This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
File:                     szOu2luBprL1T_cUZo-NY-h7haE.mft (raw, json)
Hash identifier:          0B/VNpAKeyEg6rNxckHW4xanuFeFIzBMNAQ28boIB1Q=
Subject key identifier:   F7:7D:A2:57:F5:11:41:0B:9C:5D:D2:AC:20:1E:60:DD:4A:66:52:5C
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       66
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
Manifest number:          09FB
Signing time:             Mon 22 Dec 2025 11:45:08 +0000
Manifest this update:     Mon 22 Dec 2025 11:45:08 +0000
Manifest next update:     Tue 06 Jan 2026 11:45:08 +0000
Files and hashes:         1: 4GotcfeZOvBvrU4XoVtBtKMva8U.roa (hash: gezLwyQTCmPGtkPY4Y3Nc809X3Pz0zoRXLr3abOT9N4=)
                          2: 4Tr8Q72joe_SXIhT04tydRWmrSg.roa (hash: nt+qcAGimGCnzhKdx/IHNVZPG5p6iQESjU6dEDK+eI0=)
                          3: 6U-q32gXAjBQiUzmu0aA7Furo2g.roa (hash: 3iHUiFoj5TiHqzC6M7cKtEnGcgSqYd1C6Anbxm0ELbA=)
                          4: 8V0icYjzql3xuZ46GNIIyB7wYnQ.roa (hash: eyzzGbXodkKYGnhAxPmlQgfFDKeDvczUzjaP2V6BAb4=)
                          5: A4rDsvojhjLDtw_kvpZxiih0UYI.roa (hash: eDQ2wddbcyLXFUuqAJ1LkrfZt/9Jg6ktDRoRFYjwpT8=)
                          6: BrlonXwMPbqPGBwoeBGfDQ17aaU.roa (hash: ZFlVVwu57m0gH6AOOSukj+DNeYAILlFH2pxRY6x+Gv0=)
                          7: _Hqk1G7sqNWtQgM3XTwR4mnqhyU.roa (hash: d/9ovMKRiXYtyU9DZePKg9rB+VRdCNy6QptQSa082Bo=)
                          8: hH1kCATsZgtSCpHajoJjvRH5dik.roa (hash: x0uBKtuBmOukg9tjf9Kcc2OB9ch/kBkwjwXeF9F1zhI=)
                          9: hcvLFs30wriFgmtv5VXGVAPshSM.roa (hash: djH9SoAXnYNEanBqcBV1QQooPtPkvigY2AVSTxJB+NI=)
                          10: lOZSlhKLWL8EWN5Fy4_wewK31s8.roa (hash: sjT9ZXv+8OSt631rYz8OTEmbO41I1pzIkZOSLFFc+mY=)
                          11: onJzDUCSszKCFMa4kvtd7GPgdxo.roa (hash: nJ/yXyFHifgAuKCiiuakWJBU9nOeXcu5Hfz4nI/4EmI=)
                          12: pReCTfEzE5oYojwBzHBfRHiiIUs.roa (hash: bz/Y+jl2TY7CKdG9YizCEDga9Slnl4V6FGwpaIS/8Xo=)
                          13: szOu2luBprL1T_cUZo-NY-h7haE.crl (hash: Gi3xZuTr6dw8hICaCUaCb6AwcYt/R//mGLOKfmm9tiI=)
                          14: t5Kp_OX7uIe4HU4TY2ifi7wABWU.roa (hash: MJ3wY6PEokj4+XKtl77Kpp9aUrgta2heUgcolynVk18=)
                          15: vK_wQJJrj_iM92QfjzlwzXiggqM.roa (hash: 4+OU6GeyL48jmL5kWRsBxfrZoD3kANiFnySxIuM1DB4=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 11:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Dec 15 01:30:29 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=F77DA257F511410B9C5DD2AC201E60DD4A66525C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:d1:43:3a:39:de:d0:f5:e2:76:ef:9b:61:
                    c6:6a:ec:f4:1b:76:93:35:a9:2d:6a:52:10:4f:ef:
                    77:34:ca:64:f8:ab:86:fc:d0:63:c6:94:e5:f5:a6:
                    34:0d:bc:e2:e0:f2:5f:bc:81:3d:36:aa:02:92:83:
                    db:0a:1d:7b:d0:c2:27:87:3d:99:7b:d2:56:02:fe:
                    ad:2e:af:33:44:37:55:05:06:e6:70:4d:90:26:18:
                    f0:68:fa:9f:9e:30:fc:8a:49:2b:fa:c0:3a:a6:67:
                    0d:f7:11:e2:fd:a0:81:ee:79:c8:fe:45:cb:85:ea:
