This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
File:                     4qCwBJ8aPRI9yspc61tOXp7HlNc.mft (raw, json)
Hash identifier:          jAHbPgV+nBzB55zt7dHn8R/rFDotGJcfPN5B0hFXbwg=
Subject key identifier:   51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5
Authority key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7
Certificate issuer:       /CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
Certificate serial:       67
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
Manifest number:          1049
Signing time:             Tue 02 Dec 2025 08:36:42 +0000
Manifest this update:     Tue 02 Dec 2025 08:36:42 +0000
Manifest next update:     Wed 17 Dec 2025 08:36:42 +0000
Files and hashes:         1: 4qCwBJ8aPRI9yspc61tOXp7HlNc.crl (hash: QkwEkKBP8xO4Cq3lTB2/Zq6qIMITt42NaS5aiK+MuIc=)
                          2: 8pHUS4lwXU7NtzvaexhQoV7N5qg.roa (hash: QYtQjNVp28H/4A6E0hwPfz4dJqsmOAbTLINutHHPQ0c=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
        Validity
            Not Before: Nov 15 01:32:31 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=510BCAF6CF4E112B82DA277148384A9D6FD71BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:60:22:35:90:bd:b8:25:f3:00:be:13:e7:
                    1f:bb:ac:89:ac:80:b0:e9:1a:cc:ff:34:9f:c1:c8:
                    8b:d8:4e:cc:9d:3f:d9:9e:36:f5:e9:10:23:d1:84:
                    5e:17:ca:31:73:70:7f:53:d9:8b:e8:5a:b0:ed:d1:
                    db:07:c7:0c:6c:98:5c:34:9d:8e:b0:2d:bf:c5:6d:
                    29:13:1b:fb:0a:12:6f:38:6b:be:1e:9e:67:c8:06:
                    d9:92:17:2f:9a:3e:99:30:32:01:53:46:a0:16:03:
                    38:0d:4d:3f:7f:4d:43:81:4c:e4:df:44:16:50:36:
                    81:19:36:4a:59:5a:a0:4f:3c:5e:4e:a9:92:17:b2:
                    8c:63:a0:b8:40:de:76:8d:4b:05:33:14:00:f8:b1:
                    c1:d4:89:09:26:d0:a8:84:c2:d6:95:27:cf:8e:14:
                    ae:48:b5:c4:88:1c:92:d5:64:d7:de:21:ee:02:f9:
                    57:c5:e2:fb:88:c1:95:06:1b:83:cd:6e:2f:b5:18:
                    ce:bb:16:a4:0c:f0:aa:7a:26:53:ef:6e:c2:4d:12:
                    73:91:fc:8d:7a:43:b5:64:71:db:3f:44:55:80:1d:
                    d7:c6:2f:aa:7a:31:e4:0b:d0:1c:40:38:03:a6:d5:
                    fa:85:20:66:72:20:b4:5e:9d:de:f7:05:73:e1:8b:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5
            X509v3 Authority Key Identifier:
                keyid:E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:37:a9:19:de:07:ac:8e:44:95:4e:86:0f:f8:07:9b:17:b6:
         75:41:89:34:45:56:c2:ea:02:8c:23:06:db:6e:b5:33:d7:73:
         3b:69:4b:d2:b2:a3:24:df:a0:d7:6b:fd:ad:dd:c4:bc:70:83:
         59:c6:06:a1:9c:2c:db:c8:de:26:bc:8c:f6:04:26:c3:e8:14:
         4d:82:fa:23:dc:d7:f8:e2:da:fe:5a:16:9a:ad:17:4b:3c:d2:
         25:29:09:26:d7:19:69:06:82:65:3d:e1:6f:af:2a:c8:28:a4:
         78:0b:f1:49:d2:30:a1:89:c5:62:61:7f:e4:82:c0:76:cf:a3:
         c5:6e:88:9d:6a:5b:fa:be:2a:17:b1:e5:6d:b1:d3:2f:f1:1c:
         7a:c3:38:bd:c4:32:52:8c:57:5d:9b:93:5c:44:4c:14:c6:22:
         6e:74:fa:1d:2a:37:1c:eb:7b:3c:2d:e5:29:2b:a8:b1:e8:4c:
         91:fc:54:d9:d9:51:df:fa:92:74:72:ec:e9:9c:77:b4:2e:f8:
         52:c6:4b:7e:1b:34:9c:1a:76:29:83:b4:f2:2e:ca:8d:b1:83:
         12:b2:bf:50:3d:80:a5:e5:42:1d:bd:05:e0:4d:eb:c7:b5:03:
         14:f3:11:5a:ee:b3:28:6f:3e:69:c7:22:9a:9a:5d:43:49:83:
         02:0c:8d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:37:27 2025 by rpki-client