This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.mft
File:                     SNsa5IPjQwk6sGMDcmD-uRlRQDg.mft (raw, json)
Hash identifier:          AQg9rtWk1fjaoz8eaUgxODM0GP0/sCeK8xnPhFmmNcc=
Subject key identifier:   C1:FE:AA:FF:73:A0:7C:93:2F:EA:D0:06:F2:FC:6B:D2:7E:58:88:D3
Authority key identifier: 48:DB:1A:E4:83:E3:43:09:3A:B0:63:03:72:60:FE:B9:19:51:40:38
Certificate issuer:       /CN=48DB1AE483E343093AB063037260FEB919514038
Certificate serial:       41
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SNsa5IPjQwk6sGMDcmD-uRlRQDg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.mft
Manifest number:          099C
Signing time:             Sat 22 Nov 2025 19:35:42 +0000
Manifest this update:     Sat 22 Nov 2025 19:35:42 +0000
Manifest next update:     Sun 07 Dec 2025 19:35:42 +0000
Files and hashes:         1: SNsa5IPjQwk6sGMDcmD-uRlRQDg.crl (hash: r+YATblOWutbGYn4eRiFtDn2yvAws0cLPiMGSEu6UqA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SNsa5IPjQwk6sGMDcmD-uRlRQDg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DB1AE483E343093AB063037260FEB919514038
        Validity
            Not Before: Nov 15 01:33:56 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=C1FEAAFF73A07C932FEAD006F2FC6BD27E5888D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:4e:b5:9a:03:89:cc:43:b6:f4:db:f9:dd:
                    dd:4b:0e:33:98:cf:96:a8:3e:88:45:08:12:e8:9b:
                    bc:b9:fa:52:1e:b4:3a:cb:dd:68:ae:13:83:11:7c:
                    cd:46:0d:b1:3a:f9:5c:a6:de:9a:eb:7c:6e:df:de:
                    f2:be:47:ab:1c:44:69:48:5d:8f:b5:85:9b:e0:df:
                    41:2a:6e:12:cd:78:5d:af:19:89:50:44:d7:78:5b:
                    59:4b:a8:1b:f5:51:f6:c7:ee:c8:50:35:9c:3e:25:
                    39:68:ed:20:41:25:23:ec:f3:28:9f:55:ca:e6:79:
                    0a:85:dd:0d:c2:94:c5:f4:31:3b:af:53:6d:63:aa:
                    05:c1:47:29:44:e1:3b:e7:df:25:01:38:99:99:30:
                    b4:1e:6e:3e:ce:b6:7e:74:5f:33:b3:0c:51:09:8b:
                    af:3a:bf:96:4d:47:ab:b4:31:d0:7e:92:c1:62:ea:
                    ad:27:2b:58:fb:72:43:36:71:a4:4e:3c:d7:86:d8:
                    c4:5c:8d:1d:a8:0d:1f:49:eb:43:1c:b1:6a:65:0e:
                    5a:c4:23:1c:0e:2c:6e:3a:9a:76:4d:88:29:a8:ff:
                    8d:aa:5d:19:9e:11:8d:10:78:6d:89:31:64:e3:04:
                    91:f9:ce:eb:f7:b2:ed:d7:bc:be:11:61:e7:0c:bf:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FE:AA:FF:73:A0:7C:93:2F:EA:D0:06:F2:FC:6B:D2:7E:58:88:D3
            X509v3 Authority Key Identifier:
                keyid:48:DB:1A:E4:83:E3:43:09:3A:B0:63:03:72:60:FE:B9:19:51:40:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SNsa5IPjQwk6sGMDcmD-uRlRQDg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:2f:c1:16:5c:99:91:68:ac:78:34:32:7c:8f:b4:b9:26:ac:
         07:ed:8f:1a:a7:12:25:fb:d7:07:d0:f4:06:09:00:58:f3:8a:
         ac:85:dc:8d:24:29:2a:7c:1f:99:84:1d:63:73:9c:82:41:2a:
         d3:98:99:a7:98:de:96:a2:0c:6b:a0:be:88:d2:c6:74:80:c4:
         3a:21:53:10:8c:dc:cb:f1:b8:51:6d:ec:5e:f2:62:c9:9c:9c:
         1c:63:50:08:9a:e7:db:b8:53:09:62:3a:d0:63:fc:9a:c2:43:
         8f:1d:e1:c2:69:80:1b:67:72:e1:ea:86:ed:4b:98:e2:4c:f8:
         e3:b5:a1:23:a5:51:a5:32:f0:36:af:ba:fc:1d:9f:fb:fd:60:
         c3:33:80:0d:ee:64:ff:e3:c6:7b:6e:34:36:a1:d1:84:1b:b5:
         2c:a7:cc:ea:59:b9:00:52:f8:bb:2a:2f:24:3b:2a:a0:be:90:
         ec:3a:d3:34:ec:b9:87:36:f1:c1:19:98:4e:23:59:66:27:da:
         05:5d:85:66:ed:94:4b:7a:a6:11:5d:d1:8e:2a:a5:ea:98:b2:
         14:31:f2:f1:a7:3c:ed:fe:ea:ef:35:ab:bc:07:c0:c8:7a:18:
         04:82:d3:a8:be:13:19:d5:27:e9:5f:fb:aa:be:0d:19:c0:bb:
         ee:a5:0c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:16:41 2025 by rpki-client