This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.mft
File:                     1umiHoHKEuuEVa3sRmEEd-pfT0w.mft (raw, json)
Hash identifier:          Qhy1sVlzYwldk6zJ24TYrHpg/SsHjFXD5WhFSfxPrFE=
Subject key identifier:   14:B9:B6:16:0A:1A:90:DB:6E:81:3E:65:D8:4C:9F:CE:6C:95:57:3A
Authority key identifier: D6:E9:A2:1E:81:CA:12:EB:84:55:AD:EC:46:61:04:77:EA:5F:4F:4C
Certificate issuer:       /CN=D6E9A21E81CA12EB8455ADEC46610477EA5F4F4C
Certificate serial:       37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.mft
Manifest number:          09A6
Signing time:             Tue 02 Dec 2025 04:51:38 +0000
Manifest this update:     Tue 02 Dec 2025 04:51:38 +0000
Manifest next update:     Wed 17 Dec 2025 04:51:38 +0000
Files and hashes:         1: 1umiHoHKEuuEVa3sRmEEd-pfT0w.crl (hash: uHoQyFt/DkhcnABFgZOmNiJXXNtCUFaN3OI+K4sBvr0=)
                          2: 70U0r1cRjSONpL_UHhiDiY958Po.roa (hash: XR3YC8d3lhP8lBrbsPXK1g+e6MM7UOOW7wzM6Nck/G8=)
                          3: dcaQuBE44AwLuNd6dxZPWYD9438.roa (hash: oDkGhTTo4qslT5MFOngO6/aJZ0TE6+XDFLgbx9j629o=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E9A21E81CA12EB8455ADEC46610477EA5F4F4C
        Validity
            Not Before: Nov 15 01:34:49 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=14B9B6160A1A90DB6E813E65D84C9FCE6C95573A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:59:c5:0e:1e:ec:77:07:18:39:6c:f8:ae:
                    a9:fa:87:07:a8:ef:22:52:bb:b2:31:ef:8e:7a:42:
                    2e:5e:86:9d:cb:6f:01:c1:c6:b6:eb:4d:e5:67:0d:
                    af:ca:27:8a:d6:a7:3e:48:39:15:10:f2:72:e3:b3:
                    29:60:0e:10:f4:c5:b7:66:d9:ed:d5:e6:97:17:33:
                    be:9d:d5:e9:8e:ba:86:fe:61:34:b8:e3:ea:d3:78:
                    47:f8:66:71:a2:38:64:0e:c2:d3:40:33:0e:71:8e:
                    29:17:ff:f4:3c:e0:de:6c:7c:12:c7:bf:fb:6a:c0:
                    f0:8c:a2:eb:1e:f4:51:ee:18:69:75:c8:95:c3:44:
                    0c:88:cf:9a:60:ff:6c:fe:bc:a0:a9:00:77:3a:e6:
                    03:e0:3b:a3:b6:aa:15:ba:3a:2d:b2:b7:f6:37:62:
                    a1:3b:76:71:f7:98:23:ca:74:e4:43:1c:f4:1c:9e:
                    9e:6e:83:11:89:34:8b:cb:8a:1c:12:ff:31:10:6c:
                    fc:6c:89:21:ed:35:05:51:53:05:fb:77:27:f0:e0:
                    8d:e0:f3:e0:76:cd:d1:ee:fd:6a:1e:2c:6a:e9:e5:
                    51:5f:48:11:27:ec:68:33:b7:b3:a7:ea:a4:4c:83:
                    c2:36:45:ff:38:17:14:2a:e7:da:2b:cf:34:7b:a4:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B9:B6:16:0A:1A:90:DB:6E:81:3E:65:D8:4C:9F:CE:6C:95:57:3A
            X509v3 Authority Key Identifier:
                keyid:D6:E9:A2:1E:81:CA:12:EB:84:55:AD:EC:46:61:04:77:EA:5F:4F:4C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:b2:89:39:eb:ff:66:cb:5f:07:12:2f:33:46:3a:07:86:27:
         51:09:36:57:23:7a:83:3d:36:ac:ba:8c:07:0a:7c:49:dc:ac:
         22:1c:d4:40:0b:50:2f:a3:7d:20:31:b6:d1:91:b2:62:02:57:
         fc:54:29:13:3c:2c:ff:78:50:36:ed:3e:27:6d:b8:b3:a3:64:
         52:30:6a:70:13:f9:eb:f2:2a:b4:1f:66:dd:50:c7:fe:dc:8c:
         ea:fe:9e:58:7e:5b:e7:b2:04:ff:f3:f7:d8:d3:fe:8d:ce:6b:
         67:d7:a5:d8:a9:fa:d6:e1:b3:98:24:51:26:59:40:66:25:62:
         cc:b2:6b:b4:d2:93:de:1a:66:1a:28:30:9d:54:22:56:8d:b8:
         18:21:f2:06:b9:51:e7:3c:07:7e:73:58:97:ae:fb:24:69:45:
         10:08:ba:93:de:0e:0f:a4:a0:48:9d:ec:20:90:d6:d1:37:09:
         8c:6e:a9:a8:5c:70:61:74:f4:83:28:fe:01:e7:d3:60:4f:13:
         3d:04:4c:c9:e1:2c:c3:50:f0:3e:ef:83:d0:8e:6a:f3:b1:a7:
         70:eb:ab:ca:fc:68:29:5d:ee:47:12:ff:87:fa:84:22:62:e4:
         89:80:be:59:32:4f:6f:4f:90:f4:66:e7:c9:06:78:f8:80:a8:
         a2:5d:17:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:05:21 2025 by rpki-client