This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
File:                     heXxjZYxwlh7CU54zdThuGUPTLk.mft (raw, json)
Hash identifier:          pnw93xUFCkp36htplkURpFO5MpUCkz7fDveaXIOQvxk=
Subject key identifier:   35:FC:D8:FE:7F:83:87:94:A6:64:EF:FC:4C:2F:EA:9A:70:65:39:30
Authority key identifier: 85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9
Certificate issuer:       /CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
Certificate serial:       13
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
Manifest number:          05BC
Signing time:             Mon 22 Dec 2025 11:45:44 +0000
Manifest this update:     Mon 22 Dec 2025 11:45:44 +0000
Manifest next update:     Tue 06 Jan 2026 11:45:44 +0000
Files and hashes:         1: AdMaPSay0Od6CcGQlsjG4EWxjjE.roa (hash: 1xmO3h8be8qkvMR/p7ooCKnp8YWzdbU6YzCVP5Wn9PU=)
                          2: Cgr4vrEXLst_PC27lRgEE70gIf8.roa (hash: 2dBNXR/uqgzbtVj22EcWAf66T634oTntixsOJOO/Q68=)
                          3: QMzgb68WkMO5sso7QFJH-HR4KZc.roa (hash: SbHkB9DsLhF5GZQRXJaTixDO3UC8Tx/yGn+BoY93eEc=)
                          4: Qhu-g4bhbS7g2KE8qMH-n_iKn_s.roa (hash: Lvfbo+DDTDxLuvFSKmLk9/dyFX6mGFcoQd6m9Dr00FA=)
                          5: heXxjZYxwlh7CU54zdThuGUPTLk.crl (hash: iUJJTjlNypHIkzOC/OjRLEOBIQKHGaitdlcV5GErIXk=)
                          6: jPunJw3-EXwnD4HV8XvCVsJGLDs.roa (hash: wRy0qJsUy2sPVetIywT0v4LFP3t24hyicVNpMv9CuBc=)
                          7: yBe6Q0a1e8U2u5vDAidXhvuJxNQ.roa (hash: xbPHknJgKfhnqgPRFUhrwURUsCXzKvDNaiWfOj6teD8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 11:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
        Validity
            Not Before: Dec 15 01:44:27 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=35FCD8FE7F838794A664EFFC4C2FEA9A70653930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:29:00:53:b7:7c:96:33:98:60:fd:8d:86:
                    55:c7:c4:2e:07:bb:be:b4:3a:dd:85:89:bf:8e:b3:
                    49:51:9a:4b:98:1f:84:22:42:26:1c:1a:8e:1d:ba:
                    34:8b:9e:04:ad:8f:b3:cc:48:eb:48:1d:0a:c1:e6:
                    9a:be:8c:5c:66:b1:e9:99:78:50:2e:f4:c2:85:fa:
                    a0:ea:25:87:0c:fc:f3:7f:6c:5b:93:95:0d:f7:88:
                    a5:44:8f:35:c3:17:2d:b7:26:9c:d3:fd:0f:9a:20:
                    05:67:22:41:67:f4:2b:27:6b:9a:e8:fa:1d:29:9d:
                    7a:25:f5:cf:3c:25:ad:b8:c1:d0:bf:f9:ea:9b:4c:
                    59:1c:70:10:f4:83:64:18:62:27:4a:91:51:a6:8a:
                    4e:c6:f0:af:34:23:de:05:a4:d0:c0:9d:65:22:b1:
                    bb:7a:06:70:ba:f4:ec:d2:0a:e8:69:ae:96:7e:1e:
                    5e:e9:b5:28:7e:3f:57:88:fc:96:e3:aa:9e:e2:37:
                    ba:6b:52:53:ef:b2:78:4b:b1:bf:2f:57:71:14:80:
                    3b:cb:36:02:e1:b3:59:fc:cb:85:ff:03:49:d1:d9:
