This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30331/rigY2jGTvZnf58F7r3nDgDsv0OI.mft File: rigY2jGTvZnf58F7r3nDgDsv0OI.mft (raw, json) Hash identifier: FjPMSNIlInSM21HY+UwJTv2WRjTwMqVXYXG00aGUDYc= Subject key identifier: 1E:38:EA:0D:FD:06:62:86:4F:29:B5:00:9E:36:C8:D7:9F:11:D8:80 Authority key identifier: AE:28:18:DA:31:93:BD:99:DF:E7:C1:7B:AF:79:C3:80:3B:2F:D0:E2 Certificate issuer: /CN=AE2818DA3193BD99DFE7C17BAF79C3803B2FD0E2 Certificate serial: 32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rigY2jGTvZnf58F7r3nDgDsv0OI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/rigY2jGTvZnf58F7r3nDgDsv0OI.mft Manifest number: 0A0C Signing time: Mon 22 Dec 2025 07:01:06 +0000 Manifest this update: Mon 22 Dec 2025 07:01:06 +0000 Manifest next update: Tue 06 Jan 2026 07:01:06 +0000 Files and hashes: 1: 2PuJO1qIeq80KfzF_jZld1VxcW0.roa (hash: JMCNQE8Kcc5vEQs88SxK8LtjjbM+iyYsoHM2a/b4v0o=) 2: rigY2jGTvZnf58F7r3nDgDsv0OI.crl (hash: MtNkA6rAPbmrlSJ7rkPveyT97dcTf6/Yo/u2GPSpr+c=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/rigY2jGTvZnf58F7r3nDgDsv0OI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/rigY2jGTvZnf58F7r3nDgDsv0OI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rigY2jGTvZnf58F7r3nDgDsv0OI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 08:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE2818DA3193BD99DFE7C17BAF79C3803B2FD0E2 Validity Not Before: Dec 15 01:36:09 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=1E38EA0DFD0662864F29B5009E36C8D79F11D880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:36:1d:18:60:92:c5:98:0b:dc:04:c1:5f:c9: 6a:ec:0c:b5:9e:7d:1a:c8:4f:ea:82:d3:89:81:81: cf:b8:c7:5c:b7:15:9f:07:50:f4:c8:6c:d3:c3:4b: 01:98:b1:59:ef:46:cb:62:83:f5:ae:b2:56:56:40: f7:3d:50:e5:30:a9:50:a3:38:9b:ca:ae:80:1b:03: e0:32:08:9d:3d:25:64:8b:76:8d:72:a5:9a:9c:c1: c7:36:ce:3f:b4:20:98:02:37:fa:e2:54:8f:b6:55: b6:d4:6e:14:29:43:2f:dd:d0:dd:b3:12:d1:88:a5: 4a:04:fa:02:bd:44:4b:1a:ba:df:f9:4a:13:2b:95: f2:81:ee:47:44:a1:1d:fd:31:67:79:cc:c8:69:49: 7e:a1:3b:14:fd:f0:e5:46:43:db:78:4f:ee:b9:d1: 7d:ca:2f:8e:ff:2b:6b:93:6f:b9:52:d4:29:91:11: a3:b3:d3:5e:9d:49:b2:01:50:a0:48:dc:45:1a:29: 0c:52:96:8f:db:f1:fd:cd:fe:5e:26:dc:20:46:f8: 7c:86:a2:fe:25:3a:0e:70:fd:27:eb:03:ea:a4:50: e9:8a:8f:92:27:cc:0c:02:e1:21:86:ff:ef:97:5f: f7:24:0d:c5:a4:45:7e:cf:2a:cf:e3:54:62:ce:b9: 6e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:38:EA:0D:FD:06:62:86:4F:29:B5:00:9E:36:C8:D7:9F:11:D8:80 X509v3 Authority Key Identifier: