This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30147/ObGG0K6JAP0o3LkEL84AiMgcq6k.mft
File:                     ObGG0K6JAP0o3LkEL84AiMgcq6k.mft (raw, json)
Hash identifier:          MiomwaALE7QLjaduiPqsdX00X+zLLxwfbh4nDZM6RWo=
Subject key identifier:   26:98:34:97:CE:F1:B9:A8:E6:F9:63:F0:E6:1C:C1:7F:BC:25:16:06
Authority key identifier: 39:B1:86:D0:AE:89:00:FD:28:DC:B9:04:2F:CE:00:88:C8:1C:AB:A9
Certificate issuer:       /CN=39B186D0AE8900FD28DCB9042FCE0088C81CABA9
Certificate serial:       04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ObGG0K6JAP0o3LkEL84AiMgcq6k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30147/ObGG0K6JAP0o3LkEL84AiMgcq6k.mft
Manifest number:          0231
Signing time:             Mon 22 Dec 2025 11:17:43 +0000
Manifest this update:     Mon 22 Dec 2025 11:17:43 +0000
Manifest next update:     Tue 06 Jan 2026 11:17:43 +0000
Files and hashes:         1: ObGG0K6JAP0o3LkEL84AiMgcq6k.crl (hash: fTDMAZ9ZVXwz4PdgROq2VaH3vnMGNq2X5iQEEnXDrMc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30147/ObGG0K6JAP0o3LkEL84AiMgcq6k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30147/ObGG0K6JAP0o3LkEL84AiMgcq6k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ObGG0K6JAP0o3LkEL84AiMgcq6k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 11:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39B186D0AE8900FD28DCB9042FCE0088C81CABA9
        Validity
            Not Before: Dec 15 01:32:01 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=26983497CEF1B9A8E6F963F0E61CC17FBC251606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:99:4b:d4:c7:06:10:ba:81:6f:3f:29:0f:ac:
                    1e:07:12:bb:99:f6:23:06:6f:6c:be:ed:73:3a:21:
                    23:d3:c4:cb:7c:47:9e:2b:f0:5f:7a:52:cb:c6:73:
                    02:6e:61:49:42:ad:a2:2b:34:40:b5:67:ad:c1:3e:
                    f9:43:b7:2a:d2:5e:19:ea:fd:f1:26:c8:2b:0b:a0:
                    16:5d:bd:53:da:fe:77:e0:fd:db:42:64:85:62:db:
                    e3:1c:94:67:4a:14:fb:6c:0d:6c:da:d5:62:25:47:
                    8a:17:e8:7d:35:cc:65:af:2b:8c:42:7c:52:6a:f3:
                    3a:bf:29:0a:0d:77:30:89:6e:bc:52:c1:d1:33:bf:
                    88:43:4d:22:00:bf:e2:88:6c:60:b4:67:c9:f1:84:
                    a5:06:42:e9:77:49:3f:8b:71:7f:2b:c3:aa:26:89:
                    8f:50:3a:27:5a:41:24:b4:86:eb:fe:85:47:0d:55:
                    2e:16:36:dc:42:6c:af:64:d8:3f:a3:48:61:a8:60:
                    48:af:48:dd:41:3a:d2:9b:e3:61:86:35:62:c3:d8:
                    67:5b:b7:48:6e:04:29:00:b3:9e:ce:f6:d3:53:ad:
                    d3:15:83:d5:2f:a5:1e:30:86:8c:46:99:03:e2:04:
                    a0:e7:9b:8e:8b:f7:c7:b3:94:94:10:e3:3d:fb:cb:
                    0b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:98:34:97:CE:F1:B9:A8:E6:F9:63:F0:E6:1C:C1:7F:BC:25:16:06
            X509v3 Authority Key Identifier:
                keyid:39:B1:86:D0:AE:89:00:FD:28:DC:B9:04:2F:CE:00:88:C8:1C:AB:A9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30147/ObGG0K6JAP0o3LkEL84AiMgcq6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ObGG0K6JAP0o3LkEL84AiMgcq6k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30147/ObGG0K6JAP0o3LkEL84AiMgcq6k.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9c:02:58:c7:8b:ee:6d:d1:0d:c8:e4:5e:f8:6e:4d:43:05:
         ac:55:43:e3:b1:20:d1:5b:47:c8:ce:11:b7:00:75:75:90:46:
         3d:1e:de:2c:98:9c:e1:36:90:63:86:1b:dd:0c:1f:e4:fd:39:
         d1:2d:fa:29:09:79:6a:cd:3f:02:76:14:aa:d6:15:24:6e:89:
         e6:d6:76:c0:49:15:b6:d3:7d:51:da:75:46:d5:f2:06:a1:1b:
         b3:47:57:79:98:81:20:6d:c1:4a:91:17:1e:42:0f:2b:1e:a4:
         e5:f8:31:ef:49:39:be:e7:6c:f5:43:1d:36:4d:a7:ce:f4:37:
         a4:c7:53:ff:f9:7d:e2:7a:ff:82:af:62:4e:7a:44:c4:95:8d:
         a9:00:47:96:92:b9:5f:f5:63:50:9f:82:fa:ad:71:b8:74:68:
         0a:c1:25:59:36:28:4b:ff:0e:51:29:f4:16:86:02:ac:ee:4a:
         66:4a:38:5f:5d:49:ee:f0:1f:06:1d:c0:82:e8:bb:18:4b:c5:
         5b:0c:14:2e:28:48:a6:49:d4:38:bf:87:49:44:9a:67:bf:c3:
         9e:54:54:44:39:fc:6a:da:09:6e:4b:b7:51:10:e8:fa:ba:65:
         4d:3a:6d:64:c8:86:d0:62:8d:2e:6d:fb:30:80:1f:00:ba:bd:
         03:1f:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:37 2025 by rpki-client