This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2005/7Gw3q9axO6v8tw_itXxZjBbUoH8.mft
File:                     7Gw3q9axO6v8tw_itXxZjBbUoH8.mft (raw, json)
Hash identifier:          4ns0hV9dX4McBJqlkq4Q1+9EzY1NbaZ4ZQHJZ2b8kDs=
Subject key identifier:   88:65:45:A2:E8:85:76:18:73:EB:DA:04:CE:BE:9F:E6:EE:48:B6:20
Authority key identifier: EC:6C:37:AB:D6:B1:3B:AB:FC:B7:0F:E2:B5:7C:59:8C:16:D4:A0:7F
Certificate issuer:       /CN=EC6C37ABD6B13BABFCB70FE2B57C598C16D4A07F
Certificate serial:       2E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7Gw3q9axO6v8tw_itXxZjBbUoH8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/7Gw3q9axO6v8tw_itXxZjBbUoH8.mft
Manifest number:          0953
Signing time:             Sat 22 Nov 2025 19:35:58 +0000
Manifest this update:     Sat 22 Nov 2025 19:35:58 +0000
Manifest next update:     Sun 07 Dec 2025 19:35:58 +0000
Files and hashes:         1: 7Gw3q9axO6v8tw_itXxZjBbUoH8.crl (hash: Z8lm+nZBq6QyGBxY771PrzQXXFTLSiCemnKiUjB2JMI=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/7Gw3q9axO6v8tw_itXxZjBbUoH8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/7Gw3q9axO6v8tw_itXxZjBbUoH8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7Gw3q9axO6v8tw_itXxZjBbUoH8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC6C37ABD6B13BABFCB70FE2B57C598C16D4A07F
        Validity
            Not Before: Nov 15 01:40:23 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=886545A2E885761873EBDA04CEBE9FE6EE48B620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:1b:96:dd:1e:85:f7:5b:48:d4:d1:4b:5b:
                    c4:f3:bd:e1:12:03:d3:70:1f:54:50:3a:e5:be:68:
                    50:d2:77:23:23:15:9c:3a:57:37:1e:39:69:08:b9:
                    95:9a:1b:39:a4:ba:f3:80:0f:dd:3e:33:9f:b1:7a:
                    c8:18:ba:9f:ea:01:48:da:51:ea:35:a4:89:99:a2:
                    5f:24:5c:ae:6f:63:0a:40:23:13:a2:de:8c:d3:7a:
                    d5:c9:24:68:d1:5e:ac:4d:50:94:c9:a8:94:42:ac:
                    1f:52:f0:ea:a3:3d:69:0f:f4:48:ec:35:ba:ed:dc:
                    1f:d9:2b:a2:58:2a:87:d3:f0:e0:fa:4b:d5:ab:56:
                    42:5d:93:6f:8b:ea:7c:6c:c0:e4:ba:f5:32:74:ff:
                    10:c1:04:ef:85:86:d9:fb:3c:27:c6:ce:11:61:95:
                    1d:75:fb:5e:af:ab:6c:f3:be:33:e2:07:3d:04:cf:
                    0c:03:58:3f:4b:5a:c8:33:dc:fe:e6:f9:8f:05:cf:
                    1d:9c:6e:38:df:47:33:6f:fe:ed:06:0a:66:f2:95:
                    9b:ca:30:8d:34:99:33:b7:9b:4a:7c:bf:55:f3:b2:
                    78:be:e1:19:59:10:2e:36:7c:6e:eb:ac:b8:6b:e4:
                    6e:6a:38:b6:dd:7c:66:7c:91:09:3e:c2:d3:47:38:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:65:45:A2:E8:85:76:18:73:EB:DA:04:CE:BE:9F:E6:EE:48:B6:20
            X509v3 Authority Key Identifier:
