This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
File:                     lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft (raw, json)
Hash identifier:          S3G0GDewJ38Vr5DpluHSAOj9ix1gy2WmfNUrH1LKBvU=
Subject key identifier:   30:DD:D5:43:F4:60:1A:7C:1E:B6:2C:56:88:A0:E6:6B:69:70:97:19
Authority key identifier: 96:61:EC:D9:D7:D5:87:03:B8:FE:C8:61:83:A6:22:54:50:AD:F0:F8
Certificate issuer:       /CN=9661ECD9D7D58703B8FEC86183A6225450ADF0F8
Certificate serial:       05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
Manifest number:          02EC
Signing time:             Mon 22 Dec 2025 07:28:13 +0000
Manifest this update:     Mon 22 Dec 2025 07:28:13 +0000
Manifest next update:     Tue 06 Jan 2026 07:28:13 +0000
Files and hashes:         1: lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl (hash: tvYRp7TYB1E/RCBTPOvxbLTgpDpfoNkXzTeAHC6kWWo=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 10:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9661ECD9D7D58703B8FEC86183A6225450ADF0F8
        Validity
            Not Before: Dec 15 01:31:54 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=30DDD543F4601A7C1EB62C5688A0E66B69709719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:b6:ea:8f:ae:dc:ee:6f:24:dd:e3:25:2c:
                    f0:81:7c:c5:47:6e:c1:cb:d8:0b:f7:7c:b3:78:ef:
                    87:8c:7b:ee:b6:be:7c:3a:0d:14:18:99:e5:33:9d:
                    b6:f7:fe:d1:dd:8a:54:25:4c:84:bf:72:61:70:aa:
                    e4:cb:be:4f:cf:65:85:b9:b5:11:1f:a7:85:d6:96:
                    ef:12:ee:fd:13:d5:c5:f3:f2:d8:25:d7:64:2d:31:
                    34:97:62:3e:a7:e2:7f:6d:aa:a9:38:8f:03:fe:3c:
                    1a:3c:4a:3b:d9:ec:38:8b:3d:03:fb:a1:c7:c0:f8:
                    ae:67:ac:10:59:d3:d6:03:01:42:82:48:47:be:e0:
                    cc:b6:07:3d:98:b1:f5:1a:32:5a:bd:ee:26:bc:02:
                    2b:21:c8:87:61:33:83:06:16:aa:50:05:8c:2f:3a:
                    62:d8:f9:a3:b5:e8:81:d8:f4:80:21:58:ca:d0:93:
                    6e:af:db:5b:bf:af:8e:4b:fe:44:ed:63:d7:86:5a:
                    75:56:16:38:b9:b7:cf:78:87:0b:41:b8:72:b6:7b:
                    00:05:fb:68:4d:18:c1:dd:16:82:61:6c:dc:54:65:
                    87:73:48:63:97:36:69:e9:2a:6f:63:1b:45:e5:30:
                    9c:34:51:bf:14:ba:9c:33:02:0a:74:dd:72:73:20:
                    74:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DD:D5:43:F4:60:1A:7C:1E:B6:2C:56:88:A0:E6:6B:69:70:97:19
            X509v3 Authority Key Identifier:
                keyid:96:61:EC:D9:D7:D5:87:03:B8:FE:C8:61:83:A6:22:54:50:AD:F0:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:40:0a:be:40:4a:ef:de:32:d9:79:8b:3d:1c:e2:6f:84:f5:
         92:60:07:6e:92:a8:c6:b5:54:bd:db:e3:a3:20:23:81:dc:7b:
         42:93:04:b8:18:b4:a3:1b:b8:04:1e:d9:f4:bb:db:b7:e9:f6:
         20:59:fe:13:3c:43:b4:49:56:04:0e:96:7d:45:e5:db:fc:d4:
         9d:51:c4:92:2a:59:88:7c:e7:90:31:7d:04:13:eb:1d:e3:e4:
         83:d1:7f:88:55:5d:33:b4:82:c9:aa:7b:da:10:3b:cb:aa:ec:
         1a:67:c7:92:18:7e:35:94:22:fd:c4:b3:7c:06:04:20:e4:2f:
         c5:4b:50:b1:f0:58:f1:d7:82:ce:e7:b7:f6:16:0a:80:e0:7f:
         3a:5f:ac:86:92:67:bf:4b:be:29:ad:ac:a3:b7:92:8f:0f:a7:
         08:61:d9:4a:5b:db:de:c9:ce:8a:e6:40:43:0e:d6:2c:db:db:
         48:73:ae:13:4e:fe:e3:0d:92:fa:e4:ca:30:32:98:9f:37:d9:
         ae:bc:af:89:af:2a:8e:1b:a7:7a:56:b3:d2:7a:bd:a0:cb:7d:
         92:9c:d5:14:36:5e:2c:a4:80:b5:f4:50:43:9c:67:45:b5:32:
         44:dd:69:e1:1d:7a:68:c5:48:ce:10:ac:83:84:a1:dd:17:f5:
         6c:ac:e0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:41:39 2025 by rpki-client