This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
File:                     6ESHjyExP90FqcNFb_9ImIXcqmU.mft (raw, json)
Hash identifier:          4VDNl8l5cdq/+jfpeZEBr4+PjYP9BJxIkEabuW7Z8Cs=
Subject key identifier:   AE:2F:86:09:13:AE:68:A8:89:E4:53:74:53:BF:9E:0C:E2:F5:3C:58
Authority key identifier: E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65
Certificate issuer:       /CN=E844878F21313FDD05A9C3456FFF489885DCAA65
Certificate serial:       1E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
Manifest number:          0902
Signing time:             Sat 22 Nov 2025 19:10:46 +0000
Manifest this update:     Sat 22 Nov 2025 19:10:46 +0000
Manifest next update:     Sun 07 Dec 2025 19:10:46 +0000
Files and hashes:         1: 6ESHjyExP90FqcNFb_9ImIXcqmU.crl (hash: wrJI0djaThrYM8FsehSVQHiLvgTBBrFyDAgzfnNGYBE=)
                          2: j5NlJ0VrmIclkfgLd_-j51w1G20.roa (hash: WdXn0L7OLssxTE5Ao/XuguozaQUV9PsHEr8f8RZDhKA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E844878F21313FDD05A9C3456FFF489885DCAA65
        Validity
            Not Before: Nov 15 01:42:49 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=AE2F860913AE68A889E4537453BF9E0CE2F53C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:80:a7:3d:3d:f5:9e:99:b0:98:7c:15:2c:
                    a1:11:4b:6b:bd:9a:f2:d8:08:68:81:78:7a:74:f4:
                    9b:82:91:0d:98:8b:8b:ce:89:61:91:46:a7:59:45:
                    5d:d3:bb:37:0a:aa:03:19:f7:82:e0:da:8d:89:2c:
                    d0:69:4b:81:98:21:8c:d4:a8:c3:ac:f7:1f:df:13:
                    23:63:06:67:61:81:2a:61:d9:f2:e0:c9:aa:f3:3e:
                    76:b0:48:1c:0a:12:cb:d8:e3:3d:c2:81:1a:13:1b:
                    4c:3e:b3:e3:89:d4:e6:95:35:86:59:92:64:69:f4:
                    02:3d:5b:ae:36:52:ba:a8:12:36:dc:22:f1:17:17:
                    54:fd:94:13:a7:e7:6c:22:78:90:10:37:77:c1:29:
                    93:e8:0c:e5:84:84:15:72:63:79:e3:8a:25:8d:70:
                    80:b1:ec:e7:d5:14:e6:28:3c:c9:3e:23:6e:3f:cf:
                    3f:eb:88:9f:0c:76:3c:86:2e:07:b7:97:1b:c5:d1:
                    d5:b2:85:d3:81:ec:75:b7:04:a5:a2:98:58:4b:0c:
                    8b:26:99:77:37:89:f0:8e:be:77:3f:50:8e:3e:53:
                    d8:5d:e4:7c:71:d3:ac:84:c0:24:6d:f5:67:ed:b5:
                    9a:f6:08:6d:b2:d9:28:b8:ec:b0:1c:5e:21:ce:f2:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2F:86:09:13:AE:68:A8:89:E4:53:74:53:BF:9E:0C:E2:F5:3C:58
            X509v3 Authority Key Identifier:
                keyid:E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3e:f3:c7:39:5d:62:10:d4:5e:80:2c:67:cf:74:5f:22:77:
         5c:b0:48:8b:aa:53:a4:d0:2e:9f:78:bd:f4:58:29:10:08:15:
         48:7c:47:1b:d1:5c:5e:44:7f:f8:2c:9d:95:ac:c4:b1:23:e2:
         0a:94:d7:ab:66:94:db:0c:81:84:ae:94:b2:ed:91:c4:e1:08:
         b8:bf:25:8c:8a:b9:0a:0d:8c:a2:39:40:c0:2c:0e:84:60:b4:
         b0:72:a7:71:01:30:23:cb:8d:02:c1:cd:31:04:ef:e9:9d:8e:
         f6:13:1a:f2:42:17:55:8d:ff:64:f6:70:4a:4c:b3:bc:eb:a1:
         df:6a:49:17:77:a3:4b:fd:3f:b4:e1:e5:d6:84:04:a7:4c:bd:
         f8:19:d9:1f:70:30:33:94:d1:45:33:82:a9:c4:6f:f4:8b:a5:
         a9:12:f2:1b:00:72:8a:ab:91:60:70:aa:70:48:83:66:48:62:
         fe:ff:ee:08:ee:68:d4:f7:87:b7:f0:e4:66:e2:88:19:32:0c:
         37:a6:a6:98:84:61:e8:df:79:e5:d0:50:78:9b:70:bc:ae:78:
         01:68:32:12:5d:69:54:32:93:05:73:fa:0a:5a:30:7c:0f:0f:
         12:ae:92:99:e8:e2:c9:8e:88:07:ab:5c:ff:f7:3e:01:ff:95:
         07:be:a4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:09 2025 by rpki-client