This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft File: YYky9kHWUNyGDXQRrIrrbDXInQQ.mft (raw, json) Hash identifier: 40YwPrEzA9zPLAqa0TL2XZbyJpwKCclJhpE32u9wOJ4= Subject key identifier: 1B:A9:38:8E:36:54:C7:35:F2:70:8E:C6:9C:42:54:BC:5B:00:D0:C8 Authority key identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04 Certificate issuer: /CN=618932F641D650DC860D7411AC8AEB6C35C89D04 Certificate serial: 21 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft Manifest number: 09B4 Signing time: Mon 22 Dec 2025 07:55:37 +0000 Manifest this update: Mon 22 Dec 2025 07:55:37 +0000 Manifest next update: Tue 06 Jan 2026 07:55:37 +0000 Files and hashes: 1: FwD4cJTjdy7P2dMu8O_JSXgejiI.roa (hash: KhFOOPPO1IA4xLTxxzsL4K2DkHbTQHXejo9ZOpoN4lo=) 2: YYky9kHWUNyGDXQRrIrrbDXInQQ.crl (hash: c7bIi8/QSsuAO7IAkeF/LYK5hnGPOhET3yGY0Iwamqk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 10:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618932F641D650DC860D7411AC8AEB6C35C89D04 Validity Not Before: Dec 15 01:43:22 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=1BA9388E3654C735F2708EC69C4254BC5B00D0C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:be:32:d8:29:13:8a:10:dd:a1:9e:38:dc: d3:7d:4e:c9:2a:30:a2:c0:ea:49:9f:71:85:ee:bd: d2:f0:aa:27:8c:83:79:b1:0d:9a:cd:7d:a2:ba:5f: 31:b9:e9:12:e4:8c:6f:14:b0:cd:76:91:a5:f9:fc: 7e:bc:da:85:46:44:ae:e3:80:be:c6:a6:66:29:19: 98:41:ae:49:52:6d:2c:60:08:3d:5a:0c:38:a3:96: 03:9c:1d:6d:2f:f8:68:6b:99:ee:a1:3f:ed:bc:f3: 5a:5c:fd:1a:75:b3:7e:9b:ee:f5:fb:db:5f:97:70: 1a:96:fc:7d:b7:ad:d2:9b:e1:0b:82:10:cf:1e:b8: 96:28:6c:fc:ce:93:75:fa:ba:b6:d2:9b:b4:dc:c5: 0e:4c:db:fb:2e:49:19:c3:82:87:01:ae:4d:0b:58: 27:55:bb:26:9a:55:2c:fc:9f:68:28:22:97:36:c3: 1d:b2:12:37:f5:59:24:28:d7:a2:3d:54:58:cd:16: 58:df:85:83:13:52:0a:9e:c1:be:20:51:f1:50:6a: bf:88:42:4f:c4:be:b3:94:40:96:6b:a0:64:e4:e5: 91:cf:ad:67:5c:3e:5c:37:4c:98:61:1e:fe:22:6d: a8:b2:fc:14:36:b2:3e:d2:38:c6:8a:be:be:92:13: b7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A9:38:8E:36:54:C7:35:F2:70:8E:C6:9C:42:54:BC:5B:00:D0:C8 X509v3 Authority Key Identifier: keyid:61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:67:7b:01:d2:bf:2b:1e:b5:21:4c:4a:51:e7:1d:d8:47:57: e5:a3:79:a6:b2:31:36:c3:ee:09:7f:71:3a:01:fd:64:03:35: 31:2c:4a:ca:87:2c:15:60:41:bf:4f:31:b9:04:0a:15:3a:7e: e3:a6:74:62:02:99:e9:19:49:4b:5d:80:e3:1d:55:71:ba:54: 94:a8:25:58:64:0b:6b:86:48:4b:ae:e4:51:72:53:e3:7d:b0: ce:3c:a7:bd:4d:ca:a9:58:77:24:9b:d5:97:16:ca:83:75:71: 57:83:d4:6f:6b:07:63:31:12:8c:ed:d6:d0:dc:41:89:37:59: 05:c7:63:a3:90:27:5a:81:2a:5d:2c:47:8c:f4:cb:c3:72:15: cd:10:dd:a0:9d:10:c5:5e:8f:93:c5:be:fc:87:be:38:a0:b9: 09:d1:de:be:04:58:cf:91:0a:cc:a4:bb:8f:32:50:98:49:53: 42:85:55:b7:70:49:dd:9f:3a:c5:4c:ba:4c:cf:8c:2d:f5:3e: df:77:a9:58:3a:b2:13:bc:35:d1:a1:7a:4b:71:bf:e7:8e:d2: dc:01:f2:e6:16:67:02:01:93:bb:ba:dd:bb:16:73:6b:a2:5c: be:08:4e:5b:1c:a7:d0:90:33:6f:68:72:f5:a2:fb:ec:8d:18: d6:cf:00:30 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MTg5 MzJGNjQxRDY1MERDODYwRDc0MTFBQzhBRUI2QzM1Qzg5RDA0MB4XDTI1MTIxNTAx NDMyMloXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMUJBOTM4OEUzNjU0Qzcz NUYyNzA4RUM2OUM0MjU0QkM1QjAwRDBDODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALzEvjLYKROKEN2hnjjc031OySowosDqSZ9xhe690vCqJ4yDebEN ms19orpfMbnpEuSMbxSwzXaRpfn8frzahUZEruOAvsamZikZmEGuSVJtLGAIPVoM OKOWA5wdbS/4aGuZ7qE/7bzzWlz9GnWzfpvu9fvbX5dwGpb8fbet0pvhC4IQzx64 lihs/M6Tdfq6ttKbtNzFDkzb+y5JGcOChwGuTQtYJ1W7JppVLPyfaCgilzbDHbIS N/VZJCjXoj1UWM0WWN+FgxNSCp7BviBR8VBqv4hCT8S+s5RAlmugZOTlkc+tZ1w+ XDdMmGEe/iJtqLL8FDayPtI4xoq+vpITt9sCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQbqTiONlTHNfJwjsacQlS8WwDQyDAfBgNVHSMEGDAWgBRhiTL2QdZQ3IYNdBGs iutsNcidBDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxODAvWVlreTlrSFdVTnlHRFhRUnJJcnJiRFhJblFRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWVlreTlrSFdVTnlHRFhRUnJJcnJi RFhJblFRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTgwL1lZa3k5a0hXVU55R0RYUVJySXJyYkRYSW5RUS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3Z3sB0r8rHrUhTEpR5x3YR1flo3mmsjE2w+4Jf3E6Af1kAzUxLErK hywVYEG/TzG5BAoVOn7jpnRiApnpGUlLXYDjHVVxulSUqCVYZAtrhkhLruRRclPj fbDOPKe9TcqpWHckm9WXFsqDdXFXg9RvawdjMRKM7dbQ3EGJN1kFx2OjkCdagSpd LEeM9MvDchXNEN2gnRDFXo+Txb78h744oLkJ0d6+BFjPkQrMpLuPMlCYSVNChVW3 cEndnzrFTLpMz4wt9T7fd6lYOrITvDXRoXpLcb/njtLcAfLmFmcCAZO7ut27FnNr oly+CE5bHKfQkDNvaHL1ovvsjRjWzwAw -----END CERTIFICATE-----Generated at Mon Dec 22 12:27:27 2025 by rpki-client