This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.mft
File:                     YNDe7pHLQdIf5EnLx4zf72N3EnE.mft (raw, json)
Hash identifier:          afbIvqzl6AlYqN9MorSDzbmv1K0DtLXh5tjSDYGX6QY=
Subject key identifier:   CA:59:26:74:E9:0E:44:35:E1:83:73:80:14:FB:FA:92:91:F6:D2:AC
Authority key identifier: 60:D0:DE:EE:91:CB:41:D2:1F:E4:49:CB:C7:8C:DF:EF:63:77:12:71
Certificate issuer:       /CN=60D0DEEE91CB41D21FE449CBC78CDFEF63771271
Certificate serial:       34
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YNDe7pHLQdIf5EnLx4zf72N3EnE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.mft
Manifest number:          0A1A
Signing time:             Mon 22 Dec 2025 07:21:00 +0000
Manifest this update:     Mon 22 Dec 2025 07:21:00 +0000
Manifest next update:     Tue 06 Jan 2026 07:21:00 +0000
Files and hashes:         1: YNDe7pHLQdIf5EnLx4zf72N3EnE.crl (hash: 3C87fKYHhgqYywX2U1THvTOp6cHFKeuqI9KuoJNE/Xk=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YNDe7pHLQdIf5EnLx4zf72N3EnE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 10:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60D0DEEE91CB41D21FE449CBC78CDFEF63771271
        Validity
            Not Before: Dec 15 01:35:22 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=CA592674E90E4435E183738014FBFA9291F6D2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:a8:46:3f:84:5b:44:7d:62:76:99:64:72:
                    fc:e7:a1:fa:6f:b7:29:7a:98:ed:b4:57:ce:11:66:
                    c7:92:c0:41:80:a3:81:fc:c7:82:12:86:84:55:58:
                    8a:a5:e0:c1:2d:c8:79:b0:7a:3a:d9:73:dc:71:4c:
                    37:5d:cd:a2:da:08:ea:a2:e5:1f:b1:3e:ab:2f:50:
                    2f:ec:19:c8:bf:25:e4:4d:00:f7:92:70:f4:af:86:
                    da:9d:6d:8a:5f:5a:e9:5f:b0:34:2a:2d:ba:83:06:
                    49:ed:5e:66:74:ea:99:59:65:ae:4e:be:1a:0c:99:
                    c3:f0:c2:97:06:c5:e5:5b:56:f5:82:3c:e6:37:0e:
                    cb:9b:ee:17:20:ee:b3:15:41:da:c8:2a:0f:05:2d:
                    34:06:06:3d:7d:da:2a:68:b8:68:e5:e4:92:87:a8:
                    e7:3c:4b:f3:e9:5f:23:da:b1:b7:52:a1:ac:26:9e:
                    d1:f9:53:e5:31:9b:0d:4e:80:22:2b:bd:9f:ab:12:
                    d7:1b:04:b9:d7:0f:f5:b4:62:f3:e8:67:51:14:09:
                    52:77:b6:dd:08:c0:f2:e9:85:b0:53:2b:37:3c:ed:
                    42:0e:36:3b:cc:00:4d:af:75:a8:d8:22:bf:b2:51:
                    f7:df:9a:94:5e:c9:cc:17:83:bc:b6:a6:8c:b9:58:
                    bf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:59:26:74:E9:0E:44:35:E1:83:73:80:14:FB:FA:92:91:F6:D2:AC
            X509v3 Authority Key Identifier:
                keyid:60:D0:DE:EE:91:CB:41:D2:1F:E4:49:CB:C7:8C:DF:EF:63:77:12:71

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YNDe7pHLQdIf5EnLx4zf72N3EnE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:da:82:0c:46:8d:fb:40:9b:f0:e2:ec:99:c9:c1:fa:a3:09:
         0f:47:6e:5e:5c:fd:77:28:9e:ac:66:96:67:ee:0c:82:ec:35:
         e7:d5:99:51:e9:da:28:19:a0:49:b8:b1:a7:d5:54:24:e0:c9:
         01:88:a2:a6:b6:29:65:0d:0c:e6:c1:be:34:eb:72:af:18:b7:
         89:bd:e9:97:87:2d:6d:91:ed:25:44:9a:6e:c0:6e:65:f1:27:
         56:f5:56:69:c8:68:fa:34:bc:0b:13:8c:18:36:14:c3:d9:ef:
         8c:ee:27:1d:22:1e:a0:d8:dc:23:76:7a:ac:d2:60:c1:de:43:
         d3:60:5d:1d:d3:52:bd:ac:20:14:fb:72:4c:6b:f9:25:b6:d5:
         46:7f:d5:e5:2b:d4:d4:46:48:30:06:53:67:14:da:2d:9e:34:
         1a:63:e4:6a:ae:0f:8f:57:d5:c1:bd:34:c3:6a:b3:40:f6:44:
         15:17:f6:7c:6f:77:f4:e6:ea:43:57:40:fa:d3:f1:f0:fe:13:
         d0:a4:12:c2:66:67:c4:93:ec:2b:2b:f2:1e:63:ed:bc:3e:9a:
         30:c2:7a:df:d2:42:10:bc:77:72:34:fd:f8:fa:16:1f:08:78:
         2f:1b:a2:c6:05:2b:88:1a:32:e9:39:ca:23:1c:27:c1:eb:a5:
         bd:a2:ad:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:36:40 2025 by rpki-client