This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
File:                     sO8BlKUNHPsce5lL7-S-faasGWg.mft (raw, json)
Hash identifier:          UnYl9D5GDNwfqCpE2fK9pE3VE0FNkHev5SvEG0ZOQ1A=
Subject key identifier:   43:57:90:D5:43:86:5E:8A:1D:68:31:C3:51:22:4F:21:6D:16:DD:E9
Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
Certificate issuer:       /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Certificate serial:       1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
Manifest number:          0896
Signing time:             Mon 22 Dec 2025 07:39:31 +0000
Manifest this update:     Mon 22 Dec 2025 07:39:31 +0000
Manifest next update:     Tue 06 Jan 2026 07:39:31 +0000
Files and hashes:         1: BGdRtLAGrGR0dbx6zVqOgMG9RPw.roa (hash: jXTUlM/B1Xlat+GkogwubNf0DjsmLorVSFhWMzt0qXY=)
                          2: UE4_BqCLyCrfioSCC6tO0SYmIss.roa (hash: ExH9dDMEI3ATfd7Gc+fdFVWeo6LWdHJg73DSE4/OM6U=)
                          3: emIksTL4aNpePn11_iQtZCuyA5g.roa (hash: HGxtc+d3m/gHk22sQ6ayLlhSXpVxRjLXOjrw7H69lVE=)
                          4: kQp2RPpVA9nFe4nJgFyKTCQtm8w.roa (hash: pnpHYnoS02OpzmzEzcc9qdsvCPbRbvss7+mQWtExMzA=)
                          5: pPXkWCr7wgtB22yfzyIv9AmNq7Y.roa (hash: yh/ZosJRmv4U85hsMLwQQmWp4oL2t+7vJqJ9vGF1vI0=)
                          6: sO8BlKUNHPsce5lL7-S-faasGWg.crl (hash: W62rqnL6pA3cUrgR3atg9/X+gz1O32s+Lrr7IvG3ioY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 10:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
        Validity
            Not Before: Dec 15 01:44:16 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=435790D543865E8A1D6831C351224F216D16DDE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:d9:8f:ad:0c:fe:b0:a3:86:8d:06:42:b8:
                    ce:71:47:42:ff:fe:1e:c2:bb:21:31:2d:82:99:a9:
                    9a:26:76:5c:98:7f:d9:8e:33:dd:03:38:75:79:44:
                    a0:38:1c:60:34:29:af:00:46:be:c3:c0:7b:d7:08:
                    cd:5e:df:60:11:62:0a:99:08:e6:15:1c:02:07:70:
                    a3:1d:91:09:16:8f:c5:b2:81:ce:5a:c5:fd:8f:76:
                    37:48:e3:b9:da:35:48:18:7e:53:38:b9:71:f6:d3:
                    fc:d4:c0:b6:85:78:df:90:73:06:5c:69:1a:07:b5:
                    4a:1f:96:5c:61:92:27:38:19:b9:f9:f6:b8:c7:c3:
                    fa:98:3c:d8:75:03:6a:64:29:60:89:da:e0:09:74:
                    21:bf:27:2b:69:a6:6a:a6:47:7b:ef:b9:9c:39:09:
                    06:26:66:27:4c:66:d4:63:60:aa:f8:0f:2c:a4:8a:
                    aa:db:85:36:5d:f9:6c:aa:6b:38:8b:a6:06:5a:ee:
                    e4:44:15:6a:80:da:86:4b:82:5b:88:e9:19:34:78:
                    b7:3b:41:e4:a6:1d:8f:e6:27:e9:fb:8a:5a:f6:60:
                    ff:bc:bf:62:35:da:1b:91:5c:20:9b:7f:51:b3:5b:
                    25:f6:8f:c9:8b:a5:ea:2b:f1:f6:40:ed:f9:97:ac:
                    aa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:57:90:D5:43:86:5E:8A:1D:68:31:C3:51:22:4F:21:6D:16:DD:E9
            X509v3 Authority Key Identifier:
                keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:59:38:e3:1c:17:fd:89:74:b7:e8:77:1b:8f:be:57:b2:c9:
         3e:26:13:25:84:21:b1:34:bf:d5:1f:9c:fd:a0:25:9f:b4:50:
         c2:fc:06:4a:2e:cd:19:c1:82:b0:be:41:72:e6:1c:0f:a9:3d:
         fa:48:44:ae:f2:09:95:dc:3f:62:89:25:3b:9e:4a:86:e8:53:
         bc:d5:00:f7:91:7c:52:cc:bf:0c:90:3b:a1:c9:a7:6a:7d:02:
         57:e9:c3:2b:5f:ea:e5:30:67:07:21:e1:72:b2:1a:e7:40:b3:
         27:b6:d8:2a:1d:7f:0e:f5:c8:ac:17:5e:55:df:1d:98:85:84:
         12:7b:38:29:5f:47:c3:b6:e9:b9:3c:6d:85:32:59:8e:ca:67:
         c2:9a:9d:c1:62:5e:15:7d:00:6d:8e:e1:18:fb:4a:9d:8f:36:
         05:a7:2a:1a:e0:8a:f1:7b:ca:02:6e:e3:0d:39:59:fe:18:44:
         39:32:8d:55:68:cd:13:3c:f5:34:24:0d:02:7a:02:9f:eb:7d:
         28:f7:e7:45:f7:39:72:2d:bb:ff:c2:28:bb:66:7b:32:ec:af:
         09:fa:ac:6c:39:c3:64:76:59:97:a2:32:fb:c4:56:b7:94:d9:
         02:97:06:fa:f3:0a:ea:51:7c:fe:5c:1e:32:f7:40:dd:35:26:
         5b:3a:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:43:36 2025 by rpki-client