This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft
File:                     cRknFYbSjHciG34Ukuh1GxH0cYw.mft (raw, json)
Hash identifier:          vTwFJ3Ofk/9Z57flmOmyGSAqAiz8LpdkSFqLYFMF11o=
Subject key identifier:   35:8A:C1:96:AF:95:61:0D:3A:69:08:68:26:50:7C:24:CB:3F:AD:61
Authority key identifier: 71:19:27:15:86:D2:8C:77:22:1B:7E:14:92:E8:75:1B:11:F4:71:8C
Certificate issuer:       /CN=7119271586D28C77221B7E1492E8751B11F4718C
Certificate serial:       03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cRknFYbSjHciG34Ukuh1GxH0cYw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft
Manifest number:          3F
Signing time:             Mon 22 Dec 2025 08:00:15 +0000
Manifest this update:     Mon 22 Dec 2025 08:00:15 +0000
Manifest next update:     Tue 06 Jan 2026 08:00:15 +0000
Files and hashes:         1: beH_uOwbSyC7B2qxocFCewqQwV0.roa (hash: C6ZP2YVsYUhp21jBScyu6EyiTTvdwRefWgfbv/+hTO8=)
                          2: cRknFYbSjHciG34Ukuh1GxH0cYw.crl (hash: Qk2jitKNhyRd7HZgps3kAIiQPANJeJtYDBYA/IJw3qo=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cRknFYbSjHciG34Ukuh1GxH0cYw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 10:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7119271586D28C77221B7E1492E8751B11F4718C
        Validity
            Not Before: Dec 15 01:32:30 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=358AC196AF95610D3A69086826507C24CB3FAD61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:c5:2b:4d:c6:6c:bb:12:e0:bf:5a:1f:5f:
                    e5:30:7c:4f:ed:35:c6:e8:f4:86:82:54:ce:30:f3:
                    46:df:67:c3:0c:d8:bf:98:f3:2d:f6:0f:38:88:3d:
                    96:05:60:40:1d:12:7a:d4:8b:f4:cc:b5:a7:a3:d9:
                    40:76:7d:19:5e:4c:f7:5a:1c:02:13:cc:4a:db:4f:
                    82:d5:48:f3:a3:b3:20:78:12:99:8a:7c:0e:fd:a3:
                    e9:57:ed:3b:f7:09:e0:ce:14:97:19:58:9a:49:ce:
                    3b:64:4b:fe:49:44:9f:c0:e8:b7:75:d1:94:d2:68:
                    7b:a6:c7:53:b4:c9:75:f6:70:9d:29:f8:80:f4:22:
                    58:82:3a:87:9b:de:f5:87:4e:c0:26:93:33:b4:7d:
                    f5:b6:cf:0e:2e:32:2e:8a:bc:0a:00:88:13:1e:48:
                    76:97:61:b4:31:c5:b7:1b:b6:88:30:8d:d3:ae:07:
                    4e:19:53:28:07:74:0d:5e:26:e7:bd:92:a7:49:d2:
                    ab:3a:31:bf:a0:11:5d:e0:50:0f:c9:1c:d4:3e:35:
                    86:f2:e4:8b:07:4a:5c:b6:fe:bf:ac:46:d7:93:a0:
                    41:43:f6:17:d9:de:75:58:7e:52:62:13:0d:97:26:
                    5b:a6:65:d9:61:76:17:85:95:48:94:45:0a:06:5c:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8A:C1:96:AF:95:61:0D:3A:69:08:68:26:50:7C:24:CB:3F:AD:61
            X509v3 Authority Key Identifier:
                keyid:71:19:27:15:86:D2:8C:77:22:1B:7E:14:92:E8:75:1B:11:F4:71:8C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cRknFYbSjHciG34Ukuh1GxH0cYw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:3f:e4:04:2a:f9:ad:2d:3c:c3:a5:1e:19:5d:6d:1b:2f:09:
         bc:ba:43:55:0d:bd:3c:fa:b1:5d:20:e6:71:4b:90:d4:44:71:
         f8:de:a8:39:7d:a7:36:93:af:70:ed:36:5c:87:09:db:ef:c4:
         8b:1d:cf:cf:24:4e:fa:27:f7:4e:84:e0:97:8b:5c:bc:9b:d2:
         e3:e4:4d:3a:66:b1:d2:5a:50:9b:75:fe:e2:e2:0b:a0:1f:80:
         12:09:3a:8d:05:f6:3e:d7:57:f7:25:0d:0d:29:7c:c8:f2:e8:
         7a:f3:6a:16:46:c1:95:79:00:1a:a8:cd:d5:30:6b:51:04:80:
         a7:0b:06:35:88:5f:77:47:5e:fe:98:6b:d4:7c:fe:6e:71:eb:
         0a:39:48:1d:b8:ea:e2:16:ba:66:b1:58:39:21:04:78:72:27:
         28:27:f8:21:2a:0f:e5:fb:92:17:c3:ce:c1:0f:aa:e7:d3:c0:
         9a:7b:7b:6c:6b:d8:69:06:4e:d1:c4:27:45:42:e6:32:f7:9b:
         fa:b4:30:e7:74:1e:6f:36:74:06:38:d0:35:35:c1:a2:f4:68:
         0a:fa:b6:67:6a:30:b2:f1:4c:13:b9:c4:4d:7e:fc:07:cd:d5:
         df:39:6a:78:4a:c7:78:57:ed:15:bb:d5:24:c3:07:90:5f:81:
         91:16:d6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:27:25 2025 by rpki-client