This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft
File:                     UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft (raw, json)
Hash identifier:          fwiEK9FT49/NAzYLySiIIE1IBrlrMdGoh+FLuj+Ba5I=
Subject key identifier:   BF:B2:E6:18:86:11:A0:48:90:51:5F:05:EF:6D:BF:00:EE:4E:80:E7
Authority key identifier: 51:F1:BB:81:33:AC:D1:8F:E7:F5:DF:6C:35:0C:44:3A:6D:95:79:75
Certificate issuer:       /CN=51F1BB8133ACD18FE7F5DF6C350C443A6D957975
Certificate serial:       1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft
Manifest number:          09A6
Signing time:             Mon 22 Dec 2025 12:05:47 +0000
Manifest this update:     Mon 22 Dec 2025 12:05:47 +0000
Manifest next update:     Tue 06 Jan 2026 12:05:47 +0000
Files and hashes:         1: UfG7gTOs0Y_n9d9sNQxEOm2VeXU.crl (hash: xasT1Z+Ru0qizq+ku6LhK3bW0rBKCkrPOfUfme1stnA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 12:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51F1BB8133ACD18FE7F5DF6C350C443A6D957975
        Validity
            Not Before: Dec 15 01:38:06 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=BFB2E6188611A04890515F05EF6DBF00EE4E80E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:9f:86:1c:09:3f:8d:32:e0:f5:32:3b:69:
                    f6:57:17:aa:9b:8f:85:af:2f:89:2b:76:be:a5:94:
                    43:80:57:d3:99:73:05:d6:db:f1:82:5d:ae:76:e0:
                    9a:be:e9:56:c2:88:d3:fa:10:54:e3:c8:81:22:57:
                    20:30:7a:6b:44:04:5b:23:a2:08:2f:f7:dc:6d:7f:
                    d9:24:02:93:d3:2d:ea:4d:e2:02:b6:81:a1:91:bc:
                    8a:6e:e1:7b:ba:81:99:1b:89:21:e4:00:ee:47:f6:
                    87:66:a6:73:0c:28:37:84:5c:ea:71:5c:c0:54:df:
                    5d:b8:38:7f:19:02:8e:b2:2a:2a:c1:f1:0a:d3:d1:
                    c5:cd:22:8a:89:66:29:18:4d:4b:30:c6:86:92:36:
                    aa:ef:23:f4:c0:6c:ac:76:5c:5f:a8:8f:fc:87:14:
                    e4:5e:2a:26:aa:a3:f8:7a:7b:da:a0:3b:49:64:4e:
                    52:49:59:28:8a:76:b2:d5:95:f4:82:d8:dd:58:bc:
                    2f:f4:4f:29:98:59:07:01:0e:f3:17:5a:43:4f:93:
                    8b:46:80:f1:d5:21:27:92:35:82:7d:a7:83:75:71:
                    50:44:ac:76:b5:e6:f3:88:ce:92:59:86:cc:d3:d5:
                    1a:d8:7f:7c:21:ee:e8:85:3d:05:96:72:b7:49:98:
                    fa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B2:E6:18:86:11:A0:48:90:51:5F:05:EF:6D:BF:00:EE:4E:80:E7
            X509v3 Authority Key Identifier:
                keyid:51:F1:BB:81:33:AC:D1:8F:E7:F5:DF:6C:35:0C:44:3A:6D:95:79:75

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d5:d9:c2:32:8d:30:27:cc:c0:e2:46:be:f2:be:d2:cf:cb:
         90:45:e7:97:e8:40:39:47:57:c7:b1:c9:27:e5:43:72:da:0b:
         3f:53:90:0c:32:f8:08:63:6e:df:8a:78:fe:32:21:7f:e2:ae:
         53:a8:70:12:e3:30:f5:1a:17:e7:82:c0:c2:ce:71:16:91:1f:
         0f:d5:57:5e:4e:54:a9:0e:bc:4c:7f:8b:70:35:fa:dc:c8:e9:
         7f:e7:00:89:b1:e6:73:38:5a:15:16:9d:5f:7d:82:be:79:1b:
         3d:20:04:44:9e:4d:d2:0b:5d:72:92:31:b9:d8:49:75:b1:4b:
         05:ba:98:36:79:78:0c:34:d9:f4:1c:89:0b:98:05:97:0e:1b:
         9c:fe:f9:85:3f:1a:1f:e4:99:36:42:71:79:a6:50:fa:42:e6:
         53:2b:e6:6d:95:dc:1d:6e:d7:23:32:61:b3:97:9e:e8:8e:1c:
         cc:ab:76:51:99:51:d2:95:98:8b:1e:d3:9d:ff:5d:ec:8d:c5:
         36:f8:85:87:df:16:8a:bb:f9:9a:cb:f5:ad:96:5c:64:46:fb:
         f8:7e:32:cd:1e:e0:e2:cc:3e:ef:f6:a3:e7:1c:8c:2b:d0:6e:
         dd:00:a0:45:48:16:cf:0d:f6:c4:ad:97:61:15:0e:de:a4:42:
         a9:2a:d4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:36:34 2025 by rpki-client