This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/284/z17jVSLaMWQu4wlAjJpJHGSgXPs.mft
File:                     z17jVSLaMWQu4wlAjJpJHGSgXPs.mft (raw, json)
Hash identifier:          Ri9TM5hFYp2KvnpbB9bajItwPOQQZyQohkjwBfu0taY=
Subject key identifier:   9A:55:57:F8:2C:60:CD:E8:B7:E0:0E:C0:FA:D2:CD:34:91:E3:24:84
Authority key identifier: CF:5E:E3:55:22:DA:31:64:2E:E3:09:40:8C:9A:49:1C:64:A0:5C:FB
Certificate issuer:       /CN=CF5EE35522DA31642EE309408C9A491C64A05CFB
Certificate serial:       4C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z17jVSLaMWQu4wlAjJpJHGSgXPs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/284/z17jVSLaMWQu4wlAjJpJHGSgXPs.mft
Manifest number:          09D7
Signing time:             Sat 22 Nov 2025 18:43:33 +0000
Manifest this update:     Sat 22 Nov 2025 18:43:33 +0000
Manifest next update:     Sun 07 Dec 2025 18:43:33 +0000
Files and hashes:         1: z17jVSLaMWQu4wlAjJpJHGSgXPs.crl (hash: fhZCIkUSeICtbPO3ahrCqsNz2pF4qKjFkT5y6RL/8/s=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/284/z17jVSLaMWQu4wlAjJpJHGSgXPs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/284/z17jVSLaMWQu4wlAjJpJHGSgXPs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z17jVSLaMWQu4wlAjJpJHGSgXPs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5EE35522DA31642EE309408C9A491C64A05CFB
        Validity
            Not Before: Nov 15 01:32:49 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=9A5557F82C60CDE8B7E00EC0FAD2CD3491E32484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0b:46:de:07:18:1c:63:c3:61:cd:e0:d2:46:
                    87:ec:cc:e5:d5:c1:af:c2:ce:ad:94:ab:4a:10:c1:
                    b2:75:ac:5c:ff:c7:62:8a:e1:31:37:7a:df:a6:5a:
                    ce:1b:f9:b7:8b:1b:a1:b7:b1:db:00:b3:09:93:80:
                    86:38:de:a3:d8:dc:cc:78:7a:2c:48:9d:1a:df:47:
                    95:ae:96:dd:50:2f:6f:46:6f:fe:78:4e:d5:28:2e:
                    75:76:02:b4:a6:f1:39:c6:d1:52:d8:19:5b:1b:7d:
                    6a:58:c0:c1:88:64:a1:8d:2d:73:11:aa:2a:d3:1c:
                    0d:9b:ee:06:5a:ac:76:1b:02:86:be:7d:0a:94:33:
                    91:af:a6:50:c2:2d:b9:af:7b:6f:93:dd:6e:fa:0a:
                    6b:29:76:4d:c6:22:fc:f7:df:04:b4:7d:59:6c:63:
                    d5:7e:b8:05:1f:1a:b6:54:08:6c:9e:6b:90:14:84:
                    49:e3:96:7f:db:61:b1:a6:01:58:93:25:3e:ff:b0:
                    16:f0:fb:b8:af:09:f8:10:2b:bc:44:c2:14:8a:c1:
                    36:e3:76:ba:42:e0:96:ca:2c:15:6b:b3:9e:fa:1d:
                    27:b1:52:62:83:08:50:d3:8e:2c:de:f6:95:bd:72:
                    a4:51:fd:02:32:89:e4:b4:fa:bb:57:7f:58:42:52:
                    c5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:55:57:F8:2C:60:CD:E8:B7:E0:0E:C0:FA:D2:CD:34:91:E3:24:84
            X509v3 Authority Key Identifier:
