This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
File:                     if8a6GSr-fEmFOMHZAT1VtVv-oI.mft (raw, json)
Hash identifier:          ydGKj0Gw5jM8P4ZFMJBANud9BpBkQ6070POqPHmI2pc=
Subject key identifier:   F1:90:9A:A8:7C:86:7B:21:FD:B4:D1:14:F2:2D:6D:F0:B3:2E:F5:17
Authority key identifier: 89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82
Certificate issuer:       /CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
Certificate serial:       1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
Manifest number:          0995
Signing time:             Sat 20 Dec 2025 23:20:45 +0000
Manifest this update:     Sat 20 Dec 2025 23:20:45 +0000
Manifest next update:     Sun 04 Jan 2026 23:20:45 +0000
Files and hashes:         1: L81cz7y0oxWNHbQl8rUmzHWBNyE.roa (hash: GPSOFB4tYhpekULTWP99E6iKTUsR4vN9JPL9sV2pNTo=)
                          2: if8a6GSr-fEmFOMHZAT1VtVv-oI.crl (hash: x2HJe64zDepsHEPZgmouvCtp4EUs/9gzSfS3qDcksSU=)
                          3: lc34sKmnuTaf1zwMLkP85-29nLo.roa (hash: /WIhfZI0ncbjU2jZLBVHY+eMeD/i+XMv5UxJY0iSQYY=)
                          4: n8eQBYjvsUifgiHUdBIk3JHJA2E.roa (hash: lgdTeUR2d4aveju6dE0o2ntWyi20B2bFNgnTeqmPTpM=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 22:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
        Validity
            Not Before: Dec 15 01:42:55 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=F1909AA87C867B21FDB4D114F22D6DF0B32EF517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:e0:34:8b:f8:f6:49:bf:f9:7e:b7:2b:fe:
                    d8:d9:31:2c:93:47:7c:cb:15:ad:10:b8:16:94:05:
                    3d:fb:39:81:24:32:db:9f:20:5d:e4:b1:1d:77:47:
                    45:05:61:00:dc:b9:8d:b0:63:64:7f:a9:d6:22:c4:
                    93:cd:e5:8d:e7:c2:3c:d2:32:e1:4f:a4:50:36:42:
                    c9:f7:09:e2:1e:bb:f1:52:7e:c1:ca:4b:c4:29:6f:
                    40:9c:05:45:de:be:8f:cb:81:f0:6c:dd:f0:79:6f:
                    8a:f7:8a:03:a9:ec:c6:f9:8e:be:e9:ba:c6:3e:7e:
                    80:ff:cc:c3:39:76:72:ff:12:2e:f3:46:6e:2a:04:
                    ca:43:d7:8b:18:22:91:b0:77:3f:45:87:1b:f3:b7:
                    e1:94:31:1b:4f:40:6a:7b:1f:f4:10:24:e0:7b:df:
                    bc:ad:ef:52:63:d3:15:e6:50:c2:02:08:35:85:67:
                    64:0e:c6:db:61:9a:25:d4:c8:ff:ab:0b:b5:f1:9f:
                    43:20:95:aa:7e:d1:72:6a:77:10:fa:4b:8f:bc:3d:
                    03:eb:84:32:3a:e8:ca:6f:83:c3:b4:28:ac:b2:68:
                    89:2a:98:af:78:2e:bd:80:45:06:3c:54:ae:dd:36:
                    35:06:7f:a9:fa:98:3b:3d:87:fc:aa:55:2b:e0:15:
                    34:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:90:9A:A8:7C:86:7B:21:FD:B4:D1:14:F2:2D:6D:F0:B3:2E:F5:17
            X509v3 Authority Key Identifier:
                keyid:89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:a6:0a:26:43:21:b0:ca:59:7a:eb:cc:25:88:58:6c:53:
         45:f8:22:79:4d:41:f0:e9:d6:81:18:13:11:c6:6f:17:a9:bb:
         cc:d4:5d:7d:4b:8d:58:9f:9f:66:3a:2a:00:7f:4f:f4:39:d9:
         bd:18:c9:82:6d:82:45:95:78:6f:cc:80:19:69:1a:a4:fb:e5:
         2d:7a:e9:e4:45:ae:74:e1:e7:5f:49:62:4d:d2:c2:0a:62:05:
         c8:66:22:03:19:84:29:72:a1:9c:f5:1b:11:b6:2f:9d:1e:5a:
         e6:75:03:11:79:1d:b8:23:73:12:8f:67:13:4a:cc:11:da:39:
         66:0d:0a:fd:8f:0a:5c:d1:01:cd:7a:a4:20:d1:ba:09:00:97:
         40:51:fd:0f:3c:f8:74:a0:35:28:a2:e0:a4:6e:2c:d3:56:1a:
         8c:dc:64:ed:76:e3:6b:5b:e2:56:2e:db:7f:6c:c7:b3:f2:bd:
         40:aa:e8:32:31:02:20:ef:1a:84:69:7c:30:a4:6e:f2:a9:b7:
         9f:9b:91:de:d2:ed:29:88:03:e4:13:ee:2e:a2:08:5c:e3:b7:
         ef:75:81:cb:37:33:06:e8:01:c2:e1:14:63:03:e9:ac:b4:a6:
         62:01:f3:bd:c1:14:14:5b:9e:b7:79:e1:89:be:9c:79:f5:7c:
         f2:b4:2d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:33:03 2025 by rpki-client