This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft
File:                     Ab5k6lGElpjv90IvaTdI0tKCnPY.mft (raw, json)
Hash identifier:          LZ4DYJdf9CCJAU/e+bOm0eCTi+ZnRYA1M62BqINZX0E=
Subject key identifier:   EA:3D:A5:EB:A9:3E:3D:A5:0B:30:47:88:47:59:B9:31:6D:5C:2F:4A
Authority key identifier: 01:BE:64:EA:51:84:96:98:EF:F7:42:2F:69:37:48:D2:D2:82:9C:F6
Certificate issuer:       /CN=01BE64EA51849698EFF7422F693748D2D2829CF6
Certificate serial:       3B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ab5k6lGElpjv90IvaTdI0tKCnPY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft
Manifest number:          0985
Signing time:             Sat 22 Nov 2025 19:24:05 +0000
Manifest this update:     Sat 22 Nov 2025 19:24:05 +0000
Manifest next update:     Sun 07 Dec 2025 19:24:05 +0000
Files and hashes:         1: Ab5k6lGElpjv90IvaTdI0tKCnPY.crl (hash: /GVtogGiDaJPMyZIIr9OIjAc/fxAnC1k0HUG3NmdCY8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ab5k6lGElpjv90IvaTdI0tKCnPY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01BE64EA51849698EFF7422F693748D2D2829CF6
        Validity
            Not Before: Nov 15 01:34:14 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=EA3DA5EBA93E3DA50B3047884759B9316D5C2F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:07:70:cc:4d:f4:31:1c:4b:dd:92:df:93:
                    3c:86:71:41:b3:ce:17:a4:53:26:a5:b7:23:64:6c:
                    23:fa:ed:46:49:b8:4b:b0:b0:dc:2b:10:96:48:16:
                    a2:6f:d3:be:ad:54:11:44:3d:3b:d1:bf:c9:dd:cb:
                    72:70:4f:f7:7a:12:f8:e3:ba:d7:42:dc:2d:3d:93:
                    ba:7e:f5:33:d7:5f:9c:08:49:09:4b:98:fd:f6:1d:
                    ee:d2:d3:ea:e2:0f:bd:bb:e6:6c:31:42:4e:5c:90:
                    44:e3:36:23:87:f0:e7:2a:a8:4f:32:b6:a5:a4:64:
                    11:f6:df:c8:59:a2:b7:f6:05:e0:e2:15:4e:71:56:
                    90:fd:e4:db:62:34:ea:f4:25:dc:d2:3c:ca:61:22:
                    72:eb:35:8c:28:34:09:4a:97:4b:63:e8:5a:5e:9b:
                    7a:3b:a8:11:af:8d:3d:cc:e0:a4:65:1b:ff:eb:58:
                    73:fa:6a:4e:7e:69:6e:a9:81:7f:89:57:4b:ed:c3:
                    52:c3:5d:1e:aa:4b:9c:ae:d0:12:32:7c:97:f5:aa:
                    62:a0:79:5f:b5:02:95:11:10:35:56:19:0c:9b:ff:
                    9b:71:d4:60:0f:34:6d:f7:a8:39:90:a9:7f:ae:31:
                    c0:f4:39:f0:57:38:8b:f8:4f:49:ac:b9:57:dd:5f:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3D:A5:EB:A9:3E:3D:A5:0B:30:47:88:47:59:B9:31:6D:5C:2F:4A
            X509v3 Authority Key Identifier:
                keyid:01:BE:64:EA:51:84:96:98:EF:F7:42:2F:69:37:48:D2:D2:82:9C:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ab5k6lGElpjv90IvaTdI0tKCnPY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:7a:00:33:23:14:b4:fc:95:6e:12:1b:3c:2c:36:5c:21:1f:
         39:3c:89:93:60:88:61:aa:9a:cd:5c:04:c0:ba:3d:03:a1:73:
         c2:2f:7c:3f:ff:5e:4a:0a:37:bb:dd:4a:18:14:bc:d6:e9:46:
         2c:1e:ac:97:de:af:00:62:f6:0a:c2:14:43:da:3b:68:65:f2:
         40:61:3c:cc:11:d3:e4:c0:4a:65:97:0f:30:55:52:26:5b:a7:
         fc:7a:66:ae:54:bc:e5:21:c9:01:80:4e:fd:3d:f2:37:97:3e:
         17:b9:29:17:33:c4:44:84:a1:f4:7d:e3:29:e4:3c:21:7f:66:
         ea:d6:2e:33:39:13:0a:e6:ea:ae:7e:a1:bd:cf:56:23:21:41:
         e8:3f:01:23:b0:db:2b:ce:f4:c1:d4:65:fe:b7:58:af:9a:1c:
         b7:ff:40:0d:c4:13:d4:fe:ce:f4:9a:02:90:63:09:cd:c0:d4:
         a2:b2:9d:89:3a:5c:11:c1:5c:e7:c5:e8:1c:ae:32:ff:13:3f:
         4b:c0:e0:e5:ef:00:db:b7:8d:ae:a9:14:15:43:4f:97:4f:50:
         fe:c4:d0:9b:04:4c:57:e0:27:2b:c4:02:07:07:70:81:c3:61:
         d7:e3:23:a1:c9:2b:34:fa:96:41:65:9c:ac:4a:ff:59:fe:7f:
         ea:c3:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:16:14 2025 by rpki-client