This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
File:                     7HBrbRGl7MjB9otL6m6OmoKgOv0.mft (raw, json)
Hash identifier:          jnqDvTX+/FJzQEExmQFuGGf5aewYc950/sPJbcWQ6Fs=
Subject key identifier:   29:59:DC:4E:B0:C9:AD:EF:A8:D7:DF:7A:4C:54:E9:36:45:BE:B8:EC
Authority key identifier: EC:70:6B:6D:11:A5:EC:C8:C1:F6:8B:4B:EA:6E:8E:9A:82:A0:3A:FD
Certificate issuer:       /CN=EC706B6D11A5ECC8C1F68B4BEA6E8E9A82A03AFD
Certificate serial:       4D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
Manifest number:          0A97
Signing time:             Mon 22 Dec 2025 10:42:17 +0000
Manifest this update:     Mon 22 Dec 2025 10:42:17 +0000
Manifest next update:     Tue 06 Jan 2026 10:42:17 +0000
Files and hashes:         1: 7HBrbRGl7MjB9otL6m6OmoKgOv0.crl (hash: Ot+6vIl0LQNbBWZK0CRtWuSMvF1NjGv6vsiwcIAdfc0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 10:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC706B6D11A5ECC8C1F68B4BEA6E8E9A82A03AFD
        Validity
            Not Before: Dec 15 01:34:09 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=2959DC4EB0C9ADEFA8D7DF7A4C54E93645BEB8EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:92:3e:f8:4b:13:2b:40:7e:43:99:98:60:d2:
                    7c:18:9a:07:55:34:4a:7f:f9:d2:d2:28:7f:e1:37:
                    41:30:58:31:63:52:0a:1c:7c:19:a0:e7:ed:fe:29:
                    80:df:cc:60:88:71:7e:ae:3c:ba:7c:23:52:d9:52:
                    9d:82:65:09:3b:84:c7:2c:24:76:3c:05:c1:db:2a:
                    56:ca:18:ed:b0:04:15:9c:08:25:7f:36:a8:e7:d8:
                    33:2f:37:39:84:71:10:9d:5e:cd:d5:89:9c:50:e6:
                    c1:57:a8:85:60:62:a3:2c:06:55:8c:32:52:51:f8:
                    98:78:c5:fe:17:9a:d4:1b:62:7d:a8:2c:57:1a:9e:
                    91:b2:60:62:97:41:1f:e7:f2:0a:8f:cb:5c:46:f9:
                    5c:40:0c:73:25:4d:c9:05:76:77:56:6f:20:02:2e:
                    f9:b9:1b:84:68:23:a3:af:68:a4:f6:28:c6:d1:5d:
                    35:12:cc:3a:0a:9e:13:d1:e5:62:8b:9a:2d:16:88:
                    a6:c3:71:3b:c2:7d:8f:69:3a:05:48:08:13:f5:1a:
                    77:26:0a:60:76:f7:fd:01:3e:08:e1:47:6a:79:67:
                    44:a3:85:e3:f1:5b:30:22:d3:f7:f6:bc:d4:56:ea:
                    0b:d5:53:5f:73:fe:af:dc:ae:f7:45:8a:40:19:e0:
                    fd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:59:DC:4E:B0:C9:AD:EF:A8:D7:DF:7A:4C:54:E9:36:45:BE:B8:EC
            X509v3 Authority Key Identifier:
