This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
File:                     JFBahrANzQW6NgvKZq3_YCvZWqg.mft (raw, json)
Hash identifier:          KgB4KKckuA1HxPQcLD3+9ptiNiXP2x6Ivsej7rvE1uE=
Subject key identifier:   37:54:72:5C:CF:50:D9:28:FB:7B:09:EA:73:AD:61:6E:C2:6B:18:2A
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       85
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
Manifest number:          1C25
Signing time:             Mon 22 Dec 2025 10:56:07 +0000
Manifest this update:     Mon 22 Dec 2025 10:56:07 +0000
Manifest next update:     Tue 06 Jan 2026 10:56:07 +0000
Files and hashes:         1: 9LzZ6itj0-XE7xid-GvA2cN24jY.roa (hash: hmAJNcO+Y9kpkfI2EclwSmKm3FKDveuciI0Oyebf+cs=)
                          2: BLMB65YKDilSH2-ivPU31QSZJnI.roa (hash: THgO3N5FUnlH3Uo1kiIYx+DO/Mj2TaUZULagIphNwj0=)
                          3: DGtrIHfUxKyle1Ld7ooXa6MBuFU.roa (hash: BTsVDDcZ0Wqr48K2JkZUod6kC2JTarmjwBJNCwF4PvA=)
                          4: JFBahrANzQW6NgvKZq3_YCvZWqg.crl (hash: RKczWKUSAytYBgHxdmbzoPehiD78vK0irxGOjldiS4M=)
                          5: UWP5aFt5WfIDsDftrt0pnMBrRp8.roa (hash: IK9+a0NJqHMg1dH5NccdFL402pRGKPoT23G1LDPOC2Y=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 11:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: Dec 15 01:32:50 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=3754725CCF50D928FB7B09EA73AD616EC26B182A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:a7:b6:7f:99:b5:66:a9:91:70:29:1c:4f:
                    2b:39:f8:f8:29:34:1e:9c:dc:b1:a9:cc:ac:0d:58:
                    60:69:40:fd:75:c4:76:eb:52:3f:94:29:4b:c2:70:
                    12:1d:07:95:a4:8a:92:95:20:95:64:f0:6b:57:88:
                    f9:87:6d:95:d7:e9:9f:cc:a8:3c:d7:c4:11:81:5e:
                    d2:80:80:11:e2:38:7f:65:21:6f:80:44:6a:47:63:
                    3c:8a:91:62:42:c0:cd:70:ee:07:e4:ce:d5:80:e0:
                    0c:71:34:ed:e3:7b:e1:67:e1:55:21:6b:39:5b:58:
                    aa:5d:66:a4:2d:d0:ee:ae:6f:02:65:ee:6f:1a:c9:
                    e8:4d:2f:3f:6e:f9:12:21:aa:52:db:5e:ed:9c:75:
                    6d:ad:01:49:e2:bd:f1:2d:2e:12:99:4a:6f:1a:92:
                    b7:20:55:11:71:8c:6a:fb:ef:42:d8:c4:3a:17:8c:
                    67:5e:6d:42:3f:65:a3:b2:2f:5f:48:78:7f:18:f6:
                    65:0f:02:3e:5b:ac:3c:d4:d2:38:ed:45:6a:62:87:
                    a9:e3:b2:fe:83:30:b0:e1:ff:04:8c:ab:c6:11:aa:
                    c3:83:65:60:58:88:c7:94:e7:35:a4:67:57:99:f3:
                    1f:68:9b:7a:40:9b:51:70:94:ac:ef:cd:04:7d:97:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:54:72:5C:CF:50:D9:28:FB:7B:09:EA:73:AD:61:6E:C2:6B:18:2A
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:fd:ce:2d:45:53:60:91:8b:29:18:76:9e:ed:6a:89:51:e6:
         d6:34:28:21:c7:de:6c:c6:4e:b7:ce:da:25:0e:b0:bf:42:91:
         06:33:97:0e:92:b7:94:22:fd:31:ea:85:a5:5b:5c:16:a6:26:
         8f:1c:df:f5:c3:a4:49:b4:3c:27:56:6c:7c:82:89:56:df:61:
         a1:f8:08:ce:f6:a4:05:ba:f8:33:6c:1a:c0:3f:09:57:4e:58:
         cd:26:72:42:d6:10:ef:95:3d:7f:c7:a7:2e:e8:28:95:05:d9:
         b2:8e:14:83:02:4b:41:de:3d:2d:a2:3b:55:20:55:88:68:0f:
         02:51:df:8b:43:4b:bd:80:15:e1:3a:72:5c:a5:3a:52:f4:c0:
         c8:32:ce:c4:b7:37:af:69:14:1a:95:89:df:13:34:96:1b:4f:
         d1:c1:14:0b:2e:16:3d:f9:f2:d4:16:45:26:71:e9:b2:a8:12:
         da:99:c9:06:c6:8e:83:e3:db:da:9a:a2:9b:b3:0e:70:03:1d:
         9f:ca:50:e8:f6:98:45:d8:28:e1:dc:55:c0:77:38:38:e4:c7:
         d8:43:7b:f5:90:db:d2:86:ae:74:89:ac:a4:11:f5:b4:9d:b6:
         e0:53:cb:b6:88:30:ff:4a:d7:f4:a2:3e:1e:6c:e1:3e:a3:0a:
         b7:cb:a5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:52 2025 by rpki-client