This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/46/PxyKl3SkxV4VUK9k9UVziFdWKD0.mft
File:                     PxyKl3SkxV4VUK9k9UVziFdWKD0.mft (raw, json)
Hash identifier:          JUMG0h+U45CdlPKo84HiSho0X+1dyPQdPz9O8+HJZ8M=
Subject key identifier:   F0:46:C6:B2:8C:09:79:8D:97:21:59:71:19:F3:57:B0:FA:61:49:19
Authority key identifier: 3F:1C:8A:97:74:A4:C5:5E:15:50:AF:64:F5:45:73:88:57:56:28:3D
Certificate issuer:       /CN=3F1C8A9774A4C55E1550AF64F54573885756283D
Certificate serial:       4D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PxyKl3SkxV4VUK9k9UVziFdWKD0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/46/PxyKl3SkxV4VUK9k9UVziFdWKD0.mft
Manifest number:          09FC
Signing time:             Sat 22 Nov 2025 19:29:41 +0000
Manifest this update:     Sat 22 Nov 2025 19:29:41 +0000
Manifest next update:     Sun 07 Dec 2025 19:29:41 +0000
Files and hashes:         1: PxyKl3SkxV4VUK9k9UVziFdWKD0.crl (hash: odH0K1I1ODoOmQm1FVfFff/Z5jAl2zIzsdg0d0nSdm4=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/46/PxyKl3SkxV4VUK9k9UVziFdWKD0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/46/PxyKl3SkxV4VUK9k9UVziFdWKD0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PxyKl3SkxV4VUK9k9UVziFdWKD0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F1C8A9774A4C55E1550AF64F54573885756283D
        Validity
            Not Before: Nov 15 01:39:15 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=F046C6B28C09798D9721597119F357B0FA614919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:69:ab:49:6f:10:76:c8:f0:c6:c0:f3:f7:
                    28:dc:ac:da:a3:37:f9:86:51:c9:ef:96:ef:01:2d:
                    7f:ee:03:5c:2b:08:39:8b:51:62:af:ac:4f:2c:e0:
                    45:d6:bd:aa:c8:e2:a3:e0:3b:e5:f6:c0:3f:58:e3:
                    06:5a:18:73:16:fa:8e:35:c4:e1:e4:ed:91:d5:fa:
                    b2:05:df:41:7f:e8:b1:e4:80:ec:8e:50:3b:ad:85:
                    a8:66:92:b5:15:1e:78:da:41:bc:da:14:80:f9:fd:
                    55:2f:40:fb:47:b5:0e:71:3a:81:c4:d4:d1:de:0d:
                    8f:90:fe:3f:22:0b:95:bf:0b:d6:ca:bf:d7:3b:d9:
                    df:f5:17:ec:80:66:70:4a:4e:af:9a:a8:e8:2b:84:
                    d9:eb:0d:7c:f6:61:8f:23:a2:a8:1b:6b:e6:88:6e:
                    a0:39:60:14:38:3f:17:fa:cc:4b:94:e2:40:61:42:
                    1d:67:1b:af:7b:3b:59:f2:91:3d:b8:82:e5:51:74:
                    f3:5c:6e:96:d1:a5:96:c7:a3:f4:ec:92:ee:92:be:
                    42:cf:5d:0b:34:e0:75:27:e8:f2:f1:2a:c4:c2:9a:
                    24:4c:0b:de:59:ee:3d:65:a9:6e:33:77:02:5f:4a:
                    ae:f2:a3:62:06:2f:46:e4:65:5b:40:74:18:dc:a0:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:46:C6:B2:8C:09:79:8D:97:21:59:71:19:F3:57:B0:FA:61:49:19
            X509v3 Authority Key Identifier:
                keyid:3F:1C:8A:97:74:A4:C5:5E:15:50:AF:64:F5:45:73:88:57:56:28:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/46/PxyKl3SkxV4VUK9k9UVziFdWKD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PxyKl3SkxV4VUK9k9UVziFdWKD0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/46/PxyKl3SkxV4VUK9k9UVziFdWKD0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:80:50:0d:ca:04:8e:d1:a8:4a:5a:8f:fe:70:f0:8b:4c:73:
         3c:78:05:17:a2:3c:42:38:5b:e8:fc:db:5e:53:7b:fc:00:f6:
         e8:b9:d1:ec:6f:72:e6:d9:35:01:52:8e:87:a7:e7:07:8b:2c:
         c5:d9:95:8a:87:e8:0f:df:1a:b6:2b:1b:9f:ea:62:14:f9:7d:
         ea:e7:44:cd:92:20:b3:e2:30:1f:1d:78:6a:96:f1:75:b2:f4:
         8d:b0:89:51:42:7c:b2:ea:7c:92:2f:7e:1d:8e:7a:27:7b:54:
         de:82:00:35:ba:27:c2:c5:49:a2:22:34:48:52:36:37:88:f3:
         9c:cc:27:2b:1b:74:3d:13:60:a5:4a:1e:ac:4d:41:53:46:2f:
         22:b0:92:dd:6c:6a:51:84:66:24:ae:60:8d:a5:dd:a5:b2:a4:
         e5:17:76:b6:f9:50:27:8e:06:a9:ca:9d:6f:f3:4a:71:68:ec:
         1d:83:4d:5a:b4:c9:7f:57:0c:6f:95:29:8a:e9:39:7c:19:a3:
         20:31:e1:bb:83:15:05:47:3c:07:8f:b0:a4:4c:91:8a:b9:0b:
         2f:95:3a:93:9e:83:4e:6a:0b:1d:fa:a2:24:a5:aa:5d:65:07:
         1f:6b:e5:8c:e8:2b:94:64:89:e0:f0:1b:13:49:a7:eb:08:39:
         92:b5:f2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:16:20 2025 by rpki-client