                    e1:65:87:c7:a4:78:4f:52:ed:93:20:ed:6a:a9:07:
                    df:bf:83:0e:b9:84:21:76:e4:c7:bb:4c:f2:07:53:
                    f7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FC:D8:FE:7F:83:87:94:A6:64:EF:FC:4C:2F:EA:9A:70:65:39:30
            X509v3 Authority Key Identifier:
                keyid:85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:eb:72:c5:17:d6:d0:ae:a2:96:c5:cb:c7:8d:9b:8e:26:fa:
         57:1e:26:14:e4:8c:06:46:e9:6b:2d:5b:a8:34:bb:0a:86:50:
         09:5a:e1:76:76:63:38:cc:1d:f4:ef:7e:d2:38:f9:77:a0:ad:
         9e:b7:00:00:6d:63:d8:a9:8e:d6:5c:a6:65:a3:b8:cc:ff:5a:
         0f:f3:db:76:c5:c7:36:3d:67:ba:d3:1f:48:00:8a:47:65:28:
         08:c1:01:b6:17:1a:ee:5d:c1:2a:97:50:b0:54:ba:89:13:c1:
         7a:6f:ce:51:d4:e8:24:68:58:e2:7c:df:3b:f4:b4:02:1c:bf:
         39:5f:90:62:cf:fc:81:ce:3c:9c:38:9d:1d:33:43:9a:07:f7:
         5b:a7:e8:f3:2d:e9:3d:a2:d1:c4:4d:f4:eb:df:62:96:8e:c0:
         b0:1b:80:1b:ff:2c:80:ff:cd:9a:bb:19:a7:9c:53:f6:c5:c0:
         38:44:7b:63:cd:12:6c:5f:a4:25:91:d9:94:5f:7a:42:9f:5c:
         23:e6:a1:7a:44:97:9a:6d:a8:21:4c:ec:37:b7:b2:d1:fa:4d:
         9e:af:6b:34:b5:13:08:68:71:a3:a0:24:98:0d:e0:73:39:64:
         d1:11:17:49:2f:7a:b2:b1:ba:2d:c0:7a:1f:47:7f:41:5a:be:
         03:6d:0a:b9
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUU1
RjE4RDk2MzFDMjU4N0IwOTRFNzhDREQ0RTFCODY1MEY0Q0I5MB4XDTI1MTIxNTAx
NDQyN1oXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMzVGQ0Q4RkU3RjgzODc5
NEE2NjRFRkZDNEMyRkVBOUE3MDY1MzkzMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALoGKQBTt3yWM5hg/Y2GVcfELge7vrQ63YWJv46zSVGaS5gfhCJC
Jhwajh26NIueBK2Ps8xI60gdCsHmmr6MXGax6Zl4UC70woX6oOolhwz8839sW5OV
DfeIpUSPNcMXLbcmnNP9D5ogBWciQWf0Kydrmuj6HSmdeiX1zzwlrbjB0L/56ptM
WRxwEPSDZBhiJ0qRUaaKTsbwrzQj3gWk0MCdZSKxu3oGcLr07NIK6Gmuln4eXum1
KH4/V4j8luOqnuI3umtSU++yeEuxvy9XcRSAO8s2AuGzWfzLhf8DSdHZ4WWHx6R4
T1LtkyDtaqkH37+DDrmEIXbkx7tM8gdT9x8CAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBQ1/Nj+f4OHlKZk7/xML+qacGU5MDAfBgNVHSMEGDAWgBSF5fGNljHCWHsJTnjN
1OG4ZQ9MuTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjc3L2hlWHhqWll4d2xoN0NVNTR6ZFRodUdVUFRMay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hlWHhqWll4d2xoN0NVNTR6ZFRodUdV
UFRMay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzcvaGVYeGpaWXh3bGg3Q1U1NHpkVGh1R1VQVExrLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHfrcsUX1tCuopbFy8eNm44m+lceJhTkjAZG6WstW6g0uwqGUAla4XZ2YzjM
HfTvftI4+XegrZ63AABtY9ipjtZcpmWjuMz/Wg/z23bFxzY9Z7rTH0gAikdlKAjB
AbYXGu5dwSqXULBUuokTwXpvzlHU6CRoWOJ83zv0tAIcvzlfkGLP/IHOPJw4nR0z
Q5oH91un6PMt6T2i0cRN9OvfYpaOwLAbgBv/LID/zZq7GaecU/bFwDhEe2PNEmxf
pCWR2ZRfekKfXCPmoXpEl5ptqCFM7De3stH6TZ6vazS1EwhocaOgJJgN4HM5ZNER
F0kverKxui3Aeh9Hf0FavgNtCrk=
-----END CERTIFICATE-----
Generated at Mon Dec 22 12:56:38 2025 by rpki-client