This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
File:                     7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft (raw, json)
Hash identifier:          couDoV2kiKjBmwEZmqjJCGeMoRhsB/Pyu83vDqm6Rzs=
Subject key identifier:   2A:59:33:03:03:DE:16:FE:65:23:A5:26:B0:3C:8F:09:15:B6:97:BC
Authority key identifier: EE:74:9A:ED:B2:74:53:82:7D:BA:83:25:F4:29:84:FA:79:C3:CF:76
Certificate issuer:       /CN=EE749AEDB27453827DBA8325F42984FA79C3CF76
Certificate serial:       29
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
Manifest number:          095A
Signing time:             Tue 02 Dec 2025 06:39:46 +0000
Manifest this update:     Tue 02 Dec 2025 06:39:46 +0000
Manifest next update:     Wed 17 Dec 2025 06:39:46 +0000
Files and hashes:         1: 7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl (hash: PpaEnWKJFnGtrwHPcWeAjB9eA52z9LuoC9T99zv8/Cs=)
                          2: JDgeaMKQJV5QrEw8FvQvdbx-B7M.roa (hash: Ebn3c/G70pJ3WMwcFxysJ9IT5J1p47JGyO+jwH3KcB8=)
                          3: qFoIeIMO2M3KuT6GqHoeMJugV1o.roa (hash: 1hc4DJuncS1V9gKuN31LUn202vFgw+nBoaEMcwJI1Os=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE749AEDB27453827DBA8325F42984FA79C3CF76
        Validity
            Not Before: Nov 15 01:44:05 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=2A59330303DE16FE6523A526B03C8F0915B697BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:4a:5a:51:9c:d6:a4:8d:a4:75:f6:a1:38:
                    e0:b6:0e:0a:ce:9a:87:aa:b6:d1:65:d7:1c:71:da:
                    bf:f7:68:15:db:43:35:17:2c:0d:ae:06:97:7c:e1:
                    2f:6b:9f:c0:20:d5:2c:4e:5f:51:e6:f1:d2:93:aa:
                    6a:6e:f1:95:2f:4b:e3:7b:ee:7d:73:d2:55:86:39:
                    c0:c5:a7:91:21:aa:a7:c2:bc:05:27:43:d5:31:99:
                    52:47:21:34:ec:ea:d1:83:7b:55:18:eb:36:f6:d0:
                    fb:55:0c:ff:d4:f9:e2:ac:9b:2f:08:ee:f9:90:db:
                    f3:c9:d5:e3:9e:f7:3d:c5:b9:c4:0a:d3:18:fb:1d:
                    52:fe:59:6d:39:42:e9:33:9a:ce:7c:59:bc:1a:f5:
                    a5:a8:17:7a:5c:0f:49:fe:0f:61:33:73:34:85:9e:
                    c7:1b:40:d7:de:30:31:e1:32:17:02:a0:31:d4:ba:
                    ff:2c:84:1e:15:58:e5:23:54:27:b9:b0:61:a1:85:
                    55:f5:36:87:61:66:1e:5c:1c:72:f0:36:a3:cf:cf:
                    b4:5b:ec:1e:b2:00:bf:ef:a5:16:1b:a8:39:4e:0f:
                    21:c5:c5:8c:74:51:0c:b6:3d:31:c0:69:96:17:ef:
                    2e:50:43:d3:11:2f:8c:ef:d1:38:54:e8:41:87:97:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:59:33:03:03:DE:16:FE:65:23:A5:26:B0:3C:8F:09:15:B6:97:BC
            X509v3 Authority Key Identifier:
                keyid:EE:74:9A:ED:B2:74:53:82:7D:BA:83:25:F4:29:84:FA:79:C3:CF:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:af:65:88:1a:ad:8b:44:59:cf:43:96:cb:6b:e4:44:4f:27:
         e4:59:48:84:15:79:e5:9c:18:08:15:c7:83:9c:d1:a6:72:5f:
         75:39:af:17:29:34:9c:0f:06:1c:cb:93:49:3d:ec:67:03:14:
         f9:60:2e:2c:8b:78:55:6d:de:cf:fd:29:5b:2e:c9:44:ff:1e:
         d1:10:9d:bd:b5:41:ba:58:a1:19:f8:03:24:c4:2c:e9:9e:15:
         9c:66:c6:78:35:f8:c8:74:20:41:7b:33:be:ac:7e:67:b0:f8:
         cc:61:12:d7:d4:2f:d1:21:b9:c8:14:47:c1:a5:58:b0:6b:37:
         8e:c9:d7:32:ad:3d:a7:2a:f1:b8:e8:1d:37:eb:c5:20:62:12:
         7b:75:c5:00:f4:52:59:5d:54:65:49:a6:23:f8:95:a5:e2:90:
         a6:8e:2f:28:27:bc:27:4f:92:80:7b:8f:9b:e5:a4:76:9c:5e:
         6a:42:17:88:94:46:bc:df:fe:35:1a:c1:e0:bc:be:48:bc:c2:
         02:ee:12:b4:67:ef:0b:2d:f9:f6:d3:b7:68:4f:67:ea:b0:7a:
         dc:4c:2d:46:d7:96:f3:38:fb:a0:a7:b1:dd:82:59:b2:5f:f3:
         7d:e2:4e:40:24:f1:d6:86:bf:07:61:af:9f:54:72:e7:ad:c8:
         5f:52:e2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:20:07 2025 by rpki-client