This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
File:                     dkKgfZrJ0ifqQveebRMcsakg7c4.mft (raw, json)
Hash identifier:          2Q8yyok+C72/55Zq/5MmEtXxhKIErjNl0p8bGKRxh2s=
Subject key identifier:   7B:C3:13:07:1A:C5:BD:36:48:40:2A:22:4A:B2:CE:09:0A:43:B0:20
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       55
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
Manifest number:          0A04
Signing time:             Mon 22 Dec 2025 11:25:23 +0000
Manifest this update:     Mon 22 Dec 2025 11:25:23 +0000
Manifest next update:     Tue 06 Jan 2026 11:25:23 +0000
Files and hashes:         1: 094fO6JMQzI6s7lvzBYM5pHiCMw.roa (hash: aXWlY92En+LbjABH8L8et/QIF+tRaVyz9DEQenGvnEM=)
                          2: 6dPT_83Ps40QostT_3wSLRadYGA.roa (hash: iSSarqIRKifIWcvUbfD1uEq0nydnp8lxpOsiAjCdrS8=)
                          3: BiFSzOA9HCjORbD3Lp4poUry2S4.roa (hash: 55ZjJ6XMYcSXCkyXNXq+bcjZWk0uviD88iMBc5sI27g=)
                          4: JMh1vEg7LlQzU4NFrbiHdShf21c.roa (hash: WM3Odz6dO6uFhjhSivq+Cvgiwaq5JoPaGtu/dJGknho=)
                          5: NWOegMWwzBT3M4LBf379G4BnmSY.roa (hash: 04DiUjS19Ar4V9fYmE+fz50KB+Sz7ETlyXW4arcuz9M=)
                          6: NesXXLgkubRwCIW_jamI5fIak8A.roa (hash: qqIYCXPXGgOMiN2WWkBFXHs1oSg7cPmtzpRz1+O57RM=)
                          7: W0pSgc_LqIdtDnPXnGQeuTXbM-o.roa (hash: 7O/xQ81ncYaTYEMAXKSzr98hm7zlxlX8hPec48xGcUc=)
                          8: dkKgfZrJ0ifqQveebRMcsakg7c4.crl (hash: ccLJOt+doUEbX/H8w95cnWU/Uc23YEafHQ+Cl8/G46w=)
                          9: k2H8sVUoN80b3T3MTqHPyqmBdBQ.roa (hash: fMveZzRrBIt1WAPChCv67pdFifgxNiHeev5fU9KLUJ4=)
                          10: lbzaSpxOOVQqZean1HtQtgRbLNg.roa (hash: oBmWynwR/ZncCaIqJZmCTY2FD3uLXbQQN948/aJxgW4=)
                          11: nAC4s-qoQy8JBteGdzWMPSOQ2qM.roa (hash: /5DMOvYKXF4C4Tlcl0MJVkSSqT/F3cabuwxWbnMXByA=)
                          12: sVChWgI__yfi_uL7eCPoOvPpHO0.roa (hash: aIsLUz68rMEz6YuMeLdnLy4EQMPL/gXKKmuHcYBWy48=)
                          13: teQFiNnMLqGx_U4eEB-wFC5eMv4.roa (hash: J5gW9m0g18TS3s+swlwcg761asfJIebBza+VVodIlPc=)
                          14: yX92oCoZot88NEzEdBk4FHY90UI.roa (hash: 0sL5oKg7OohdcVgnwvBZTVy7umywLyA4FyuxbE3T9so=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 11:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Dec 15 01:30:09 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=7BC313071AC5BD3648402A224AB2CE090A43B020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:70:28:2c:62:28:d9:7e:49:7d:82:25:65:
                    6f:2e:ed:ba:cc:77:8f:a8:f1:62:a0:1a:d5:19:36:
                    0d:6b:d2:2d:8c:4f:35:7c:3f:32:bf:0a:15:bd:77:
                    8e:d2:9e:2d:17:6d:4d:80:b8:4f:57:33:6e:8e:45:
                    a8:92:f7:af:ca:8e:20:4e:c6:90:51:13:d4:07:05:
                    44:43:74:bd:5a:c9:a0:51:20:3d:77:33:dc:32:55:
                    bc:85:10:03:4e:0f:57:54:74:44:23:d6:27:86:8c:
                    e0:c0:9c:81:9d:b5:a8:56:2c:30:07:96:5a:81:86:
                    9f:d3:84:ee:1d:1f:c7:23:d9:a4:f2:09:f9:e9:f5:
                    1a:77:dd:a1:c0:f2:40:65:87:62:99:7d:87:6b:08:
                    53:b6:95:6b:c8:e7:59:e3:32:1e:62:90:aa:41:a6:
                    30:79:56:fe:43:da:33:ec:c3:e5:c2:84:5d:4f:fe:
                    05:5d:58:fa:db:1a:7a:d0:33:8b:7e:cc:f4:10:66:
                    1a:35:6a:d3:f6:d7:35:b1:68:df:cc:af:ac:26:87:
                    10:e2:c8:c2:f9:1e:84:eb:f0:a7:4f:37:a8:7e:5d:
                    15:38:cd:bd:93:c1:82:55:56:ab:94:11:5f:2c:92:
                    5c:d4:d7:00:15:0b:86:02:54:76:91:05:0a:a7:01:
                    ec:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C3:13:07:1A:C5:BD:36:48:40:2A:22:4A:B2:CE:09:0A:43:B0:20
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a9:0b:59:55:17:98:e7:d0:bc:ce:c0:93:6f:bc:92:1a:6a:
         55:40:f9:90:b4:62:2f:b4:80:e6:28:75:6a:58:2f:14:5c:4a:
         49:0a:b9:e5:57:04:f0:ca:ed:6c:07:d2:83:ee:6e:cd:77:4c:
         2b:88:31:c7:22:b2:ad:3f:0b:ce:5c:66:e1:9f:65:f5:f1:81:
         4a:8a:ad:ef:f3:6d:a0:3d:92:08:81:86:93:40:e7:3e:b8:d7:
         60:05:86:d7:66:62:f4:f5:d0:13:a6:5e:9d:56:1a:59:3e:98:
         dd:9f:2c:34:82:cf:ea:39:11:70:13:ef:18:95:d4:28:fb:09:
         1d:10:2e:38:59:2b:6e:fe:7b:ba:29:3d:1b:87:1d:92:98:52:
         45:82:f9:ec:7b:7a:94:c9:b4:ee:e9:f3:f2:d8:f1:d9:09:d6:
         09:71:49:09:e0:d3:39:f2:a1:36:1f:0e:0c:13:89:4e:4b:f0:
         ce:09:c5:1d:fd:1a:df:28:48:e0:7f:eb:f3:4a:41:74:46:fd:
         27:6a:35:35:0a:26:b7:74:38:22:b5:da:08:5a:01:c5:87:06:
         55:b9:dd:7b:97:f4:c7:48:bb:a2:3f:5c:16:f2:92:c6:7f:e9:
         0b:c0:af:8c:69:7d:94:81:28:98:44:5b:94:21:74:d3:b4:7e:
         d6:24:44:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:29 2025 by rpki-client