This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20235/I2pldme3hGltAb3rkW-sYftYf2o.mft
File:                     I2pldme3hGltAb3rkW-sYftYf2o.mft (raw, json)
Hash identifier:          3YVv7eValqX6K6R+V+76vFbJS+BeOnMMQR4qDJk5NOM=
Subject key identifier:   C1:26:30:34:0B:5E:3D:D6:EE:F6:DD:5C:EC:F3:41:2C:AB:DB:27:DC
Authority key identifier: 23:6A:65:76:67:B7:84:69:6D:01:BD:EB:91:6F:AC:61:FB:58:7F:6A
Certificate issuer:       /CN=236A657667B784696D01BDEB916FAC61FB587F6A
Certificate serial:       25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2pldme3hGltAb3rkW-sYftYf2o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/I2pldme3hGltAb3rkW-sYftYf2o.mft
Manifest number:          091F
Signing time:             Sat 22 Nov 2025 20:06:43 +0000
Manifest this update:     Sat 22 Nov 2025 20:06:43 +0000
Manifest next update:     Sun 07 Dec 2025 20:06:43 +0000
Files and hashes:         1: 5HDWEqUCJo-FXNJ4eYQ258K6wsY.roa (hash: 8s2YwOsBjEk+T5X52KHkUoRBhY84isPN/h9j9HUyV6M=)
                          2: I2pldme3hGltAb3rkW-sYftYf2o.crl (hash: afbRjbRRdjdclH3Z72pz3eVBo6RLBSeBv9B2U2lVDlQ=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/I2pldme3hGltAb3rkW-sYftYf2o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/I2pldme3hGltAb3rkW-sYftYf2o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2pldme3hGltAb3rkW-sYftYf2o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236A657667B784696D01BDEB916FAC61FB587F6A
        Validity
            Not Before: Nov 15 01:44:11 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=C12630340B5E3DD6EEF6DD5CECF3412CABDB27DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:22:d7:94:9c:89:d3:64:e8:f3:f4:7b:e1:
                    35:9d:af:bc:5e:0c:f5:3c:4a:2f:39:c3:be:69:90:
                    b3:cd:c7:ea:ba:b8:a7:e0:ca:99:a2:9f:4e:77:79:
                    15:e6:b9:75:8b:13:4e:d1:df:0a:f3:c0:0f:a0:af:
                    1a:2a:1e:69:d3:87:58:6e:15:6d:4c:36:db:fd:df:
                    57:02:8f:e1:a6:7e:75:ef:4c:4b:70:30:00:ba:73:
                    68:d6:43:d6:30:b5:4b:e1:ba:47:c4:83:28:21:8a:
                    d9:2b:e0:6b:b0:d7:86:91:cb:6a:af:fc:65:b0:63:
                    ce:ea:d1:f0:5a:36:26:34:a1:f8:5a:a3:7c:9f:48:
                    53:b3:28:95:b3:58:59:03:7f:9e:3f:90:56:f2:60:
                    75:78:3b:b8:02:21:8c:6d:2a:18:9d:3a:ae:e0:64:
                    21:31:ea:f4:37:fb:82:67:36:77:bf:0b:95:e2:b0:
                    ef:dc:71:9d:f7:08:a4:4e:95:00:c2:79:a7:bb:44:
                    94:e5:f4:34:91:49:48:75:5a:f3:1a:11:09:09:a8:
                    1c:50:e6:02:45:9e:f5:18:5d:40:fd:bc:5a:78:7f:
                    57:3d:dc:f2:b4:73:09:20:23:c7:0f:2c:0a:d4:09:
                    4d:1f:6b:0a:d5:9c:28:e7:6a:da:40:b7:64:69:b9:
                    be:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:26:30:34:0B:5E:3D:D6:EE:F6:DD:5C:EC:F3:41:2C:AB:DB:27:DC
            X509v3 Authority Key Identifier:
                keyid:23:6A:65:76:67:B7:84:69:6D:01:BD:EB:91:6F:AC:61:FB:58:7F:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/I2pldme3hGltAb3rkW-sYftYf2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2pldme3hGltAb3rkW-sYftYf2o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/I2pldme3hGltAb3rkW-sYftYf2o.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6e:41:30:ce:38:51:4f:2c:5a:21:b5:3b:97:e4:90:f4:84:
         1f:f6:d5:f0:0f:24:a1:ee:10:f7:43:04:56:a1:2b:55:91:db:
         cb:ea:ca:86:ef:f0:f8:a7:5b:3f:27:7d:0c:3a:39:93:8c:ad:
         30:92:fa:ef:0f:88:78:b4:ee:6f:70:a2:5d:92:3d:af:30:85:
         80:c3:72:8a:4b:72:4a:83:55:cc:60:a1:7b:53:d8:40:1d:42:
         e9:4c:ea:4f:7a:ea:77:0d:2e:96:1a:55:86:22:2a:ac:f8:15:
         38:d3:de:01:c9:2a:64:eb:a7:50:d1:4f:d6:03:da:cf:32:61:
         bb:aa:a3:61:9e:65:d3:7f:f9:28:24:60:d8:c4:c5:b0:dc:22:
         f1:67:ca:15:52:40:14:f5:ed:e9:5c:07:b0:21:c4:c0:68:07:
         80:85:00:a3:5a:f2:a5:a9:e3:e2:ff:26:57:e5:9c:bc:ac:d9:
         bd:4e:55:36:fe:bd:c7:48:72:ed:02:8d:40:13:d5:b6:59:17:
         1d:16:66:dd:1b:f8:0b:0e:51:cc:ac:d5:09:09:78:bb:e3:0a:
         e4:92:67:9f:61:72:37:59:19:a8:6e:30:e5:7d:f3:ed:fe:5d:
         29:f6:c3:7d:7e:62:15:b3:86:f0:3d:4b:07:42:bf:61:2b:88:
         66:ee:6b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:09 2025 by rpki-client