This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.mft File: nhRg0miPbRBouXwfkUBAQ0uPAyQ.mft (raw, json) Hash identifier: 9KM1V6qudBG6/Y09kzfc5pSvh24etB+ivJUjEr1mRik= Subject key identifier: 81:5B:82:09:6E:DF:10:59:95:95:2F:64:7D:A7:3D:9D:A5:E7:73:2F Authority key identifier: 9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24 Certificate issuer: /CN=9E1460D2688F6D1068B97C1F914040434B8F0324 Certificate serial: 52 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.mft Manifest number: 0A83 Signing time: Mon 22 Dec 2025 11:00:21 +0000 Manifest this update: Mon 22 Dec 2025 11:00:21 +0000 Manifest next update: Tue 06 Jan 2026 11:00:21 +0000 Files and hashes: 1: 7PaQZjqCefRmWBL5iT2SRqUNRaE.roa (hash: DNVuYVrHHjsJYxFSEJRBP/a/TFRgzleETEzN0/BUIMU=) 2: nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl (hash: 4oWn50XgQqSyvt/8KBz5c4EbMvtYL8gRx8P9ezheq2c=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 05:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E1460D2688F6D1068B97C1F914040434B8F0324 Validity Not Before: Dec 15 01:39:56 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=815B82096EDF105995952F647DA73D9DA5E7732F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3d:91:3f:af:cb:f6:08:62:90:26:92:c7:8f: b9:d8:2f:a4:06:53:b7:fe:b9:86:fd:f8:0d:60:51: 29:2c:6f:a3:b1:fb:67:5d:a7:83:52:cc:14:94:50: fe:db:84:ad:db:ec:b4:6a:46:82:71:0b:df:70:dd: 6b:ee:4a:5b:b7:3d:6e:5c:b5:3f:79:ce:11:2b:56: f7:fa:49:00:0d:cf:97:88:d5:07:3d:4f:ae:85:4b: 7c:44:ee:32:68:97:db:c0:da:e5:05:ce:3a:08:99: 79:0d:e1:c8:e7:7a:c6:9f:9e:31:d7:59:72:60:15: 27:c1:e8:0b:12:0a:bb:48:72:c7:36:45:58:c2:d9: 58:3b:07:b6:5e:c1:b5:d7:f9:b1:5b:b4:06:ba:4e: 49:e1:3b:7c:65:ed:9b:6e:71:11:39:31:ef:20:11: 27:5c:20:18:08:41:66:50:89:c4:6f:9b:e2:1d:03: 49:91:4b:eb:13:97:53:d4:31:aa:27:0f:2e:51:b1: 7f:79:44:b8:7f:9d:f4:77:43:ef:b3:9f:2b:57:35: 81:45:86:09:d7:89:ba:d8:39:7a:73:88:a5:bf:68: 34:54:dd:f0:2b:d7:1d:73:ea:78:7d:3a:44:ac:00: c5:f8:16:db:1b:6f:dd:ac:cc:53:c0:06:7e:72:8b: 4a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5B:82:09:6E:DF:10:59:95:95:2F:64:7D:A7:3D:9D:A5:E7:73:2F X509v3 Authority Key Identifier: keyid:9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:10:78:e0:60:41:90:82:ad:a9:38:9f:1e:71:31:4e:f0:d7: 66:e3:9c:0f:01:7a:8e:66:58:91:06:48:62:4f:5f:ec:28:3a: 37:af:17:3b:1d:45:4f:5e:9e:a8:c3:94:0f:7c:c7:5d:c0:ab: e1:13:e7:f7:74:ce:bb:9c:6e:c2:d9:a3:73:f9:37:ab:93:4d: cd:8f:a5:97:9a:86:d2:ff:99:8e:83:42:0d:61:69:aa:29:bf: ec:2e:62:87:a5:30:d4:cc:47:fa:13:d7:8c:95:79:e0:79:ff: e0:ee:23:f1:af:34:d1:14:3b:8d:94:1b:6d:aa:f3:1c:a8:8b: d6:73:dc:7e:06:14:13:64:1f:d8:88:ba:ae:39:17:57:94:c6: 75:39:a4:ba:53:1a:86:60:37:4a:53:cd:7b:91:2c:0c:49:e3: 8d:cc:dc:d2:25:e0:54:56:fd:a3:19:eb:2f:7a:b5:59:ea:9d: ea:53:74:d1:35:b3:b8:f7:ac:36:f2:33:9b:24:a1:9f:70:5c: 4c:ff:57:03:ea:8d:db:ba:04:dd:05:f9:f5:bb:e4:ac:92:86: 49:43:55:93:fb:47:a1:29:b5:81:94:d7:91:6b:e6:6a:a4:a6: 3a:20:dd:69:9e:bc:3b:91:d5:2c:a1:9e:d6:d2:79:73:09:2b: cc:9d:c8:cc -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTE0 NjBEMjY4OEY2RDEwNjhCOTdDMUY5MTQwNDA0MzRCOEYwMzI0MB4XDTI1MTIxNTAx Mzk1NloXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoODE1QjgyMDk2RURGMTA1 OTk1OTUyRjY0N0RBNzNEOURBNUU3NzMyRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANw9kT+vy/YIYpAmksePudgvpAZTt/65hv34DWBRKSxvo7H7Z12n g1LMFJRQ/tuErdvstGpGgnEL33Dda+5KW7c9bly1P3nOEStW9/pJAA3Pl4jVBz1P roVLfETuMmiX28Da5QXOOgiZeQ3hyOd6xp+eMddZcmAVJ8HoCxIKu0hyxzZFWMLZ WDsHtl7Btdf5sVu0BrpOSeE7fGXtm25xETkx7yARJ1wgGAhBZlCJxG+b4h0DSZFL 6xOXU9QxqicPLlGxf3lEuH+d9HdD77OfK1c1gUWGCdeJutg5enOIpb9oNFTd8CvX HXPqeH06RKwAxfgW2xtv3azMU8AGfnKLSmECAwEAAaOCAj8wggI7MB0GA1UdDgQW BBSBW4IJbt8QWZWVL2R9pz2dpedzLzAfBgNVHSMEGDAWgBSeFGDSaI9tEGi5fB+R QEBDS48DJDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjI1MS9uaFJnMG1pUGJSQm91WHdma1VCQVEwdVBBeVEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9uaFJnMG1pUGJSQm91WHdma1VCQVEw dVBBeVEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjI1MS9uaFJnMG1pUGJSQm91WHdma1VCQVEwdVBBeVEubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEACBB44GBBkIKtqTifHnExTvDXZuOcDwF6jmZYkQZIYk9f7Cg6N68XOx1F T16eqMOUD3zHXcCr4RPn93TOu5xuwtmjc/k3q5NNzY+ll5qG0v+ZjoNCDWFpqim/ 7C5ih6Uw1MxH+hPXjJV54Hn/4O4j8a800RQ7jZQbbarzHKiL1nPcfgYUE2Qf2Ii6 rjkXV5TGdTmkulMahmA3SlPNe5EsDEnjjczc0iXgVFb9oxnrL3q1Weqd6lN00TWz uPesNvIzmyShn3BcTP9XA+qN27oE3QX59bvkrJKGSUNVk/tHoSm1gZTXkWvmaqSm OiDdaZ68O5HVLKGe1tJ5cwkrzJ3IzA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:31:37 2025 by rpki-client