This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
File:                     U5vfL-GP84f9A4QsUIGhRe7rHPc.mft (raw, json)
Hash identifier:          AP6VrcyJ+la4TYxYK86qfnSQ4UXI4PxDABnu3qi7Bbg=
Subject key identifier:   23:06:FD:64:C5:01:0C:E0:33:EC:76:13:95:42:E8:EF:87:B2:6A:AD
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
Manifest number:          09DD
Signing time:             Mon 22 Dec 2025 07:41:36 +0000
Manifest this update:     Mon 22 Dec 2025 07:41:36 +0000
Manifest next update:     Tue 06 Jan 2026 07:41:36 +0000
Files and hashes:         1: 0dTu7i0QE1MmdwBmZwQht6Ip4vs.roa (hash: brxXRnxehaTeJPUvvAv2aJPjGavcr32h8KRoz9Bm7Gw=)
                          2: 25n0k1GgZh2ksd47dcWAD9oCe3I.roa (hash: S/TZPxJ+L9ZqihZWiA88yicTJh2PCbxBitBAPBC1HDo=)
                          3: 9SDBBu7dJRVHkMbct_RYsMuJOPw.roa (hash: ka7qAiKZpcHEflgg9CKwwESmSFjL4Ac1Ce7/F1rUGnM=)
                          4: BoEAeyRkcZS_QFStonRbyOsKqIY.roa (hash: HVh+hGl1fpkAWkSLA3yxCdikcc1cEJeXrKJCPMwE21Y=)
                          5: U5vfL-GP84f9A4QsUIGhRe7rHPc.crl (hash: PZOscS/lmZ6E0q3eSfMmRUNIRbDbBhe4pmNVUPHGIwk=)
                          6: Y3rUQEevYw_edDBgVpD-bjNVHF4.roa (hash: zV7J/nP2DCikY9zTp0upJvJK9SIVxMCBvvS9CEPrg8U=)
                          7: ab18vAWCCiRQ0bei0-s0GDomD_I.roa (hash: UhpA28rPMETDzIUktf97td9keRGqG7FXmLLuw7baDN8=)
                          8: apOFNH78vG0gTf900P5kAmHoNsk.roa (hash: dBqz9Fcc/gKitPEJCAcIIwof0yyBuO9DZ0/RSe/IhKY=)
                          9: hYnSGc5uaroYvyZp3D8eGeNI5Vg.roa (hash: Y9ECUrETmTg7gcgYSfQn7KuDPoVmdxNRsPZR5PqcwTE=)
                          10: pSkGf5BEtL5V4Zc_sxR_VGsx7yI.roa (hash: WKdnDBbjK5F/bCNADBD533qf+yFHSEXW+/DjO6cl6qQ=)
                          11: rLBquink9VsRT-uwa7QWwjPvPls.roa (hash: plzJf/NOqQwLejq3UcQGiy72dV58pWHI/vyDhiAWDSw=)
                          12: u8Es1L1Qe3MCtDUpGSxSq5PjAEw.roa (hash: 22pWaa0D+vQjqZPAYHk+noJy9/zeBdhmPZHD2YqmvCI=)
                          13: z4hzQp2TWWjkLDbdgpW07hfU5bM.roa (hash: kLX/wF6QM+YLFZDpFMn8J1n5NJEhuMSpTF6LqwFMUTw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 10:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Dec 15 01:36:48 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=2306FD64C5010CE033EC76139542E8EF87B26AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:9c:9b:7b:d4:00:2b:07:28:3d:78:8f:d4:
                    90:eb:4c:7e:a9:9d:48:33:6e:3f:73:8a:30:d8:eb:
                    45:23:88:af:47:9e:a1:fa:c8:03:74:ea:ac:bb:8c:
                    59:bc:9c:aa:b7:fb:65:d6:f4:81:ca:05:45:75:2b:
                    92:66:ba:4e:7d:61:a3:68:11:96:07:cb:38:9a:88:
                    8f:9b:d5:c6:90:78:a6:54:71:ad:9e:a2:70:3c:eb:
                    c7:a6:f9:41:a5:4c:98:44:1c:19:40:85:cd:8f:7d:
                    a9:74:8c:1e:c0:04:27:3f:f2:45:0c:d8:60:82:0f:
                    4f:f3:96:28:b8:ac:f6:dd:8e:7a:5e:bc:30:0c:12:
                    b1:b9:5c:2e:95:a9:68:ef:05:2c:17:92:8b:9f:9c:
