This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
File:                     EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft (raw, json)
Hash identifier:          HH7cODS6G81ncNazfuC2vLI3KdTNQ5XnOdCvIxhxAD4=
Subject key identifier:   A2:DB:FF:23:8A:85:9E:EF:BB:4D:B7:93:FD:7F:3A:61:A1:2B:2C:E6
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       D3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
Manifest number:          1C25
Signing time:             Mon 22 Dec 2025 10:52:18 +0000
Manifest this update:     Mon 22 Dec 2025 10:52:18 +0000
Manifest next update:     Tue 06 Jan 2026 10:52:18 +0000
Files and hashes:         1: 0PAFmAhpbvgLdbmDJ2k--iIBYHk.roa (hash: TBfXVVvl+I0JOMNOaqJ2W8PgyyEjUUuyDsyxlWdqHQ8=)
                          2: 0srX8y3Jti07Hnnicc6k3BJYxP8.roa (hash: 61jZ1lE6xB9tfCWmSxBSU9uF8bAHLEcOth1NkEiAkMc=)
                          3: 9xscJtcTW-WeHnNRVY5DMCVbbPE.roa (hash: zksblTLVuKotYLK7oArWGaAO8yzsfbDfhbrvdg5mY84=)
                          4: AQTDxTcTCI45hOxBEWNl9A73EE4.roa (hash: VDyCiePXtRnfNcZR9iXhw09mC6UtKgholnIkcdgrcWk=)
                          5: EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl (hash: qOBEuQMtbtgavdDJgYRoDTuq67ew+eUYfqDGLTt592k=)
                          6: J5Rz8oXbQEJk8gssAfFbzH27kWE.roa (hash: /NvhgjAlB+2N48IuXxAhT1RxoomG+cancg5GOevnSpk=)
                          7: Muz4veYwYMXngxvdeFbGQkfqNzU.roa (hash: 9ktCjshvkIjF784V91Opr/PUKTq9lV72q0Qty0VQTlM=)
                          8: NAMn1afCARECE5vUVMtAYD75tTI.roa (hash: Rx5R0Q3ISExp8EqhSw0eelilGT5MkxakecoZB8o5nro=)
                          9: aCKUeZU3WSLhACxmTMwCPJCZLUw.roa (hash: gTGxvDID6/8y43sm1M1aG0OHolLQnUlbjN1MRV66t2Y=)
                          10: b5b-aW5uwh5i28IiNA7cctuW7DE.roa (hash: HWEP2PDQOID+gOurylLkMhJOtRgCxlzrSon9J10JluM=)
                          11: dlqlP92ne5iXEr_Jps1uHbvFaho.roa (hash: f3GSmSdhBD6ujxXoBZu17In7bwsMfVTCYKMhuNl4Ofs=)
                          12: iu1Fhx_wusf6qNPH07bxdsJ9tjs.roa (hash: 8CjfmAubG1rN3/yYGa9jSzoh1YjrWwT5yuraFxJJrRQ=)
                          13: rwNTvoN2RBjF4jD-4xLiPW6WfmE.roa (hash: Gs930vS1gAJpIdv986KapZr9qmnD8HKt/jvA2d7np90=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 10:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Dec 15 01:33:32 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=A2DBFF238A859EEFBB4DB793FD7F3A61A12B2CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:6c:d2:72:c9:1f:db:e3:b2:49:f6:c7:c7:
                    5c:ec:bf:ad:a9:5a:2c:07:07:6e:da:77:23:a3:26:
                    90:c0:eb:93:89:97:11:10:e8:dc:23:34:fa:73:14:
                    12:bb:f5:16:71:5b:30:6a:77:f7:78:37:98:8f:c4:
                    63:1a:60:d2:d7:26:59:58:e2:65:58:14:44:77:00:
                    ec:0e:21:92:0d:08:88:a4:82:ec:d1:9f:81:63:8b:
                    c6:c4:64:d2:9c:ab:05:6a:1c:1a:d2:2f:c0:70:14:
                    8f:58:09:6f:0d:9f:c1:d7:3e:c6:36:8a:5c:24:0d:
                    a7:4a:f4:fe:95:75:d7:6d:47:e0:14:19:b1:2e:17:
                    b3:09:88:04:18:4c:17:c0:d5:00:c5:ab:29:39:2a:
                    b2:17:87:43:bd:58:13:04:fd:88:18:8c:42:9f:2a:
                    40:55:7b:38:4c:25:7d:e7:f7:54:a0:16:ae:d9:2f:
                    55:10:b9:eb:7a:1a:a2:b6:80:17:5d:a9:26:96:e1:
                    49:7a:7f:ab:6b:84:9f:58:0f:82:bf:7c:e9:48:81:
                    d5:74:34:fb:3a:0e:48:7c:88:1b:d6:ae:f4:05:0e:
                    fc:ac:6d:13:39:0f:f5:d4:51:7e:26:19:2f:35:64:
                    51:2d:2a:34:cc:fa:36:81:e0:fc:a7:1d:24:57:ed:
                    13:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DB:FF:23:8A:85:9E:EF:BB:4D:B7:93:FD:7F:3A:61:A1:2B:2C:E6
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c4:e4:eb:71:bf:0b:b5:d5:31:39:80:d9:26:d6:9e:1f:bf:
         2b:17:1e:f3:26:46:fd:d5:c6:6f:fd:19:61:44:1d:12:b6:80:
         4f:df:e1:04:a3:40:de:68:fc:f5:23:12:19:ac:d0:88:65:48:
         e0:ee:3e:80:bd:14:86:2f:cb:22:d4:85:56:9b:95:3c:2a:33:
         17:32:a2:07:f2:53:d8:fa:e3:cc:55:5b:16:41:f6:d2:bc:37:
         23:86:46:50:93:66:eb:31:da:cc:00:1d:08:c0:a3:e5:49:bf:
         ba:0a:5c:02:1a:ac:62:ba:a3:10:dd:58:3a:82:bb:50:15:6e:
         60:d6:43:18:20:36:19:fb:a9:f1:03:7b:1b:0a:b8:df:43:0f:
         3f:45:82:23:f5:54:0b:fa:6e:1d:cf:08:67:bf:0b:d7:b1:df:
         ce:c7:64:a8:c2:8e:0f:e8:d9:10:b3:92:b3:69:8b:87:84:da:
         1a:52:a4:b7:84:ee:ed:32:b0:cf:8d:77:2e:9d:99:06:06:f9:
         fe:31:d2:5c:4f:a9:5f:c7:73:ce:e3:23:90:a4:7f:23:32:37:
         dc:72:67:b8:31:ff:3e:d0:a0:70:87:40:df:0e:7d:4f:98:4f:
         7a:5d:2f:c5:26:f1:a5:6a:ca:59:33:80:71:85:c6:2b:15:9e:
         55:fa:66:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:41:56 2025 by rpki-client