This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.mft File: rT7LxCj-FH6KC7LmRIUA0xEqr2Q.mft (raw, json) Hash identifier: UL4QC6xkTfZTFq6kI0Dcqk/ry9XBTdxuPPaJ4J+O7AA= Subject key identifier: E3:B6:C2:5E:93:EC:70:8E:F0:46:00:75:22:80:93:7C:6E:77:C3:A3 Authority key identifier: AD:3E:CB:C4:28:FE:14:7E:8A:0B:B2:E6:44:85:00:D3:11:2A:AF:64 Certificate issuer: /CN=AD3ECBC428FE147E8A0BB2E6448500D3112AAF64 Certificate serial: 03 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.mft Manifest number: 38 Signing time: Mon 22 Dec 2025 07:42:16 +0000 Manifest this update: Mon 22 Dec 2025 07:42:16 +0000 Manifest next update: Tue 06 Jan 2026 07:42:16 +0000 Files and hashes: 1: RMSciY9ci20QzoeD2fMm24IvIXY.roa (hash: +/kOFloNRtv4GzGUdFak+FWk7hV+FmzIJHJD/U3dhsw=) 2: rT7LxCj-FH6KC7LmRIUA0xEqr2Q.crl (hash: X9a6yoskyDaeNuUrjMCRyu8O6lQ129DgQ4LEgyp4d0M=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 10:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD3ECBC428FE147E8A0BB2E6448500D3112AAF64 Validity Not Before: Dec 15 01:32:33 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=E3B6C25E93EC708EF04600752280937C6E77C3A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:bc:66:0c:ee:09:c1:a9:23:27:0e:de:29: a4:b2:53:38:1c:c6:f1:45:b2:f5:ab:4e:05:35:41: 80:0c:24:6a:34:88:c4:94:e6:5e:9c:b6:c4:82:a5: 8c:e3:12:3e:2d:2f:84:f2:f6:c1:9a:2e:85:ec:e1: a8:6d:ad:db:48:b9:ea:38:6a:47:8d:fb:c4:43:59: 10:5f:a9:76:be:e9:8a:2a:4b:fd:cb:25:26:01:79: 15:4b:d8:fa:f3:8c:c6:91:a8:34:6a:f4:30:d0:2c: 4f:81:b4:09:1b:1e:d7:e7:c4:cf:7f:bf:f0:33:bd: a8:af:a7:ca:b2:76:c9:58:75:6f:33:ea:b6:e1:10: aa:fb:7d:63:65:21:89:72:fb:76:9c:08:66:0a:ef: 58:26:e6:d0:ca:e9:ec:0e:84:c1:f0:be:7a:2b:0e: 77:d7:6d:0b:bf:b3:a4:cc:1f:a6:f6:00:0a:26:a6: b4:3f:b1:30:0d:bc:74:30:51:e7:56:4c:d8:b2:a1: 38:4c:92:5a:81:03:88:41:fe:93:0b:57:0d:f4:35: cb:ab:b0:2f:e0:ba:69:d5:c9:b2:e9:6c:b1:ad:22: 50:18:c7:56:e1:bc:06:04:72:cd:c7:82:b3:66:be: 19:3e:c9:4d:d3:fd:b4:9e:39:85:f0:6b:34:3d:70: c8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B6:C2:5E:93:EC:70:8E:F0:46:00:75:22:80:93:7C:6E:77:C3:A3 X509v3 Authority Key Identifier: keyid:AD:3E:CB:C4:28:FE:14:7E:8A:0B:B2:E6:44:85:00:D3:11:2A:AF:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:a5:9d:16:bb:b6:ed:eb:07:88:31:3d:a7:ca:bd:62:51:79: 