This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.mft
File:                     BB_IZ_OcU2RNDFxQmUtVERvXbKM.mft (raw, json)
Hash identifier:          9ZN5n1WEs5h8R33c6PTrPnQW9IhYJhoQECKBUARSLrk=
Subject key identifier:   5D:E6:2B:C8:DC:B5:E5:BD:EF:63:E0:5F:51:7E:80:6C:53:D5:07:9A
Authority key identifier: 04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3
Certificate issuer:       /CN=041FC867F39C53644D0C5C50994B55111BD76CA3
Certificate serial:       1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.mft
Manifest number:          0897
Signing time:             Mon 22 Dec 2025 11:39:35 +0000
Manifest this update:     Mon 22 Dec 2025 11:39:35 +0000
Manifest next update:     Tue 06 Jan 2026 11:39:35 +0000
Files and hashes:         1: -jhg0pCRy4X946rQ8e35h3m9dnw.roa (hash: utWQKrYzV0V9g/d9cIQruPDpyldtXkzHS6k1joDv65g=)
                          2: BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl (hash: 6GCJtx/mOTTlGZRRLY2zSsahNgtJxI1AoFfSK61gJXA=)
                          3: IRHDUWSpkl9LmHJj0ehra2hB_iQ.roa (hash: mvUy9G+iE+2xXVGsrDJDyhiqzCL0irZf2x3HekWxjiM=)
                          4: VkbON0Te5_i_dYj0mYzhtbxL7fo.roa (hash: wYHtfbptX96xZmwRI7DZ4sTiyGzg6uGxPNFhjT13kFQ=)
                          5: iX0rQdv8JpCkYO6Vn7y8BSFQZ1A.roa (hash: 83Cy8J9b5pHRlpqqP6qne9yc37srpNgyc3zPP0UJ0/c=)
                          6: kijoSMQjDDd3eqpzbhEL0KZ8vtI.roa (hash: VJQk9OYMPJYoEGjJeMA4aion1LiFQ7+4kRZ4tNZio+4=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 11:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041FC867F39C53644D0C5C50994B55111BD76CA3
        Validity
            Not Before: Dec 15 01:44:14 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=5DE62BC8DCB5E5BDEF63E05F517E806C53D5079A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:df:32:19:59:f3:a1:00:fd:dd:47:b8:80:92:
                    72:53:a2:f8:3b:0e:07:27:86:82:3d:1f:64:17:85:
                    a3:db:71:6e:66:a2:47:71:7d:65:40:36:e9:cc:1f:
                    13:3f:76:1c:8f:f9:ea:b1:11:8c:7a:3b:83:a0:fb:
                    48:ac:25:8a:e1:08:e5:fe:28:1f:9d:92:9e:a1:ba:
                    3f:b9:c1:c5:03:c9:65:b8:42:de:75:8d:7f:ec:d5:
                    e1:99:ab:f4:fb:0e:37:f3:79:f7:c6:ac:9e:41:2d:
                    35:eb:be:e7:ef:cb:b9:f6:b2:35:b6:dc:0a:22:94:
                    ca:ed:3f:7c:3e:2d:00:f1:5d:72:bd:2e:ec:25:52:
                    44:5f:4a:06:b3:0f:9e:a9:40:c3:7b:be:e0:f0:49:
                    f0:62:22:80:80:4c:74:e5:45:1f:c4:37:d7:74:cd:
                    39:d3:d8:30:50:da:b0:d4:4b:89:cf:24:0d:48:29:
                    ec:1e:14:e4:b0:3c:90:5e:5e:93:b6:b3:ac:cd:39:
                    cb:38:82:da:6d:51:a2:82:22:97:54:6c:36:fc:d5:
                    d9:fe:b2:32:78:a5:05:0d:0e:08:d8:9d:09:0c:b5:
