This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft
File:                     G_-mDYo0HWFiEcOLuSUGEINtO50.mft (raw, json)
Hash identifier:          mArhZXdiJbbfg8J3UxrlFxydntjoHoP8E3cQm0oynl8=
Subject key identifier:   CF:6D:62:E2:AE:D3:85:15:DD:B2:9A:BF:24:85:4D:D5:74:DE:C2:6C
Authority key identifier: 1B:FF:A6:0D:8A:34:1D:61:62:11:C3:8B:B9:25:06:10:83:6D:3B:9D
Certificate issuer:       /CN=1BFFA60D8A341D616211C38BB9250610836D3B9D
Certificate serial:       06
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G_-mDYo0HWFiEcOLuSUGEINtO50.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft
Manifest number:          01BB
Signing time:             Sun 21 Dec 2025 15:03:41 +0000
Manifest this update:     Sun 21 Dec 2025 15:03:41 +0000
Manifest next update:     Mon 05 Jan 2026 15:03:41 +0000
Files and hashes:         1: G_-mDYo0HWFiEcOLuSUGEINtO50.crl (hash: /INnTWevoTPIESYZLBaSTQwORjKSLB1JEftQL4/m8L8=)
                          2: JT1jIZbOORHe7D1W2-K1cgkhv9E.roa (hash: smXuoow/iYqnNnNQAqsOg52GEjWg89CROpEwLFzf63I=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G_-mDYo0HWFiEcOLuSUGEINtO50.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BFFA60D8A341D616211C38BB9250610836D3B9D
        Validity
            Not Before: Dec 15 01:32:09 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=CF6D62E2AED38515DDB29ABF24854DD574DEC26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:a2:c1:4c:f6:8c:5b:95:40:76:7a:41:9c:
                    bc:8a:ac:d8:44:a3:b5:39:86:60:92:d5:5b:d2:51:
                    b4:4d:55:d1:ea:37:a4:c5:c8:92:80:b0:9f:21:fb:
                    ba:d9:53:c5:4e:98:ff:13:04:3d:22:0a:fd:c2:f2:
                    05:12:e7:79:ee:e2:ff:19:c0:38:e6:b4:d0:29:7e:
                    f9:4d:ea:35:ef:46:e2:38:10:49:02:63:b3:0c:0e:
                    11:cc:70:ea:d8:ed:b1:be:9d:bd:e6:46:60:3f:ed:
                    7b:48:2a:be:8a:f3:47:0b:a1:e5:2d:9f:94:4e:7d:
                    61:0b:a1:ea:31:88:0c:aa:d6:94:44:9e:20:fb:ff:
                    0a:a4:da:6c:57:72:30:9f:6b:06:57:a7:5a:17:8e:
                    df:89:73:ac:41:6d:f5:ac:30:d6:a3:3e:48:93:c3:
                    9e:e3:5a:41:2f:f6:2f:df:72:11:3d:32:de:e7:55:
                    c8:ae:da:c4:26:fb:be:b2:db:b8:ae:a0:eb:3c:e4:
                    c4:c2:8b:f5:0b:24:23:fe:89:68:39:6b:cb:87:9a:
                    96:90:11:bd:b2:9a:fc:b9:87:b7:f7:6f:12:2d:50:
                    a1:5e:7a:37:c6:17:9a:2e:60:93:c0:c0:cc:cc:b8:
                    fb:11:9b:0a:6c:09:ce:71:d2:86:7d:11:2a:66:57:
                    42:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6D:62:E2:AE:D3:85:15:DD:B2:9A:BF:24:85:4D:D5:74:DE:C2:6C
            X509v3 Authority Key Identifier:
                keyid:1B:FF:A6:0D:8A:34:1D:61:62:11:C3:8B:B9:25:06:10:83:6D:3B:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G_-mDYo0HWFiEcOLuSUGEINtO50.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8b:68:4d:db:e5:a1:28:bb:c9:2e:a5:94:85:db:1e:08:73:
         a6:fa:1b:30:c9:fc:d2:e9:c7:e2:a4:5d:0d:17:6d:8a:1b:4f:
         ea:fe:f6:cd:10:8c:f1:9c:2a:86:b0:ea:6a:3f:f9:42:09:41:
         27:5c:4c:c0:a5:13:9f:75:d2:21:a1:8b:50:e0:ac:80:c4:a8:
         54:54:1d:e7:8d:4f:f5:74:eb:5a:aa:8f:18:57:db:46:9f:8b:
         c5:6a:87:fc:bc:bd:40:0a:82:36:c6:ad:6c:86:82:9b:22:f1:
         7f:21:9c:58:9b:e3:f7:09:96:d9:a9:f7:0f:fe:8a:76:d8:f3:
         9a:9f:31:62:a4:f1:57:f2:48:e3:07:58:c0:0b:c6:d0:09:cb:
         65:29:f4:3d:9a:ef:64:1e:d5:3b:ba:f5:23:b5:b1:ef:9a:ce:
         2e:2b:d4:2d:92:04:aa:60:af:93:7e:8b:34:f6:6d:c1:ba:03:
         7e:b0:3d:67:d1:55:4e:eb:4d:9a:38:94:d9:d4:96:6e:7e:e6:
         ae:76:6d:a5:b9:95:aa:9a:03:01:a4:bc:ac:cd:08:4b:5a:07:
         13:b5:3d:dd:da:10:15:b6:bb:60:2e:f5:d5:d1:06:0a:27:cc:
         df:42:35:24:9c:3f:60:7b:59:fc:10:a1:f7:33:19:ce:47:49:
         2a:25:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:20:43 2025 by rpki-client