This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
File:                     Gy5-YtqPEvO7M-C1484AL9oozyU.mft (raw, json)
Hash identifier:          l6M2dgNs01MtjFT0Hn1MyowxNuZQisyY1tak3OiN+yk=
Subject key identifier:   DE:0B:E4:24:97:41:26:03:10:D5:0A:C9:89:FA:E4:A9:FE:D7:AD:2C
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Certificate issuer:       /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial:       27
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
Manifest number:          09AB
Signing time:             Sat 20 Dec 2025 19:20:59 +0000
Manifest this update:     Sat 20 Dec 2025 19:20:59 +0000
Manifest next update:     Sun 04 Jan 2026 19:20:59 +0000
Files and hashes:         1: 1Q9i1OL36PXw7qH7R5GaTK2DedM.roa (hash: 98RVjXFbkZwTJHzJB0qABv8yyc4uuCNXHFAJ7JzK2eo=)
                          2: 3hq5zFUOxg4X6sAaJLEZypYtOkE.roa (hash: sTjmQ67cYsUyABphXXrKUJnO9P22DnApz5MRSJxKS2M=)
                          3: Gy5-YtqPEvO7M-C1484AL9oozyU.crl (hash: agFN7XtHNX+xnHf/7XXxKNbiNXqLWWes+S6Bqi62diw=)
                          4: MBJ2k7vaS4emdBhuKKBvyBUWx50.roa (hash: 53FuTSKp9z4+l94TtFnmKIlUP7Eh2kE6pJq87lQfigU=)
                          5: oD0quaPKmGzxZJuofG-ek3b9Fpo.roa (hash: WRLFSxy2UW7yxMiy4FFhJwDBDR9echIlcpxGj3lpuOY=)
                          6: seLz1Smiuc7htuRXTlD-4GL1Rks.roa (hash: gsowdarQOuSnE8Z823DxzjBRBi3vMi+CzNkP2bvEGsw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
        Validity
            Not Before: Dec 15 01:37:53 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=DE0BE4249741260310D50AC989FAE4A9FED7AD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fb:19:42:3f:26:6c:fe:85:d4:e4:e3:b7:33:
                    ba:63:49:7a:ce:04:ac:03:0d:39:b4:98:da:67:42:
                    1d:04:24:24:99:e9:27:bc:65:64:3d:dc:39:69:c0:
                    c3:72:5a:df:89:a5:90:6f:63:60:3a:75:10:7f:d5:
                    bf:03:0c:1b:c2:f9:cd:83:e5:54:f4:51:de:18:e9:
                    30:55:a7:83:cd:27:27:a8:8b:39:49:70:c5:62:b6:
                    de:aa:84:45:f6:ea:2a:15:a6:a3:4e:19:35:be:be:
                    09:c9:50:4a:4c:ab:93:ee:e8:00:cb:fb:dc:01:e4:
                    43:70:ab:97:b6:9c:ef:dc:bf:81:3e:57:40:58:31:
                    f4:7e:6f:9f:f1:29:4a:44:66:5b:4a:fd:b3:dd:a3:
                    c7:94:78:81:28:53:a4:03:fa:c7:51:5d:7d:fd:81:
                    ed:49:b7:cb:d1:c1:f6:14:f8:b8:da:b7:16:1b:1b:
                    97:11:68:05:7c:60:29:9c:0a:db:78:04:96:42:cd:
                    a8:ed:e7:35:18:72:80:b3:ed:56:30:06:f9:61:47:
                    15:43:50:a1:f2:57:9a:a4:be:9c:c8:e6:40:36:e7:
                    58:fd:3a:8a:32:b5:e8:42:cd:2a:58:a2:a8:71:3c:
                    2a:7d:9c:46:84:8c:84:a8:a3:c8:e6:e3:25:a2:60:
                    61:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0B:E4:24:97:41:26:03:10:D5:0A:C9:89:FA:E4:A9:FE:D7:AD:2C
            X509v3 Authority Key Identifier:
                keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:8b:78:0e:64:6a:dd:9c:51:a4:84:09:b4:62:ce:b5:21:37:
         3f:26:fa:e5:37:77:9e:29:bd:e8:c7:6c:77:33:dd:94:e8:03:
         9a:1d:3a:90:6c:f5:94:98:b2:da:74:34:79:93:bb:f3:98:df:
         45:bc:1a:41:ca:a8:b7:67:83:78:21:6c:68:f5:9c:1b:48:02:
         92:62:7b:6b:04:6d:9b:39:64:25:eb:84:2c:37:66:6a:eb:36:
         63:57:69:aa:66:bd:92:e9:4f:67:71:01:a4:57:b7:57:90:21:
         90:18:fd:90:9e:d7:4f:61:99:a3:7c:0d:64:01:b1:78:fc:d8:
         87:57:db:88:8c:a0:51:ad:8a:40:bf:1f:eb:30:fe:e3:57:63:
         92:4e:12:97:f9:d9:c4:bb:76:6c:06:3e:de:7e:d8:0c:6b:2f:
         f2:cc:55:8a:5c:61:d9:ee:ad:16:e3:9a:ae:75:4b:ac:90:dc:
         bf:32:43:ac:69:c2:a2:29:1c:fb:37:aa:b7:f2:31:6d:fd:69:
         02:5f:b4:47:57:0a:ec:b8:f6:0e:8d:8f:8b:cd:4b:c8:dd:44:
         f4:ff:0b:24:b7:f1:10:79:02:d7:12:08:5b:cd:a1:19:85:7e:
         78:b7:4a:4a:a5:b8:7c:67:7d:69:d6:56:89:b7:e7:1f:54:0f:
         d7:4a:54:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:20:22 2025 by rpki-client