0b:09:a6:56:ff:5e:7c:83:7d:c0:d3:c0:4b:55:a9:e0:31:c2: 63:78:16:61:a5:9b:ec:53:35:e4:fe:4f:ea:40:76:03:1a:64: 4f:72:4f:a5:db:3d:bd:80:cd:e3:eb:b1:4d:49:51:9c:39:87: 5c:c6:a5:25:70:1e:2f:71:68:10:8b:8d:43:c9:2b:4d:a5:d9: 7b:0e:01:2b:8b:95:ec:86:2b:cd:6a:d3:a5:11:86:29:bd:2e: 04:27:66:c1:71:33:74:1f:c6:e6:d0:85:14:fb:3a:cc:d7:d1: 08:2e:ca:91:29:f0:69:4a:2d:ce:86:3b:e0:38:dd:f4:4d:8b: c3:c9:83:9a:8e:77:0f:e8:84:fe:b3:62:25:b4:31:2a:c0:6a: b4:d4:9f:b7:44:71:3c:9e:f7:61:e9:bd:71:46:f0:96:f2:8e: cf:23:cc:57:4a:27:03:40:28:6a:17:e4:53:2c:c6:f7:83:53: 13:a9:90:fa:06:7c:0f:d2:39:95:6a:97:be:21:cb:e5:ca:84: d2:cf:38:57:26:9b:81:b6:5a:a2:14:68:44:a8:0d:54:9b:18: 9f:13:7c:ec:01:67:10:17:34:57:4d:a4:e7:b4:d2:32:a5:b5: 63:60:bd:26 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDNF Q0JDNDI4RkUxNDdFOEEwQkIyRTY0NDg1MDBEMzExMkFBRjY0MB4XDTI1MTIxNTAx MzIzM1oXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoRTNCNkMyNUU5M0VDNzA4 RUYwNDYwMDc1MjI4MDkzN0M2RTc3QzNBMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKM/vGYM7gnBqSMnDt4ppLJTOBzG8UWy9atOBTVBgAwkajSIxJTm Xpy2xIKljOMSPi0vhPL2wZouhezhqG2t20i56jhqR437xENZEF+pdr7piipL/csl JgF5FUvY+vOMxpGoNGr0MNAsT4G0CRse1+fEz3+/8DO9qK+nyrJ2yVh1bzPqtuEQ qvt9Y2UhiXL7dpwIZgrvWCbm0Mrp7A6EwfC+eisOd9dtC7+zpMwfpvYACiamtD+x MA28dDBR51ZM2LKhOEySWoEDiEH+kwtXDfQ1y6uwL+C6adXJsulssa0iUBjHVuG8 BgRyzceCs2a+GT7JTdP9tJ45hfBrND1wyOkCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTjtsJek+xwjvBGAHUigJN8bnfDozAfBgNVHSMEGDAWgBStPsvEKP4UfooLsuZE hQDTESqvZDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNTMvclQ3THhDai1GSDZLQzdMbVJJVUEweEVxcjJRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvclQ3THhDai1GSDZLQzdMbVJJVUEw eEVxcjJRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzUzL3JUN0x4Q2otRkg2S0M3TG1SSVVBMHhFcXIyUS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVpZ0Wu7bt6weIMT2nyr1iUXkLCaZW/158g33A08BLVangMcJjeBZh pZvsUzXk/k/qQHYDGmRPck+l2z29gM3j67FNSVGcOYdcxqUlcB4vcWgQi41DyStN pdl7DgEri5XshivNatOlEYYpvS4EJ2bBcTN0H8bm0IUU+zrM19EILsqRKfBpSi3O hjvgON30TYvDyYOajncP6IT+s2IltDEqwGq01J+3RHE8nvdh6b1xRvCW8o7PI8xX SicDQChqF+RTLMb3g1MTqZD6BnwP0jmVape+IcvlyoTSzzhXJpuBtlqiFGhEqA1U mxifE3zsAWcQFzRXTaTntNIypbVjYL0m -----END CERTIFICATE-----Generated at Mon Dec 22 12:27:25 2025 by rpki-client