                    98:80:b6:a6:f6:2b:26:a0:58:b4:da:c0:a8:9f:a0:
                    c3:6d:f2:07:6e:0d:1b:24:52:32:46:73:86:df:91:
                    25:0c:d1:b9:f0:8a:db:95:25:49:28:ee:f0:f3:1a:
                    4d:d1:29:1b:95:d0:7b:45:9c:b4:81:3a:99:d6:7b:
                    47:51:a1:2f:51:16:5f:2e:54:e0:97:f1:74:79:cb:
                    7e:d1:12:26:5b:01:2b:3b:d5:76:9c:5c:46:09:94:
                    88:7b:c7:1f:74:72:f8:6d:4e:31:56:e8:a7:5c:a7:
                    c4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:06:FD:64:C5:01:0C:E0:33:EC:76:13:95:42:E8:EF:87:B2:6A:AD
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:08:89:fb:fa:39:1e:99:21:fa:9f:58:4a:31:4e:8b:f0:be:
         b2:22:e3:6b:4d:f1:ec:26:9a:6c:7f:2e:8a:01:64:bb:ff:bd:
         bf:35:5a:7f:b1:04:f5:1a:f7:9b:27:7e:b5:58:a8:46:dd:18:
         06:eb:d6:bb:c1:18:bc:30:7f:36:b9:2e:db:e9:b2:70:c8:4e:
         2f:e8:8f:70:70:3e:9f:eb:82:80:58:20:93:f7:95:b2:a9:c5:
         55:c6:71:47:88:8e:c9:94:d9:0b:d4:3f:3e:95:5b:2b:90:56:
         06:65:8f:fb:0d:e9:25:76:03:bd:6a:c1:f2:14:c4:dc:d8:a6:
         ad:6b:fc:bb:a1:eb:b4:4e:ae:c6:f5:61:63:95:a5:3b:ec:0d:
         e6:b1:00:81:7e:28:de:60:62:0a:9f:54:9f:ed:ee:35:aa:3d:
         0d:dc:33:a0:18:4a:a8:01:4a:c3:5e:c2:b5:2a:3d:9e:84:de:
         e0:4d:36:84:9f:d3:a0:e9:3f:4c:b9:82:e8:68:96:4c:6b:01:
         9f:35:75:3d:3f:20:b4:36:b7:3c:70:0d:93:20:55:fb:7d:da:
         3b:6c:fb:9c:4f:91:ca:5f:74:8b:f8:22:bc:4b:10:14:49:64:
         a0:32:a3:ad:5f:8f:e5:eb:57:4e:73:96:b3:c9:63:7b:a8:ea:
         e0:e9:bd:b0
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC
REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTI1MTIxNTAx
MzY0OFoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMjMwNkZENjRDNTAxMENF
MDMzRUM3NjEzOTU0MkU4RUY4N0IyNkFBRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOjnnJt71AArByg9eI/UkOtMfqmdSDNuP3OKMNjrRSOIr0eeofrI
A3TqrLuMWbycqrf7Zdb0gcoFRXUrkma6Tn1ho2gRlgfLOJqIj5vVxpB4plRxrZ6i
cDzrx6b5QaVMmEQcGUCFzY99qXSMHsAEJz/yRQzYYIIPT/OWKLis9t2Oel68MAwS
sblcLpWpaO8FLBeSi5+cmIC2pvYrJqBYtNrAqJ+gw23yB24NGyRSMkZzht+RJQzR
ufCK25UlSSju8PMaTdEpG5XQe0WctIE6mdZ7R1GhL1EWXy5U4JfxdHnLftESJlsB
KzvVdpxcRgmUiHvHH3Ry+G1OMVbop1ynxKUCAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBQjBv1kxQEM4DPsdhOVQujvh7JqrTAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ
gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3
ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MDYvVTV2ZkwtR1A4NGY5QTRRc1VJR2hSZTdySFBjLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAIUIifv6OR6ZIfqfWEoxTovwvrIi42tN8ewmmmx/LooBZLv/vb81Wn+xBPUa
95snfrVYqEbdGAbr1rvBGLwwfza5LtvpsnDITi/oj3BwPp/rgoBYIJP3lbKpxVXG
cUeIjsmU2QvUPz6VWyuQVgZlj/sN6SV2A71qwfIUxNzYpq1r/Luh67ROrsb1YWOV
pTvsDeaxAIF+KN5gYgqfVJ/t7jWqPQ3cM6AYSqgBSsNewrUqPZ6E3uBNNoSf06Dp
P0y5guholkxrAZ81dT0/ILQ2tzxwDZMgVft92jts+5xPkcpfdIv4IrxLEBRJZKAy
o61fj+XrV05zlrPJY3uo6uDpvbA=
-----END CERTIFICATE-----
Generated at Mon Dec 22 12:36:40 2025 by rpki-client