This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft File: LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft (raw, json) Hash identifier: ggWhei59qc2U2IGSP5+l/LAeVm4F7tcsXvZoMTAK50M= Subject key identifier: 33:85:C4:4C:DA:33:63:58:55:4B:17:E7:49:73:61:1D:1E:42:B5:BA Authority key identifier: 2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D Certificate issuer: /CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D Certificate serial: 29 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft Manifest number: 09C9 Signing time: Mon 22 Dec 2025 07:55:15 +0000 Manifest this update: Mon 22 Dec 2025 07:55:15 +0000 Manifest next update: Tue 06 Jan 2026 07:55:15 +0000 Files and hashes: 1: CoG805L5C41jVCyenNVjCgb3A-Q.roa (hash: PvzL8avkfoMzRJlpSUwtP5EwtgciRg3JI588OKejLEo=) 2: LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl (hash: L/v/gOKj1bwD8WoJ+1NPisTUCt75o/aQlAXAV83wQX8=) 3: iPSkQHrrrdc3JPU-Y0PBbZN43rQ.roa (hash: u9ZykbE9wL3uxGAiguGnoPt6zFcwdzhtzjhryTXdFSY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 10:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D Validity Not Before: Dec 15 01:42:28 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=3385C44CDA336358554B17E74973611D1E42B5BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:26:76:a0:92:e8:ee:48:3e:a1:6c:64:b7: b2:03:ff:56:04:ed:8c:99:d4:2b:e9:a6:12:ac:39: a4:e3:cd:c9:e5:5b:d9:c7:54:b7:58:ea:bf:58:71: 86:b6:89:39:54:5c:95:89:cc:eb:73:cf:c5:cc:a3: b2:e7:7d:71:f0:f7:3d:a7:90:29:33:9c:cb:2b:fb: bb:cb:02:12:b5:75:31:a8:ac:14:4f:aa:bc:82:1b: a3:96:98:da:3c:4a:36:fd:91:a9:1d:6d:e1:c1:f8: 20:ec:28:5e:b4:4d:eb:57:d8:98:f8:ab:11:80:aa: 87:05:ec:16:da:11:ea:e0:ac:d1:8d:33:2d:3c:5f: b5:6e:55:9d:64:2a:f8:d3:a5:b2:8d:02:07:a3:77: 95:f2:05:08:e9:c6:88:92:ef:ed:7d:b8:e1:4d:b3: 51:ad:05:a1:42:0e:4b:d7:dc:dd:9f:6f:08:dc:20: e4:3e:ae:cb:a6:68:49:62:f6:4f:88:90:84:97:bc: 0d:0f:4b:d2:41:c2:90:55:a7:6c:d7:9b:6e:87:35: 75:0c:96:d8:89:c8:a9:2f:93:ce:4d:b7:30:ee:fe: 44:77:55:37:ad:a1:42:ba:2b:ae:00:8a:0b:5d:b5: 61:ad:f1:44:be:48:d5:5a:5f:4e:7a:d8:b7:47:27: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:85:C4:4C:DA:33:63:58:55:4B:17:E7:49:73:61:1D:1E:42:B5:BA X509v3 Authority Key Identifier: keyid:2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:4e:70:ee:b2:7a:3b:da:25:43:25:24:0b:bd:02:c5:97:11: 62:10:96:58:48:0e:e3:13:cd:7e:70:ff:db:85:f1:c5:fc:9b: ae:7b:67:7b:f1:87:1d:6b:5b:28:9b:00:ea:9a:9c:c7:dc:ed: cf:6f:4e:d7:de:01:c9:88:f5:c9:e4:12:93:fa:af:c8:f4:9a: 9a:61:4a:32:29:12:6e:66:53:71:1d:30:6d:07:80:1d:dd:ca: c5:a8:a1:5c:5f:ba:1d:1c:01:97:85:eb:61:1f:27:5d:12:0e: d3:80:e4:30:bb:34:42:9a:52:61:8d:5b:e3:5d:c2:10:37:e6: 25:e5:91:d3:6b:27:45:97:18:cf:62:ed:9c:b3:36:74:70:c4: 4d:a1:36:0f:22:0c:d0:ff:1e:7a:03:79:75:e3:75:1b:37:30: 01:7e:11:2b:72:c8:1f:e0:ab:1d:9e:c4:a9:03:fc:fc:b2:b7: ee:07:43:d0:2d:f1:07:63:ff:bf:c4:c7:eb:87:0f:44:d6:3e: c9:d9:3a:93:e8:89:4d:11:3b:cb:5a:23:7d:b7:c0:ff:47:ca: af:85:46:37:61:9e:ae:c4:53:f4:c4:48:93:be:f8:0f:29:27: a3:de:df:b2:7d:25:68:eb:67:a0:ce:1b:86:0d:e4:29:5f:89: 6f:0a:b5:00 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyREQz RkQ2OEJENzc0Q0Y5QzJCOTlENjcwQURBOUNBRDlGOTYzQTVEMB4XDTI1MTIxNTAx NDIyOFoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMzM4NUM0NENEQTMzNjM1 ODU1NEIxN0U3NDk3MzYxMUQxRTQyQjVCQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAManJnagkujuSD6hbGS3sgP/VgTtjJnUK+mmEqw5pOPNyeVb2cdU t1jqv1hxhraJOVRclYnM63PPxcyjsud9cfD3PaeQKTOcyyv7u8sCErV1MaisFE+q vIIbo5aY2jxKNv2RqR1t4cH4IOwoXrRN61fYmPirEYCqhwXsFtoR6uCs0Y0zLTxf tW5VnWQq+NOlso0CB6N3lfIFCOnGiJLv7X244U2zUa0FoUIOS9fc3Z9vCNwg5D6u y6ZoSWL2T4iQhJe8DQ9L0kHCkFWnbNebboc1dQyW2InIqS+Tzk23MO7+RHdVN62h QrorrgCKC121Ya3xRL5I1VpfTnrYt0cnVq8CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQzhcRM2jNjWFVLF+dJc2EdHkK1ujAfBgNVHSMEGDAWgBQt0/1ovXdM+cK5nWcK 2pytn5Y6XTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjk0L0xkUDlhTDEzVFBuQ3VaMW5DdHFjclotV09sMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0xkUDlhTDEzVFBuQ3VaMW5DdHFjclot V09sMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82OTQvTGRQOWFMMTNUUG5DdVoxbkN0cWNyWi1XT2wwLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMNOcO6yejvaJUMlJAu9AsWXEWIQllhIDuMTzX5w/9uF8cX8m657Z3vxhx1r WyibAOqanMfc7c9vTtfeAcmI9cnkEpP6r8j0mpphSjIpEm5mU3EdMG0HgB3dysWo oVxfuh0cAZeF62EfJ10SDtOA5DC7NEKaUmGNW+NdwhA35iXlkdNrJ0WXGM9i7Zyz NnRwxE2hNg8iDND/HnoDeXXjdRs3MAF+EStyyB/gqx2exKkD/Pyyt+4HQ9At8Qdj /7/Ex+uHD0TWPsnZOpPoiU0RO8taI323wP9Hyq+FRjdhnq7EU/TESJO++A8pJ6Pe 37J9JWjrZ6DOG4YN5ClfiW8KtQA= -----END CERTIFICATE-----Generated at Mon Dec 22 12:43:36 2025 by rpki-client