This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
File:                     zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft (raw, json)
Hash identifier:          aHqBx+dhFR45/uhUIXEvzHBqSmhOtkBbAWzjFpzzBng=
Subject key identifier:   EC:3A:D8:91:9A:A2:30:DA:6E:D0:64:B4:16:42:BA:D3:1E:1D:3A:38
Authority key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14
Certificate issuer:       /CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
Certificate serial:       5D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
Manifest number:          0FA5
Signing time:             Sat 20 Dec 2025 15:27:31 +0000
Manifest this update:     Sat 20 Dec 2025 15:27:31 +0000
Manifest next update:     Sun 04 Jan 2026 15:27:31 +0000
Files and hashes:         1: -X0jJu_8YcrgmbwcLJfL0rPbn2s.roa (hash: jtzsHUMra6xFH5FqrWEWPZJ6jLip/jyJJO//rUxrluo=)
                          2: 2BAdypjlzWGSu3yMwaRar4m91ls.roa (hash: 13tPTY8R8CxuxpHffOdqMZDVRL7Rh4d2Qs2ATXb85Ls=)
                          3: ARewXoZXPiHc8y02aocu3efdsxw.roa (hash: kCUhL2f7bttkV6TN7jtUY9QzX1U5vLP/sAZqMR7rF0U=)
                          4: EUhrVahjug953z5dDiO_W8xjkNc.roa (hash: Ex1pfHL6w+B0QUpMw6b1TKukRTx9x84h+QpTEL9k98E=)
                          5: K3lCvUdMC9WGDk2rCtLXl_RDJYI.roa (hash: pWvU+B98TJa7Ch26mHtSAEo8LtEVWEbF67GZGgQ7y04=)
                          6: QhcUKd0bb7KdwJgfb1KIB4drgMI.roa (hash: fpTI1rkfOSwA+iDd3fXH60oTMseV9PWW1yh55e0SZHo=)
                          7: TdkvpWir6dwlDu3mq22bHVwo-YE.roa (hash: U+x7oW/Nq3LwSgmxoxYhAKb4Ysm8IBqHn2PsODf8rrk=)
                          8: g5JVzJTIsfmBXLC2-U-4ne8iDIE.roa (hash: K5881Qkai8wJqAlNnP4XFjZbmxsNwLfo3dS1G1TJ/AU=)
                          9: kHn-RFmCUt59TsGwG-Rao9d0H8M.roa (hash: HO5Ff84U5NFPTW5GysrmkQQ0QSTAA51W2pKCJH83W54=)
                          10: mm0Kl5q5uqT8b80N3kd4pusqKQA.roa (hash: csybzV5QKPmrwuDlZhmCwTi8GWQgsCQbSZzebWdu6A0=)
                          11: rNFthIc2J5EwX2OqVd84j_lAKe0.roa (hash: oC6+6f9YD56O4vEu0bfXIVBQWJLxCtxJlvjNuD2A5iU=)
                          12: tCCmk3IjOBUDc1c6ltQhsGp2BYc.roa (hash: HbM/RH/MO8DTotYdnT3fKeZ01gLeG2WsqTuDMd4Bjq8=)
                          13: zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl (hash: 2itL7cxdp2FZyCHGXFXD3qeIqbjvpBU5Q5+tnhYGqRM=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
        Validity
            Not Before: Dec 15 01:39:22 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=EC3AD8919AA230DA6ED064B41642BAD31E1D3A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:fa:f6:c7:af:5c:c3:a0:0f:6b:51:c6:86:
                    eb:fc:01:ad:74:7a:30:a4:3d:0c:22:dc:80:51:e9:
                    3a:e3:e0:6c:4c:47:21:47:15:e5:f6:e0:1f:86:d6:
                    45:77:a5:04:a2:a5:6b:8b:c8:9f:eb:ab:78:58:89:
                    f2:48:2e:e2:f2:96:e2:4d:16:98:fc:f3:07:44:df:
                    c8:f8:38:ef:12:71:b2:1c:8c:67:71:25:75:3f:e0:
                    c6:ad:e6:df:86:cc:fa:17:25:3a:e7:4d:a8:86:94:
                    b6:c2:e2:67:e3:94:f1:af:ed:b6:d0:de:c6:fe:89:
                    99:01:71:96:f8:69:f1:17:77:a6:c1:a3:ed:f9:3d:
                    e0:3f:41:7e:12:19:61:3e:4e:0e:5d:d3:41:20:32:
