This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.mft
File:                     K-df0Cgn2f-Jm53T6R1POCu1bUk.mft (raw, json)
Hash identifier:          ozdjQU0HMupv9iEzdJcIJIs1XkkcwQN2hzUN1uHgPyA=
Subject key identifier:   94:33:17:24:11:98:0E:D8:5F:E5:A5:01:BD:A2:00:F4:6D:EE:5F:81
Authority key identifier: 2B:E7:5F:D0:28:27:D9:FF:89:9B:9D:D3:E9:1D:4F:38:2B:B5:6D:49
Certificate issuer:       /CN=2BE75FD02827D9FF899B9DD3E91D4F382BB56D49
Certificate serial:       09
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/K-df0Cgn2f-Jm53T6R1POCu1bUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.mft
Manifest number:          0500
Signing time:             Sun 25 Jan 2026 21:05:46 +0000
Manifest this update:     Sun 25 Jan 2026 21:05:46 +0000
Manifest next update:     Mon 09 Feb 2026 21:05:46 +0000
Files and hashes:         1: K-df0Cgn2f-Jm53T6R1POCu1bUk.crl (hash: LJWebIb+k2o+YJ7xEC8YdVxtmGmwc6BkJXU23Ht6siw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/K-df0Cgn2f-Jm53T6R1POCu1bUk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE75FD02827D9FF899B9DD3E91D4F382BB56D49
        Validity
            Not Before: Jan 15 01:43:16 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=9433172411980ED85FE5A501BDA200F46DEE5F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:29:5e:97:e5:e3:67:d0:9a:1c:91:34:6c:
                    77:45:8f:ca:68:6e:87:e5:2e:c0:06:7b:fb:fa:da:
                    16:2a:75:4d:af:49:97:e5:44:18:bb:d3:ae:97:78:
                    de:1c:24:87:a9:3b:f3:d8:6e:09:20:21:29:51:0e:
                    05:7f:3f:87:54:bc:8d:16:15:78:97:d5:4a:28:90:
                    10:3c:ec:aa:1a:8b:68:5b:36:3c:f2:0c:75:6a:57:
                    14:08:1d:67:6b:da:cc:0d:ef:d4:89:07:dd:9b:53:
                    d6:87:bd:14:d0:99:cd:85:3b:42:f3:83:47:1d:65:
                    0e:a3:43:f5:38:c6:49:69:a4:d3:82:bd:95:2d:f8:
                    1d:b2:4a:ca:1c:16:de:83:73:38:7a:4a:2f:00:55:
                    f5:da:05:a8:e3:c5:d3:d8:87:c8:f1:be:e3:51:17:
                    d3:51:0d:a7:23:59:18:af:4b:57:2c:eb:92:ba:4d:
                    c2:56:f4:53:e4:f6:59:9d:e4:d7:57:70:67:f2:48:
                    5f:1c:0d:47:f8:a2:bf:99:e6:7a:0d:a8:bb:1f:0e:
                    07:f4:bf:80:46:67:9e:99:eb:12:5b:62:7c:b5:c8:
                    44:9e:88:79:bc:80:bb:42:bc:aa:01:50:2c:31:75:
                    9d:15:41:53:72:28:73:dc:2c:80:d9:be:63:c7:0e:
                    5b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:33:17:24:11:98:0E:D8:5F:E5:A5:01:BD:A2:00:F4:6D:EE:5F:81
            X509v3 Authority Key Identifier:
                keyid:2B:E7:5F:D0:28:27:D9:FF:89:9B:9D:D3:E9:1D:4F:38:2B:B5:6D:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/K-df0Cgn2f-Jm53T6R1POCu1bUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:3e:28:98:95:17:f7:a0:58:bf:a0:e5:17:41:37:5b:ae:e6:
         9c:8e:30:cb:e9:61:84:03:85:7d:9f:97:f3:38:70:25:d6:c0:
         26:3e:94:2d:b3:53:b7:3f:87:ab:9b:fb:cc:19:8c:b8:40:00:
         62:f7:72:4a:df:5b:74:cd:69:06:2e:4f:3a:52:d0:37:8d:f8:
         6b:22:fd:32:c2:92:72:71:55:5a:9d:c3:26:51:c8:4c:a8:ff:
         47:ae:03:43:2c:00:6e:32:d6:69:7a:80:97:91:8d:33:29:1c:
         b6:34:1a:7c:c3:b8:58:b4:31:61:b4:70:96:e0:d7:6e:47:f4:
         c3:82:62:54:a3:1f:f9:1c:c6:91:96:b2:f7:ce:30:0b:a1:d7:
         7d:f7:f5:0f:e2:85:32:54:d9:9e:7b:cd:1d:db:d5:f8:f2:5e:
         e8:5f:82:bf:94:ab:c8:b2:be:d7:fa:b7:59:2f:fe:26:02:44:
         64:69:dd:5d:f0:28:83:f0:c0:57:81:a9:9f:e4:58:9b:c5:13:
         94:1b:a5:c8:c8:e7:dc:d4:f8:23:6e:3d:5a:43:7d:c5:e8:13:
         6d:e7:34:75:8d:d0:b5:08:fc:c2:fd:36:84:ac:a9:dc:51:33:
         d5:44:d8:d5:2a:c7:a1:83:56:d7:ae:35:17:5d:b2:4a:8d:2a:
         e7:52:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:03:48 2026 by rpki-client