                keyid:EC:70:6B:6D:11:A5:EC:C8:C1:F6:8B:4B:EA:6E:8E:9A:82:A0:3A:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:02:a1:85:0c:61:c1:4b:45:f7:0e:44:ba:ea:b4:45:1c:73:
         c9:9d:cc:3d:ee:ab:9c:1f:e6:99:36:1d:ba:c5:6e:d8:f7:a6:
         55:92:bc:3f:42:71:c0:3d:48:0d:e4:ea:7d:02:9e:21:44:6f:
         9b:73:bb:ff:5c:cb:1e:f2:ca:45:3f:1a:ee:3e:66:81:67:99:
         7a:06:56:b8:98:97:22:28:b7:b5:df:62:7c:23:b3:9b:66:52:
         0e:3d:ea:f1:50:7d:7a:75:6f:b3:37:e5:e8:46:d0:45:21:cd:
         d5:fc:fc:7d:6e:09:83:e3:94:cd:3d:6c:fd:86:f6:26:31:5d:
         c5:65:bc:20:0c:35:85:2d:d0:27:ca:c0:4a:30:b2:72:e2:ad:
         cb:07:bb:7d:ad:dd:31:90:ac:f4:12:d6:5f:65:2d:d3:2c:4e:
         db:fa:e3:5d:ef:2f:6e:4d:46:0f:85:7f:39:bd:4e:13:f2:08:
         71:be:82:1c:47:8b:c8:ce:17:c0:2d:1d:66:40:4c:d4:c9:63:
         22:35:32:ac:53:61:c2:35:61:74:b4:e6:46:ea:4e:c8:e0:15:
         60:d8:06:02:cc:4f:51:a0:0a:bd:31:b7:23:2a:3e:bf:9f:f7:
         5b:bc:68:22:17:1b:64:66:e9:b9:e7:e6:5e:78:ec:f0:ea:96:
         1f:91:f6:39
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQzcw
NkI2RDExQTVFQ0M4QzFGNjhCNEJFQTZFOEU5QTgyQTAzQUZEMB4XDTI1MTIxNTAx
MzQwOVoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMjk1OURDNEVCMEM5QURF
RkE4RDdERjdBNEM1NEU5MzY0NUJFQjhFQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANOSPvhLEytAfkOZmGDSfBiaB1U0Sn/50tIof+E3QTBYMWNSChx8
GaDn7f4pgN/MYIhxfq48unwjUtlSnYJlCTuExywkdjwFwdsqVsoY7bAEFZwIJX82
qOfYMy83OYRxEJ1ezdWJnFDmwVeohWBioywGVYwyUlH4mHjF/hea1BtifagsVxqe
kbJgYpdBH+fyCo/LXEb5XEAMcyVNyQV2d1ZvIAIu+bkbhGgjo69opPYoxtFdNRLM
OgqeE9HlYouaLRaIpsNxO8J9j2k6BUgIE/UadyYKYHb3/QE+COFHanlnRKOF4/Fb
MCLT9/a81FbqC9VTX3P+r9yu90WKQBng/S0CAwEAAaOCAj8wggI7MB0GA1UdDgQW
BBQpWdxOsMmt76jX33pMVOk2Rb647DAfBgNVHSMEGDAWgBTscGttEaXsyMH2i0vq
bo6agqA6/TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEwOS83SEJyYlJHbDdNakI5b3RMNm02T21vS2dPdjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC83SEJyYlJHbDdNakI5b3RMNm02T21v
S2dPdjAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTEwOS83SEJyYlJHbDdNakI5b3RMNm02T21vS2dPdjAubWZ0
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAagKhhQxhwUtF9w5Euuq0RRxzyZ3MPe6rnB/mmTYdusVu2PemVZK8P0Jx
wD1IDeTqfQKeIURvm3O7/1zLHvLKRT8a7j5mgWeZegZWuJiXIii3td9ifCOzm2ZS
Dj3q8VB9enVvszfl6EbQRSHN1fz8fW4Jg+OUzT1s/Yb2JjFdxWW8IAw1hS3QJ8rA
SjCycuKtywe7fa3dMZCs9BLWX2Ut0yxO2/rjXe8vbk1GD4V/Ob1OE/IIcb6CHEeL
yM4XwC0dZkBM1MljIjUyrFNhwjVhdLTmRupOyOAVYNgGAsxPUaAKvTG3Iyo+v5/3
W7xoIhcbZGbpuefmXnjs8OqWH5H2OQ==
-----END CERTIFICATE-----
Generated at Mon Dec 22 12:40:01 2025 by rpki-client