                    58:00:45:fa:6a:d1:3b:4a:7b:05:55:e8:45:3e:f1:
                    6f:1e:78:cd:73:d0:15:d9:4d:cd:78:66:e9:d4:db:
                    69:24:c2:55:6c:8e:12:d2:48:88:13:54:6d:2a:82:
                    a9:dd:49:f4:5f:5d:d0:ac:67:99:35:a2:7a:bd:69:
                    77:0e:ae:23:60:01:f6:b0:e9:a8:38:30:b6:25:72:
                    f1:ae:65:ff:eb:66:c0:2b:38:b4:26:4c:25:66:89:
                    80:de:23:db:89:fe:78:ca:6d:20:bb:f9:5d:7f:ac:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3A:D8:91:9A:A2:30:DA:6E:D0:64:B4:16:42:BA:D3:1E:1D:3A:38
            X509v3 Authority Key Identifier:
                keyid:CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:2f:7c:9b:44:1f:58:b4:dc:2a:36:a2:e5:a0:c9:07:86:07:
         f0:78:69:7e:76:8b:bd:87:52:5f:f5:3f:ae:77:b9:78:a8:93:
         ad:24:1d:dd:ae:5f:5c:81:95:df:69:ff:ce:b5:0c:08:d3:14:
         71:ab:40:ce:59:98:ae:62:2c:be:28:8c:48:73:bc:de:91:ef:
         3d:40:7f:ea:bc:70:d9:89:78:2f:29:6d:49:da:58:d2:cc:ad:
         0c:c7:f3:89:91:b2:35:6e:3f:39:29:e9:6a:db:f4:ab:d3:09:
         c5:c1:e3:f0:e5:ef:be:d6:c5:72:eb:76:8a:d0:34:50:2d:32:
         c3:bc:2f:74:67:f0:42:21:66:30:de:6f:87:8a:1d:f0:d3:79:
         33:b3:60:e1:db:ed:60:31:ce:f2:f1:a3:87:37:46:a5:06:4d:
         27:a7:f0:b4:95:bf:a3:b6:97:6b:5f:f2:39:c1:5b:1e:ea:7b:
         1c:73:c0:8e:a3:c0:2d:19:64:ac:b8:a7:0b:eb:f0:f0:54:40:
         b4:10:e7:75:3b:96:0c:86:60:9e:34:c3:e9:e3:95:e4:be:ad:
         70:67:8b:e0:b8:0d:f3:00:a7:2e:9e:c5:74:94:5e:b3:bf:e9:
         73:64:12:1b:37:2b:87:f0:ac:ba:4c:be:79:96:b8:fb:bb:6a:
         77:5b:ff:37
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRDVF
MjMxRUJGNDRDN0E0MDM5QTJGNzhFODM0QjZDRjNENkFGQTE0MB4XDTI1MTIxNTAx
MzkyMloXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoRUMzQUQ4OTE5QUEyMzBE
QTZFRDA2NEI0MTY0MkJBRDMxRTFEM0EzODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALZ4+vbHr1zDoA9rUcaG6/wBrXR6MKQ9DCLcgFHpOuPgbExHIUcV
5fbgH4bWRXelBKKla4vIn+ureFiJ8kgu4vKW4k0WmPzzB0TfyPg47xJxshyMZ3El
dT/gxq3m34bM+hclOudNqIaUtsLiZ+OU8a/tttDexv6JmQFxlvhp8Rd3psGj7fk9
4D9BfhIZYT5ODl3TQSAyWABF+mrRO0p7BVXoRT7xbx54zXPQFdlNzXhm6dTbaSTC
VWyOEtJIiBNUbSqCqd1J9F9d0KxnmTWier1pdw6uI2AB9rDpqDgwtiVy8a5l/+tm
wCs4tCZMJWaJgN4j24n+eMptILv5XX+s6lECAwEAAaOCAjswggI3MB0GA1UdDgQW
BBTsOtiRmqIw2m7QZLQWQrrTHh06ODAfBgNVHSMEGDAWgBTNXiMev0THpAOaL3jo
NLbPPWr6FDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTEvelY0akhyOUV4NlFEbWk5NDZEUzJ6ejFxLWhRLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvelY0akhyOUV4NlFEbWk5NDZEUzJ6ejFx
LWhRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzUxL3pWNGpIcjlFeDZRRG1pOTQ2RFMyenoxcS1oUS5tZnQwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCRL3ybRB9YtNwqNqLloMkHhgfweGl+dou9h1Jf9T+ud7l4qJOtJB3drl9cgZXf
af/OtQwI0xRxq0DOWZiuYiy+KIxIc7zeke89QH/qvHDZiXgvKW1J2ljSzK0Mx/OJ
kbI1bj85Kelq2/Sr0wnFwePw5e++1sVy63aK0DRQLTLDvC90Z/BCIWYw3m+Hih3w
03kzs2Dh2+1gMc7y8aOHN0alBk0np/C0lb+jtpdrX/I5wVse6nscc8COo8AtGWSs
uKcL6/DwVEC0EOd1O5YMhmCeNMPp45Xkvq1wZ4vguA3zAKcunsV0lF6zv+lzZBIb
NyuH8Ky6TL55lrj7u2p3W/83
-----END CERTIFICATE-----
Generated at Sat Dec 20 19:51:46 2025 by rpki-client