                keyid:CF:5E:E3:55:22:DA:31:64:2E:E3:09:40:8C:9A:49:1C:64:A0:5C:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/284/z17jVSLaMWQu4wlAjJpJHGSgXPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z17jVSLaMWQu4wlAjJpJHGSgXPs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/284/z17jVSLaMWQu4wlAjJpJHGSgXPs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:95:8b:6b:36:6a:4a:56:a3:99:0c:e6:be:4c:dc:11:e9:00:
         fc:7f:74:f1:1e:2f:4b:99:95:b1:a7:0e:fa:84:22:b4:9f:cf:
         d3:9d:9c:35:6f:0a:52:c1:4d:e0:0c:a5:0d:45:ed:66:4c:97:
         57:73:d1:45:92:4c:ca:6a:48:a8:f7:f7:b8:c3:90:a7:15:55:
         30:e9:03:a9:5f:56:5f:5b:ad:49:07:63:ce:40:f3:94:fb:1b:
         6d:a3:3d:f2:e9:ca:7a:d0:a8:16:58:33:57:b1:a8:17:9f:8d:
         fa:f0:77:3d:6f:cf:e9:99:bc:17:b6:46:36:01:f9:8f:9d:76:
         be:85:8c:46:ba:84:0c:9d:a2:9b:fc:c3:fd:b1:63:de:9f:77:
         c3:36:1d:7b:bc:da:1e:9d:09:66:37:62:69:04:72:e9:53:85:
         e3:d3:d9:81:1a:3f:02:5a:03:b8:6a:ac:25:c5:1a:3f:d4:2e:
         8a:fc:47:27:2b:be:b4:98:8f:9e:61:af:26:98:e8:44:61:6a:
         11:3a:30:12:16:ed:b1:f3:61:c1:6b:58:1c:2e:55:80:e0:af:
         22:74:63:93:3f:aa:54:c6:40:6f:7b:5a:c5:ba:d8:8a:88:85:
         5f:0a:2d:f0:7f:ba:88:d4:fb:a6:c7:a4:53:d7:e7:28:00:eb:
         ac:ae:09:9f
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRjVF
RTM1NTIyREEzMTY0MkVFMzA5NDA4QzlBNDkxQzY0QTA1Q0ZCMB4XDTI1MTExNTAx
MzI0OVoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoOUE1NTU3RjgyQzYwQ0RF
OEI3RTAwRUMwRkFEMkNEMzQ5MUUzMjQ4NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN4LRt4HGBxjw2HN4NJGh+zM5dXBr8LOrZSrShDBsnWsXP/HYorh
MTd636Zazhv5t4sbobex2wCzCZOAhjjeo9jczHh6LEidGt9Hla6W3VAvb0Zv/nhO
1SgudXYCtKbxOcbRUtgZWxt9aljAwYhkoY0tcxGqKtMcDZvuBlqsdhsChr59CpQz
ka+mUMItua97b5PdbvoKayl2TcYi/PffBLR9WWxj1X64BR8atlQIbJ5rkBSESeOW
f9thsaYBWJMlPv+wFvD7uK8J+BArvETCFIrBNuN2ukLglsosFWuznvodJ7FSYoMI
UNOOLN72lb1ypFH9AjKJ5LT6u1d/WEJSxQMCAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBSaVVf4LGDN6LfgDsD60s00keMkhDAfBgNVHSMEGDAWgBTPXuNVItoxZC7jCUCM
mkkcZKBc+zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjg0L3oxN2pWU0xhTVdRdTR3bEFqSnBKSEdTZ1hQcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3oxN2pWU0xhTVdRdTR3bEFqSnBKSEdT
Z1hQcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yODQvejE3alZTTGFNV1F1NHdsQWpKcEpIR1NnWFBzLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAAiVi2s2akpWo5kM5r5M3BHpAPx/dPEeL0uZlbGnDvqEIrSfz9OdnDVvClLB
TeAMpQ1F7WZMl1dz0UWSTMpqSKj397jDkKcVVTDpA6lfVl9brUkHY85A85T7G22j
PfLpynrQqBZYM1exqBefjfrwdz1vz+mZvBe2RjYB+Y+ddr6FjEa6hAydopv8w/2x
Y96fd8M2HXu82h6dCWY3YmkEculThePT2YEaPwJaA7hqrCXFGj/ULor8RycrvrSY
j55hryaY6ERhahE6MBIW7bHzYcFrWBwuVYDgryJ0Y5M/qlTGQG97WsW62IqIhV8K
LfB/uojU+6bHpFPX5ygA66yuCZ8=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:28 2025 by rpki-client