                keyid:EC:6C:37:AB:D6:B1:3B:AB:FC:B7:0F:E2:B5:7C:59:8C:16:D4:A0:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/7Gw3q9axO6v8tw_itXxZjBbUoH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7Gw3q9axO6v8tw_itXxZjBbUoH8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/7Gw3q9axO6v8tw_itXxZjBbUoH8.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f3:03:94:4a:4d:12:25:a0:56:ac:48:c4:0e:e3:40:8e:66:
         23:8b:12:34:3e:51:3c:70:ee:ad:ba:4c:eb:e3:70:25:c6:16:
         2b:61:dd:6c:dc:d9:66:22:67:80:cd:7c:49:32:2b:64:ed:38:
         8b:dd:a7:5f:a7:43:de:18:06:9c:f4:02:2e:45:53:ea:8a:ea:
         9b:fc:8a:d7:4e:a0:fd:d4:48:5d:45:53:9c:8a:e3:77:8a:f9:
         6a:8d:0f:fe:b6:93:f5:db:a9:00:68:40:b2:6d:44:13:52:65:
         50:34:de:05:d2:7c:15:8f:32:79:fc:5f:db:ef:d2:4f:30:ba:
         74:94:75:c4:ba:ed:8a:6c:7e:70:8b:e6:e1:4c:4a:8b:6e:d4:
         70:c7:96:d9:99:eb:52:ed:f0:b1:b6:7d:d4:24:1b:41:1b:59:
         8f:d5:44:f5:3a:9b:fb:bb:2d:a9:a2:de:e4:6f:78:28:b1:19:
         ed:fe:b3:b9:c0:4b:9c:45:ae:5c:2d:44:d9:77:92:65:df:03:
         19:c3:b2:30:84:68:72:90:f5:98:b6:fb:bb:2f:19:82:a2:a9:
         a1:78:52:33:00:e3:af:8c:f8:7f:b3:81:a7:1a:9e:0f:b5:ad:
         d3:52:2f:79:0c:43:27:f5:67:5b:52:6f:80:85:20:dc:50:df:
         de:3c:7c:5c
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQzZD
MzdBQkQ2QjEzQkFCRkNCNzBGRTJCNTdDNTk4QzE2RDRBMDdGMB4XDTI1MTExNTAx
NDAyM1oXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoODg2NTQ1QTJFODg1NzYx
ODczRUJEQTA0Q0VCRTlGRTZFRTQ4QjYyMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALs/G5bdHoX3W0jU0UtbxPO94RID03AfVFA65b5oUNJ3IyMVnDpX
Nx45aQi5lZobOaS684AP3T4zn7F6yBi6n+oBSNpR6jWkiZmiXyRcrm9jCkAjE6Le
jNN61ckkaNFerE1QlMmolEKsH1Lw6qM9aQ/0SOw1uu3cH9krolgqh9Pw4PpL1atW
Ql2Tb4vqfGzA5Lr1MnT/EMEE74WG2fs8J8bOEWGVHXX7Xq+rbPO+M+IHPQTPDANY
P0tayDPc/ub5jwXPHZxuON9HM2/+7QYKZvKVm8owjTSZM7ebSny/VfOyeL7hGVkQ
LjZ8buusuGvkbmo4tt18ZnyRCT7C00c4p/cCAwEAAaOCAj8wggI7MB0GA1UdDgQW
BBSIZUWi6IV2GHPr2gTOvp/m7ki2IDAfBgNVHSMEGDAWgBTsbDer1rE7q/y3D+K1
fFmMFtSgfzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNS83R3czcTlheE82djh0d19pdFh4WmpCYlVvSDguY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC83R3czcTlheE82djh0d19pdFh4WmpC
YlVvSDguY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjAwNS83R3czcTlheE82djh0d19pdFh4WmpCYlVvSDgubWZ0
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAVfMDlEpNEiWgVqxIxA7jQI5mI4sSND5RPHDurbpM6+NwJcYWK2HdbNzZ
ZiJngM18STIrZO04i92nX6dD3hgGnPQCLkVT6orqm/yK106g/dRIXUVTnIrjd4r5
ao0P/raT9dupAGhAsm1EE1JlUDTeBdJ8FY8yefxf2+/STzC6dJR1xLrtimx+cIvm
4UxKi27UcMeW2ZnrUu3wsbZ91CQbQRtZj9VE9Tqb+7stqaLe5G94KLEZ7f6zucBL
nEWuXC1E2XeSZd8DGcOyMIRocpD1mLb7uy8ZgqKpoXhSMwDjr4z4f7OBpxqeD7Wt
01IveQxDJ/VnW1JvgIUg3FDf3jx8XA==
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:13:28 2025 by rpki-client