This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
File:                     14hnjmTSkYTCPaqttZS_2briQFw.mft (raw, json)
Hash identifier:          nsfG9H9J0sc5YETwf8Xg+l1N9q/DE6da07ucPg+GRlw=
Subject key identifier:   CF:B8:7D:00:EA:33:E1:6E:8E:BE:6A:3E:31:9D:6F:E6:E8:AE:7E:A3
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Certificate issuer:       /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial:       64
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
Manifest number:          0A74
Signing time:             Mon 22 Dec 2025 11:27:07 +0000
Manifest this update:     Mon 22 Dec 2025 11:27:07 +0000
Manifest next update:     Tue 06 Jan 2026 11:27:07 +0000
Files and hashes:         1: -WiIDUooj0SAP5Oz-sIPCqSy7rc.roa (hash: exNfWt0z0ReAWbn8Fj4HXeEC8QI06FTKt1V+ODV5oAk=)
                          2: 14hnjmTSkYTCPaqttZS_2briQFw.crl (hash: dfJeYgfP6qMaEugQR81z5807xhEivHXmWjfoHzfzWME=)
                          3: Bc3IiLWVZeJxtrUVvYzlOY62IbI.roa (hash: CNVH9cCSUACHIRyYbB/Wqx1t2yFpGmhxQzLM7PTC88o=)
                          4: C3DvnLBgTo8D1v6qDlZHJ_tmJtA.roa (hash: Pwk8U4lx66bD78yXfN9zimuSBoaAvFA2vACM8dUvaEg=)
                          5: DWN3INbymKSvsZirmb2m6sSXbCk.roa (hash: TIKKV7juqXC344xsvXs4QpmI8g8taGEVagkX2wzHNv4=)
                          6: JRAFyum16jaqohEf-uzBFi6uu94.roa (hash: cHhioEBbU6ncJKByzk1yUz40gwC9wxtGNUT1Z3doIME=)
                          7: K5-_vD7XneI3QPWVpaQZmmNeK60.roa (hash: 7nuCnXSEyo+zdMewK3d1HDsiZP3rF/yG8x5gH00yKVc=)
                          8: OYAu2jiKFC-0iMWMTI5X0xo0XqA.roa (hash: PqDdx22iI7MQ3inhTvj+Z2VmoCE+ouPrlS+DhkhKjJA=)
                          9: xDwesYop68qPlqymFKn-kMhYBPE.roa (hash: /fYNRkxtVF/J9E0kot/nUVJqR1CVGNgc3HuadQUymwU=)
                          10: ylAiaw9Rhk5kFtWHcfYiBKBY_Lw.roa (hash: kDpYrWAn/Sogudixnu2WVIHNnRIrMNuMvpyhGMWeV30=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 11:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Validity
            Not Before: Dec 15 01:40:46 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=CFB87D00EA33E16E8EBE6A3E319D6FE6E8AE7EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:88:97:c6:72:75:ac:6d:57:ca:f2:6a:9a:85:
                    ed:79:c6:07:06:98:6b:a5:69:83:60:a1:ac:78:25:
                    74:52:65:31:a4:2f:6b:62:a0:d3:9c:f0:2d:37:6f:
                    a6:05:a3:dd:b1:cf:62:31:a5:41:39:21:99:33:45:
                    59:51:6a:b9:05:fd:f5:f9:de:7f:2f:4b:6f:37:1f:
                    d1:df:8f:a5:09:b8:d7:48:25:66:24:f9:74:2f:20:
                    92:dc:1c:da:f1:bb:ab:b4:93:f5:c0:5b:1d:a6:7b:
                    58:43:31:fe:35:9c:f2:59:62:10:ea:5d:53:81:9a:
                    e3:ce:ab:c8:90:f6:74:ed:3d:f8:fe:e1:c4:d6:b9:
                    2a:a7:28:10:de:16:b3:d4:d0:89:ea:c5:db:4f:e0:
                    26:ee:ba:dd:8f:45:e9:6d:96:b5:04:9a:cd:b5:8f:
                    4a:af:1b:97:4e:74:81:91:34:aa:5a:80:73:9e:e3:
                    1c:c4:66:2b:b9:3f:79:6b:32:3d:06:df:1d:bd:8e:
                    84:87:6a:85:23:3c:f3:eb:10:b9:1d:e1:56:b2:19:
                    4f:08:3a:ab:f4:21:f5:a3:94:fe:b6:ef:f9:01:1f:
                    f6:d6:73:ab:e6:ad:3f:e1:dd:3b:cb:f4:5e:d1:29:
                    8f:88:a4:34:98:3b:49:55:1e:cf:d3:8e:37:ce:6d:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B8:7D:00:EA:33:E1:6E:8E:BE:6A:3E:31:9D:6F:E6:E8:AE:7E:A3
            X509v3 Authority Key Identifier:
                keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:7f:c1:7f:af:ff:46:e2:70:d5:35:0f:22:0d:95:be:63:0d:
         89:40:84:b3:53:46:c3:b1:4c:52:a5:a1:c6:67:56:9e:68:4d:
         d0:60:9e:e2:9a:f2:f4:c5:92:7e:ab:8e:59:41:b5:c7:6d:c4:
         3e:e4:5d:74:a4:f3:c4:02:f9:cb:bb:2d:dc:ae:c6:3a:5c:e1:
         34:39:83:6b:ef:f3:91:23:7f:8b:db:07:01:7b:d7:82:df:8a:
         ad:57:51:c9:57:10:03:24:e1:b8:c3:79:8f:06:24:0d:5f:8d:
         1a:d8:a1:2a:fe:98:ed:d4:59:f1:41:9e:df:cd:33:49:89:2d:
         f6:34:a2:40:ce:a1:04:c3:69:e1:53:b5:e3:b2:87:17:62:73:
         d0:f4:24:ee:51:52:ec:93:4a:8a:95:9e:4a:cb:09:f6:d2:1d:
         53:1f:d1:17:c0:bc:aa:34:91:fb:65:b2:a7:15:bf:e2:cd:68:
         23:b5:92:49:32:0a:09:d6:e8:1c:62:fa:4f:83:c7:21:17:68:
         cf:66:86:bf:f3:f6:fd:b0:70:31:6a:c9:ba:f7:95:d4:5e:76:
         fb:b5:e8:6f:b7:40:ed:e3:f9:e8:0f:12:a6:3a:56:a3:a5:59:
         7c:c2:ee:fe:35:65:4f:c8:fb:d6:03:a3:3c:c2:2f:f6:ef:10:
         da:e6:59:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:55:31 2025 by rpki-client