This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
File:                     4FbQUB1DDOD88NsGdbr8kLBdm_U.mft (raw, json)
Hash identifier:          TE5Um7vdr6PgGfFo6kRJrYZwgVo8BgbcCbzjds0mppg=
Subject key identifier:   12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
Manifest number:          15FE
Signing time:             Sat 22 Nov 2025 18:43:03 +0000
Manifest this update:     Sat 22 Nov 2025 18:43:03 +0000
Manifest next update:     Sun 07 Dec 2025 18:43:03 +0000
Files and hashes:         1: 3o4efsy6CF7jZ61dtOW7PqQSq94.roa (hash: kBN7u6BGw6aX4jO6ee9sQffgu3wHtY2kw5tnWjAwSDc=)
                          2: 4FbQUB1DDOD88NsGdbr8kLBdm_U.crl (hash: czTSSfwOSr7O69sKBIFhbjoQk3pv9jRx/URuL7MSspQ=)
                          3: 8oH6agpp1ENa38mQLZQr1iG0qnY.roa (hash: kCgm9wR/qw1bOTiSB8WF7+qt79rPFX9Gruyq07nzcjY=)
                          4: Htn5TbuZ0ywFb2QUrta39pHLTsM.roa (hash: W8JiYZ8GhlKTsZI0eWdZQICZ8luw3Ek3h9OwUiFN7yw=)
                          5: qsVmoq0KHHiMzxcwMrvP3kU9hqo.roa (hash: cWbsDbS0XIg1G0NaeGS0yc6PGzej0S2xn1+oZEyO6vg=)
                          6: vxiw72qJLhOZWd4axelngyu2BMs.roa (hash: cWyZP78E8QjkwpLE90bWmmtG3kW6i8AXs2mNvKYd69g=)
                          7: wsGZYljcA1Ick8Kg4FH_ygf-Jf8.roa (hash: JKqvbMmvJoK14+TL/yEi8jX2l01b0FGxFTqnYJsg6Gw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 15:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: Nov 15 01:31:51 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=1237FA2C47A961C2F966F3B20BB09D2477AEF307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4e:1c:dd:e1:32:ba:b9:74:3f:c7:64:44:c7:
                    56:ee:be:36:7a:80:45:63:f4:2b:18:6d:35:9b:1b:
                    62:c6:04:b5:ce:f8:53:1b:26:fc:cd:ac:1f:6c:05:
                    53:4d:b4:c4:57:10:0c:0c:f6:b4:c1:69:6d:69:3e:
                    2b:3d:f2:d8:ae:1b:c5:85:1b:3d:29:da:19:da:f7:
                    08:60:29:81:db:3c:a4:92:82:9c:f1:2e:19:ce:0c:
                    71:ab:07:60:dd:f5:84:93:95:1d:c3:72:ab:c0:0b:
                    bd:49:06:9b:06:cd:f2:2e:3f:12:da:33:54:97:ac:
                    57:d9:a1:d5:59:27:2c:88:b4:f9:04:17:3d:4e:8b:
                    ee:29:6a:43:59:a1:1b:34:84:1c:0b:ab:f8:2d:be:
                    a0:42:6b:4c:50:f7:95:7c:dc:05:12:64:12:17:c4:
                    97:a9:b2:1f:ee:f6:e8:89:81:8c:a1:44:2e:d2:a5:
                    83:b1:af:ba:3e:c2:3b:61:10:be:87:9c:e0:66:a3:
                    0a:c1:61:d3:84:79:19:f7:7c:82:bc:ed:5a:9e:63:
                    9e:81:d9:8e:b5:10:e0:b2:c9:e5:14:a8:a8:ed:ca:
                    1d:71:41:be:7d:97:a2:c2:3a:7a:36:e5:ff:87:71:
                    2f:46:1b:39:39:72:81:3d:01:18:af:40:4e:cd:dc:
                    50:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:7c:4a:fa:e4:0e:07:d2:ab:9f:fa:00:fb:b0:09:fc:f2:2b:
         1e:3b:ac:c2:2f:6e:c6:aa:ec:e3:ad:4b:93:02:b4:ed:55:3e:
         b5:21:79:a0:74:07:c8:2e:54:15:42:c8:44:db:45:c6:31:df:
         c4:0f:36:db:52:ee:b4:7c:6a:12:b4:9e:a5:a3:ea:ab:ad:00:
         72:30:bc:43:4d:f3:c5:e2:39:6c:8e:fc:31:bf:b6:75:07:4f:
         40:82:c4:5e:65:22:c8:fa:5b:00:4b:80:f2:25:08:10:05:00:
         c1:30:69:c4:3a:bf:45:08:29:ba:dc:89:56:a1:17:c7:97:b4:
         b3:3e:01:a2:6e:07:6a:be:59:2f:fd:5e:80:a4:7b:70:da:9e:
         fd:6f:27:b6:7f:79:d9:59:f9:e4:9c:b6:20:c6:63:f5:2a:75:
         31:4f:9a:25:7c:20:f7:d0:52:6e:4f:23:be:9a:d4:f7:8c:bd:
         30:84:b0:0f:fe:a8:a6:e0:4a:9c:29:a9:da:37:e0:e3:33:5f:
         73:7a:4b:ca:d2:9e:d7:04:19:1e:67:99:aa:27:b8:14:23:22:
         44:6e:8a:70:f7:b6:a0:b7:2b:67:29:9d:75:2e:89:f8:fe:01:
         35:6e:5e:e7:38:76:43:c8:61:7b:78:41:f0:85:07:3b:f7:9e:
         61:8d:4b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:50:16 2025 by rpki-client