 14:e5:0c:f8:89:18:de:30:e1:57:92:e2:60:0f:ff:b2:30:b9: f0:ec:bb:94:b9:29:7a:f8:5c:d3:2d:9f:43:77:7f:0a:82:d8: 0f:42:e1:ca:fb:57:73:ee:de:14:9f:cc:aa:e1:aa:c3:be:32: 51:57:e1:7d:fe:08:44:b2:6b:ea:b7:bf:0e:92:e7:38:eb:fa: 37:98:95:65:53:13:7b:6f:1f:48:78:8f:55:72:01:47:e9:18: 25:6c:c5:ac:58:dc:24:13:0d:b7:8c:37:40:7f:8f:18:11:c4: 83:82:06:66:9e:14:ea:4a:5b:0e:d8:d9:d4:fa:40:54:e2:da: 88:e7:e8:4d:70:40:f2:9d:9c:8c:33:bf:ba:6a:c1:8e:2c:4e: 4b:41:d3:44:6c:7d:8d:c8:eb:f4:2e:33:a6:7f:eb:59:5c:96: ec:89:08:0b:35:4f:66:6b:c5:37:fc:11:7b:0d:41:bb:e2:09: b0:9e:b5:a9:1f:60:42:df:4f:f2:d2:18:d5:44:3b:23:58:26: 06:3f:d1:83:96:e1:86:99:2d:b2:f5:2e:da:8a:fd:64:9c:b6: 54:7b:8c:da:14:b9:78:d1:2e:04:38:7a:3e:43:96:8b:7d:96: ae:16:45:d1 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMEE5 NTJBMDBEQjIxNTQxNzVDMjBCNEM4ODdFRkEyRjgwQUM2RjA1MB4XDTI1MTIxNTAx NDAxM1oXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMkI2QkQ4QUYzQTI3RDg0 OTYyMDQwQTlCMzE2QzQzMTdCMkVBMDY3NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKUv9+SEKsV3yQk8RbzVKRTOb5kEs3VM5Ly0WxC9Kjupsxfq4fat 8/8RYKnT+XqBiyqRb0L70bCHUIfz7LfW48X/ZYPS6aC7tU1nmW9TDT5FUEkNmhZ0 Ei0w9J7YZMQCLM67MAfNmG7frDGaRzD7uXUvts155NYaTpsEZV1tZmbD1nKeGmum E/A8lfPVYpamn3ANSwoOxqK+lp8l6RhKjS7u+c1wgj9iWy1kC2GOBW/2YyjybmId cfU6QAJZNGDKMKSzmSfKdRqpOakW598Q6SNMlOPf0f6shDgkdCbQiEvHpjQZSl4P UajqlyHMXYjM2TpVcYGaCNabXNvVy4XhINcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQra9ivOifYSWIECpsxbEMXsuoGdzAfBgNVHSMEGDAWgBTQqVKgDbIVQXXCC0yI fvovgKxvBTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMzUvMEtsU29BMnlGVUYxd2d0TWlINzZMNENzYndVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMEtsU29BMnlGVUYxd2d0TWlINzZM NENzYndVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTM1LzBLbFNvQTJ5RlVGMXdndE1pSDc2TDRDc2J3VS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATmTM9U1EMRdvaqP4uryYGjoYU5Qz4iRjeMOFXkuJgD/+yMLnw7LuU uSl6+FzTLZ9Dd38KgtgPQuHK+1dz7t4Un8yq4arDvjJRV+F9/ghEsmvqt78Okuc4 6/o3mJVlUxN7bx9IeI9VcgFH6RglbMWsWNwkEw23jDdAf48YEcSDggZmnhTqSlsO 2NnU+kBU4tqI5+hNcEDynZyMM7+6asGOLE5LQdNEbH2NyOv0LjOmf+tZXJbsiQgL NU9ma8U3/BF7DUG74gmwnrWpH2BC30/y0hjVRDsjWCYGP9GDluGGmS2y9S7aiv1k nLZUe4zaFLl40S4EOHo+Q5aLfZauFkXR -----END CERTIFICATE-----Generated at Mon Dec 22 05:38:35 2025 by rpki-client