                    3e:b4:64:e3:f7:63:a8:2c:dc:90:fa:8c:c4:c0:c4:
                    3d:b0:c0:01:94:47:57:18:27:a0:74:d5:71:ff:4e:
                    b1:c8:45:2a:c4:70:96:d8:6e:0f:a6:4d:fd:77:61:
                    64:8a:8d:28:cd:1b:68:6c:a0:aa:1d:e5:35:9d:40:
                    ed:18:85:af:d9:c6:ce:6b:48:7d:ce:61:3f:2f:df:
                    e8:48:9d:ba:ba:75:4f:bd:16:84:53:b6:e6:84:14:
                    72:8c:19:78:48:42:d9:5d:35:18:a5:11:ae:8b:d8:
                    98:1e:83:a4:bc:00:23:45:a3:b4:e0:08:f3:80:52:
                    a6:0f:bd:44:12:11:3d:cc:7a:96:e1:f5:5c:fc:3c:
                    67:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7D:A2:57:F5:11:41:0B:9C:5D:D2:AC:20:1E:60:DD:4A:66:52:5C
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9d:81:6a:20:cf:79:e6:e3:e0:1a:98:f3:1a:3e:26:ad:ad:
         3d:8a:a7:b9:88:2d:22:7c:9c:ff:a9:bb:a7:fe:27:1d:de:8c:
         6d:02:76:68:c1:f2:dc:f0:01:32:2e:1e:3f:c4:f7:3d:d2:d6:
         f8:5a:2e:94:2e:7e:cf:c6:2a:0f:55:ac:28:d4:8b:94:57:4b:
         c8:3b:34:73:72:94:01:96:7c:67:95:94:23:fc:22:2d:ac:85:
         1f:da:e0:02:83:3f:f7:6a:60:77:77:38:2e:6b:53:9c:d0:cd:
         73:e8:9b:fb:0c:12:af:a9:aa:ee:d1:84:34:d1:c5:6b:28:10:
         d1:37:57:45:9c:89:30:a2:7e:de:ea:63:ae:fe:d9:13:76:04:
         6a:34:45:9a:22:57:b4:8b:a7:f3:18:a3:e3:15:48:69:b9:e6:
         96:d2:d6:0d:0d:dd:13:f9:66:62:f1:1e:3f:90:6f:6a:a5:65:
         dd:de:9f:38:c2:e7:7d:a0:79:17:ce:59:f3:59:1e:e0:0c:3e:
         11:87:af:d4:57:bd:09:7a:ab:b0:e1:80:29:5f:10:1f:46:72:
         47:84:95:b4:4d:13:21:d7:c1:b9:19:61:00:e2:63:aa:35:25:
         0e:39:f9:da:2e:35:c8:5c:4e:34:b2:7c:13:d6:e4:82:2d:21:
         a5:36:46:79
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz
QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTI1MTIxNTAx
MzAyOVoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoRjc3REEyNTdGNTExNDEw
QjlDNUREMkFDMjAxRTYwREQ0QTY2NTI1QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALM40UM6Od7Q9eJ275thxmrs9Bt2kzWpLWpSEE/vdzTKZPirhvzQ
Y8aU5fWmNA284uDyX7yBPTaqApKD2wode9DCJ4c9mXvSVgL+rS6vM0Q3VQUG5nBN
kCYY8Gj6n54w/IpJK/rAOqZnDfcR4v2gge55yP5Fy4XqPrRk4/djqCzckPqMxMDE
PbDAAZRHVxgnoHTVcf9OschFKsRwlthuD6ZN/XdhZIqNKM0baGygqh3lNZ1A7RiF
r9nGzmtIfc5hPy/f6Eidurp1T70WhFO25oQUcowZeEhC2V01GKURrovYmB6DpLwA
I0WjtOAI84BSpg+9RBIRPcx6luH1XPw8Z40CAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBT3faJX9RFBC5xd0qwgHmDdSmZSXDAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm
j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o
N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTUvc3pPdTJsdUJwckwxVF9jVVpvLU5ZLWg3aGFFLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBABadgWogz3nm4+AamPMaPiatrT2Kp7mILSJ8nP+pu6f+Jx3ejG0CdmjB8tzw
ATIuHj/E9z3S1vhaLpQufs/GKg9VrCjUi5RXS8g7NHNylAGWfGeVlCP8Ii2shR/a
4AKDP/dqYHd3OC5rU5zQzXPom/sMEq+pqu7RhDTRxWsoENE3V0WciTCift7qY67+
2RN2BGo0RZoiV7SLp/MYo+MVSGm55pbS1g0N3RP5ZmLxHj+Qb2qlZd3enzjC532g
eRfOWfNZHuAMPhGHr9RXvQl6q7DhgClfEB9GckeElbRNEyHXwbkZYQDiY6o1JQ45
+douNchcTjSyfBPW5IItIaU2Rnk=
-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:49 2025 by rpki-client