This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft
File:                     gf7ENcw7DVXepAW2GL1BjhrlZIE.mft (raw, json)
Hash identifier:          F4oIao8QKWppgwtR9fhSoZhNm9hzA5Vkw5M3NMVhP/w=
Subject key identifier:   41:1C:8E:C9:6E:B2:3D:E3:47:25:44:5E:ED:1F:2F:32:62:95:B8:9F
Authority key identifier: 81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81
Certificate issuer:       /CN=81FEC435CC3B0D55DEA405B618BD418E1AE56481
Certificate serial:       18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft
Manifest number:          0995
Signing time:             Sun 21 Dec 2025 03:03:09 +0000
Manifest this update:     Sun 21 Dec 2025 03:03:09 +0000
Manifest next update:     Mon 05 Jan 2026 03:03:09 +0000
Files and hashes:         1: gf7ENcw7DVXepAW2GL1BjhrlZIE.crl (hash: J7KeEYJ3Ffr2lHnP8GkZsmQGROpkQ6eeDQTHyZPncL8=)
                          2: x4apSZ7TGJaw6MPYuqY07mklkt0.roa (hash: 4TDP7PW2OqSMHenkcxixcOIODjjozfCq0VfZI2McdRg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81FEC435CC3B0D55DEA405B618BD418E1AE56481
        Validity
            Not Before: Dec 15 01:38:24 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=411C8EC96EB23DE34725445EED1F2F326295B89F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:b4:95:e5:11:5e:2b:7a:1a:4a:96:eb:f3:
                    e7:1f:2f:e1:b3:6e:25:51:4b:45:ca:35:fd:17:98:
                    b2:cc:1b:55:4d:e8:0d:90:24:68:88:07:61:10:a3:
                    d6:1c:6e:44:9e:8d:3d:60:4a:87:73:e2:1b:1e:0e:
                    14:3a:15:6c:26:bd:74:65:99:f7:2f:dc:09:15:95:
                    c2:99:ee:4c:ff:5f:76:db:ca:ed:77:70:7e:18:da:
                    a2:b8:19:20:e2:a2:e6:c6:d4:c3:d9:22:17:fa:10:
                    4b:ed:aa:89:66:7b:66:4e:a9:38:d2:f2:71:49:12:
                    29:d2:f0:35:fd:d8:40:95:62:f2:af:ee:ab:4e:13:
                    c8:cd:16:27:c5:b3:ce:82:9d:2c:fe:ba:75:3b:b9:
                    55:61:5f:f0:04:25:e8:e9:84:a2:96:0b:f4:79:eb:
                    10:49:05:3d:b9:2f:ed:78:12:63:e2:f9:ea:c9:09:
                    e8:16:5f:27:f5:49:52:34:86:91:97:97:d2:fa:2d:
                    0c:a5:d8:eb:b9:7d:dc:7e:75:d3:ce:3d:be:a1:1c:
                    ac:74:20:a7:db:48:c2:1e:83:81:55:b6:1f:86:7c:
                    b8:bf:f8:49:ca:61:69:6e:46:41:1b:5b:eb:59:4e:
                    5a:b1:c1:6f:0b:86:f9:39:f6:ff:08:7c:7b:f9:ef:
                    52:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1C:8E:C9:6E:B2:3D:E3:47:25:44:5E:ED:1F:2F:32:62:95:B8:9F
            X509v3 Authority Key Identifier:
                keyid:81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:96:06:4e:c7:ae:49:4d:89:fb:c3:83:98:5e:a6:fb:0d:ea:
         6f:4c:7a:88:f1:be:e9:cf:f0:db:ba:69:ba:ef:7e:61:83:7f:
         0d:51:dd:9a:c2:dc:72:43:0a:ae:65:87:79:bf:f7:84:3e:82:
         1f:b9:18:d6:f5:31:14:b9:2e:52:eb:65:47:08:fc:02:6b:aa:
         f8:61:36:9f:c1:e1:7d:ed:47:bc:3e:35:f1:9e:53:37:dc:0a:
         9d:d1:69:5e:9a:5d:c6:33:db:44:d5:19:39:81:96:fc:40:1a:
         5c:ed:94:9c:87:60:10:7b:97:6a:74:1e:3b:0f:1d:99:a9:a8:
         46:50:a8:b3:2f:93:9d:08:a2:6b:32:7c:3e:1e:5c:24:c5:bc:
         f5:bb:bf:69:48:3b:b7:2e:e2:f3:22:f2:47:66:49:9b:b1:fe:
         fa:8b:e9:d8:15:fa:83:9c:1d:e1:f1:47:13:f6:0e:6a:51:69:
         56:9f:5c:ad:49:61:17:eb:a0:7b:87:0c:91:d7:56:97:d7:a8:
         b9:92:82:77:19:d6:83:66:46:80:17:28:ac:c6:aa:24:4c:8d:
         ac:41:20:9b:d5:7c:34:dd:38:5d:1d:5e:bd:09:fb:28:18:1b:
         1a:c7:f3:48:4c:49:1d:6b:14:c6:80:07:ae:00:4b:84:30:e7:
         ca:8a:a3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:28:29 2025 by rpki-client