keyid:AE:28:18:DA:31:93:BD:99:DF:E7:C1:7B:AF:79:C3:80:3B:2F:D0:E2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/rigY2jGTvZnf58F7r3nDgDsv0OI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rigY2jGTvZnf58F7r3nDgDsv0OI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/rigY2jGTvZnf58F7r3nDgDsv0OI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:72:91:60:0c:24:a3:b9:93:e7:e3:d7:9a:63:95:43:ff:6a: e3:3e:b6:33:b0:ea:9f:1b:0e:fd:7b:1c:51:b1:5f:34:19:73: 53:79:38:d8:a5:14:6b:ef:7e:0d:23:ed:82:85:65:25:40:99: 67:24:56:70:40:ee:01:9e:0d:38:d1:a1:e1:96:58:fb:d7:4c: 2d:36:2e:88:8a:d3:85:da:1c:c0:69:8d:ad:8a:a1:7a:55:38: 0e:96:48:fb:40:98:83:e3:05:d8:a3:1d:bb:62:f4:46:0d:3f: 22:4b:37:bf:49:fd:7f:7f:ac:9c:48:27:ad:f1:47:5b:3d:56: f8:b4:1a:d6:e2:30:e7:b4:b9:e5:7b:3c:22:63:ea:44:90:74: 40:50:51:43:b5:d2:ee:87:1c:41:f8:9f:fe:ff:76:e5:5e:64: 21:36:09:73:43:d9:ed:49:a6:17:4d:a6:55:22:10:ab:4b:17: d7:93:21:46:3a:ae:a3:d1:70:25:b9:41:b7:f8:06:cf:67:51: 16:3d:75:3b:7e:21:31:14:18:43:10:59:cc:78:f8:c8:1f:ea: a4:ac:66:60:21:ba:e5:8c:3f:e4:1a:33:d2:f5:b8:03:71:90: cd:15:4e:55:da:63:f8:cf:2c:a6:6c:e3:3e:4a:35:6b:8f:ba: 19:76:f6:f6 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRTI4 MThEQTMxOTNCRDk5REZFN0MxN0JBRjc5QzM4MDNCMkZEMEUyMB4XDTI1MTIxNTAx MzYwOVoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMUUzOEVBMERGRDA2NjI4 NjRGMjlCNTAwOUUzNkM4RDc5RjExRDg4MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOg2HRhgksWYC9wEwV/JauwMtZ59GshP6oLTiYGBz7jHXLcVnwdQ 9Mhs08NLAZixWe9Gy2KD9a6yVlZA9z1Q5TCpUKM4m8qugBsD4DIInT0lZIt2jXKl mpzBxzbOP7QgmAI3+uJUj7ZVttRuFClDL93Q3bMS0YilSgT6Ar1ESxq63/lKEyuV 8oHuR0ShHf0xZ3nMyGlJfqE7FP3w5UZD23hP7rnRfcovjv8ra5NvuVLUKZERo7PT Xp1JsgFQoEjcRRopDFKWj9vx/c3+XibcIEb4fIai/iU6DnD9J+sD6qRQ6YqPkifM DALhIYb/75df9yQNxaRFfs8qz+NUYs65bhECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQeOOoN/QZihk8ptQCeNsjXnxHYgDAfBgNVHSMEGDAWgBSuKBjaMZO9md/nwXuv ecOAOy/Q4jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMzEvcmlnWTJqR1R2Wm5mNThGN3IzbkRnRHN2ME9JLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcmlnWTJqR1R2Wm5mNThGN3IzbkRn RHN2ME9JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzMxL3JpZ1kyakdUdlpuZjU4RjdyM25EZ0RzdjBPSS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqcpFgDCSjuZPn49eaY5VD/2rjPrYzsOqfGw79exxRsV80GXNTeTjY pRRr734NI+2ChWUlQJlnJFZwQO4Bng040aHhllj710wtNi6IitOF2hzAaY2tiqF6 VTgOlkj7QJiD4wXYox27YvRGDT8iSze/Sf1/f6ycSCet8UdbPVb4tBrW4jDntLnl ezwiY+pEkHRAUFFDtdLuhxxB+J/+/3blXmQhNglzQ9ntSaYXTaZVIhCrSxfXkyFG Oq6j0XAluUG3+AbPZ1EWPXU7fiExFBhDEFnMePjIH+qkrGZgIbrljD/kGjPS9bgD cZDNFU5V2mP4zyymbOM+SjVrj7oZdvb2 -----END CERTIFICATE-----Generated at Mon Dec 22 11:48:33 2025 by rpki-client