                    7a:f2:9f:3b:a5:5b:65:93:b5:8d:30:d6:b1:f1:b5:
                    de:42:94:93:85:dc:93:2d:57:86:bb:09:b6:8c:55:
                    9f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E6:2B:C8:DC:B5:E5:BD:EF:63:E0:5F:51:7E:80:6C:53:D5:07:9A
            X509v3 Authority Key Identifier:
                keyid:04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:84:6a:5c:ec:e0:c0:b8:11:94:56:0e:8e:4a:93:ef:04:4b:
         64:cf:2b:8c:22:48:8c:f4:82:76:c3:d8:86:b3:30:b9:3d:13:
         a6:95:ba:50:eb:eb:5a:a6:15:d1:16:59:15:a2:a5:7e:e1:22:
         0f:36:ab:71:b9:f8:36:29:d6:06:93:2f:b7:32:86:96:e0:23:
         49:fc:34:4e:3c:1e:4f:d6:e5:06:cd:bf:a3:69:62:42:e3:a8:
         b4:46:4f:5e:b5:03:1f:3d:a9:c4:ff:f8:fe:2e:11:8b:fc:e3:
         ca:19:7c:a1:e3:c2:2c:6e:a6:67:98:ca:48:7e:af:cf:bc:83:
         e4:88:1c:03:1c:6a:29:b5:a8:25:22:16:b5:43:c1:ab:c6:fc:
         ea:44:64:14:a3:fe:b3:9a:b9:a8:c4:1b:bc:90:e9:48:82:f8:
         6c:0a:59:16:fc:cb:4b:5b:4d:fa:e9:45:22:3c:c4:52:13:ca:
         8a:90:cd:ed:e8:18:90:09:08:10:f0:71:2f:24:5d:e6:ae:46:
         08:9f:22:0c:c9:d9:e8:c4:69:fd:d5:76:30:ce:0c:f2:61:9c:
         76:30:a7:5f:14:83:2d:8d:9c:62:f1:4c:4f:d3:3b:67:69:94:
         36:fc:a3:e7:04:76:d2:77:3b:dc:57:e5:a9:d7:3b:1e:d1:fc:
         cf:77:be:7e
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNDFG
Qzg2N0YzOUM1MzY0NEQwQzVDNTA5OTRCNTUxMTFCRDc2Q0EzMB4XDTI1MTIxNTAx
NDQxNFoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoNURFNjJCQzhEQ0I1RTVC
REVGNjNFMDVGNTE3RTgwNkM1M0Q1MDc5QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ7fMhlZ86EA/d1HuICSclOi+DsOByeGgj0fZBeFo9txbmaiR3F9
ZUA26cwfEz92HI/56rERjHo7g6D7SKwliuEI5f4oH52SnqG6P7nBxQPJZbhC3nWN
f+zV4Zmr9PsON/N598asnkEtNeu+5+/LufayNbbcCiKUyu0/fD4tAPFdcr0u7CVS
RF9KBrMPnqlAw3u+4PBJ8GIigIBMdOVFH8Q313TNOdPYMFDasNRLic8kDUgp7B4U
5LA8kF5ek7azrM05yziC2m1RooIil1RsNvzV2f6yMnilBQ0OCNidCQy1evKfO6Vb
ZZO1jTDWsfG13kKUk4Xcky1XhrsJtoxVn1sCAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBRd5ivI3LXlve9j4F9RfoBsU9UHmjAfBgNVHSMEGDAWgBQEH8hn85xTZE0MXFCZ
S1URG9dsozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjc1L0JCX0laX09jVTJSTkRGeFFtVXRWRVJ2WGJLTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JCX0laX09jVTJSTkRGeFFtVXRWRVJ2
WGJLTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzUvQkJfSVpfT2NVMlJOREZ4UW1VdFZFUnZYYktNLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJqEalzs4MC4EZRWDo5Kk+8ES2TPK4wiSIz0gnbD2IazMLk9E6aVulDr61qm
FdEWWRWipX7hIg82q3G5+DYp1gaTL7cyhpbgI0n8NE48Hk/W5QbNv6NpYkLjqLRG
T161Ax89qcT/+P4uEYv848oZfKHjwixupmeYykh+r8+8g+SIHAMcaim1qCUiFrVD
wavG/OpEZBSj/rOauajEG7yQ6UiC+GwKWRb8y0tbTfrpRSI8xFITyoqQze3oGJAJ
CBDwcS8kXeauRgifIgzJ2ejEaf3VdjDODPJhnHYwp18Ugy2NnGLxTE/TO2dplDb8
o+cEdtJ3O9xX5anXOx7R/M93vn4=
-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:52 2025 by rpki-client