This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
File:                     EWYArZfDsYxb9xPsgAruppKsTME.mft (raw, json)
Hash identifier:          YQH5LXyBYDpg8x+Jj4jgMLLJb7BncGnZoZdgaHd+vtw=
Subject key identifier:   2E:2E:73:1F:79:2F:6A:65:59:4C:F8:48:E4:2D:88:BD:F9:C3:3F:AE
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       89
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
Manifest number:          0991
Signing time:             Sat 22 Nov 2025 19:24:06 +0000
Manifest this update:     Sat 22 Nov 2025 19:24:06 +0000
Manifest next update:     Sun 07 Dec 2025 19:24:06 +0000
Files and hashes:         1: EWYArZfDsYxb9xPsgAruppKsTME.crl (hash: I47koAuQP6t37dBtlkzeZqx20DVQXAT+n4VJHOr5Ybs=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Nov 15 01:34:16 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=2E2E731F792F6A65594CF848E42D88BDF9C33FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:3e:64:02:50:2a:db:98:7f:d6:63:4c:58:
                    bd:6a:ff:16:45:65:08:ed:38:f8:aa:6a:3e:80:1b:
                    41:12:33:67:e4:81:84:84:8b:6e:f7:07:58:ae:a7:
                    66:40:e1:d5:23:97:e0:f9:cb:83:38:35:4f:b9:5a:
                    30:e7:50:70:69:52:e7:aa:2e:eb:5c:45:01:ab:1f:
                    b8:49:c3:fe:0e:2d:67:49:e4:d9:11:61:78:75:75:
                    b3:ce:a9:f8:92:f9:d8:6e:eb:cb:dd:3c:4b:1c:59:
                    7b:0d:27:f0:dd:41:9d:7c:d2:ec:6a:a8:c4:de:f3:
                    80:7d:f8:44:37:90:45:ed:47:90:51:e6:95:fb:19:
                    d6:a8:49:97:19:86:6c:d1:b1:5f:f7:6b:38:20:a0:
                    d3:9d:52:e8:ae:9d:25:35:8d:e9:51:a8:3c:b7:86:
                    86:23:5f:a4:4a:ea:5f:ca:87:bc:76:37:86:34:f9:
                    e5:c0:25:6d:de:9c:a6:5d:4b:00:62:c9:c0:10:1d:
                    54:34:1b:7a:8d:5c:a2:41:36:67:a2:29:34:f3:eb:
                    7b:62:42:aa:da:4c:d6:71:f2:93:ca:c8:9a:3f:70:
                    e8:76:8a:a5:11:30:19:61:77:e6:b1:2a:a4:5f:5f:
                    46:69:63:cc:74:88:19:e3:1d:d9:e1:93:d0:89:09:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2E:73:1F:79:2F:6A:65:59:4C:F8:48:E4:2D:88:BD:F9:C3:3F:AE
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d8:60:04:88:92:2f:56:58:02:95:37:80:c7:d1:1a:b8:6e:
         4a:ae:f0:6a:cb:f2:3e:7d:bc:19:92:bd:27:b3:32:4f:e7:c8:
         41:62:82:f1:7e:2f:dd:81:a1:41:68:4a:c5:ad:3f:36:7f:ba:
         95:71:d5:94:d7:c0:94:82:a0:07:45:46:9c:00:23:07:f9:56:
         e7:8c:57:b5:47:8a:72:68:b0:85:c8:8c:2a:a7:91:ee:85:38:
         21:ab:68:13:c9:95:34:95:92:9d:91:04:c8:a8:f0:79:78:dc:
         f1:45:7e:fe:3d:32:a3:7e:bd:2a:eb:9f:d7:e3:6e:f4:37:fa:
         c0:83:80:0e:ae:35:72:ff:20:5f:60:c4:8a:6e:2e:04:64:b1:
         80:8c:61:1c:65:9b:71:46:5a:18:ec:5a:2b:2e:24:4c:47:f0:
         61:e3:92:06:75:77:48:f9:98:69:28:70:f0:a7:6a:7c:98:a7:
         c9:4b:c2:a8:93:db:42:aa:de:1c:16:5a:69:ba:a9:cc:bc:df:
         59:0b:68:b2:1a:3f:c1:90:c4:e1:67:56:a4:e0:c5:53:58:44:
         76:8a:54:b9:25:32:b0:ed:78:0b:16:67:94:99:0d:36:be:bf:
         ac:06:a7:c3:3b:ac:13:a5:8a:b2:6e:e1:3e:ed:c8:2b:bc:62:
         7d:0c:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:14 2025 by rpki-client