This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
File:                     EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft (raw, json)
Hash identifier:          1oUsGgShbdz8aWvqNmTOJviBqn7w8l1i9PDjDV4IrjU=
Subject key identifier:   A2:DB:FF:23:8A:85:9E:EF:BB:4D:B7:93:FD:7F:3A:61:A1:2B:2C:E6
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
Manifest number:          1B73
Signing time:             Sat 22 Nov 2025 19:03:28 +0000
Manifest this update:     Sat 22 Nov 2025 19:03:28 +0000
Manifest next update:     Sun 07 Dec 2025 19:03:28 +0000
Files and hashes:         1: 0PAFmAhpbvgLdbmDJ2k--iIBYHk.roa (hash: TBfXVVvl+I0JOMNOaqJ2W8PgyyEjUUuyDsyxlWdqHQ8=)
                          2: 0srX8y3Jti07Hnnicc6k3BJYxP8.roa (hash: 61jZ1lE6xB9tfCWmSxBSU9uF8bAHLEcOth1NkEiAkMc=)
                          3: 9xscJtcTW-WeHnNRVY5DMCVbbPE.roa (hash: zksblTLVuKotYLK7oArWGaAO8yzsfbDfhbrvdg5mY84=)
                          4: AQTDxTcTCI45hOxBEWNl9A73EE4.roa (hash: VDyCiePXtRnfNcZR9iXhw09mC6UtKgholnIkcdgrcWk=)
                          5: EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl (hash: 1VgO1wua3eqfrveTU+7KP4Mrfq6vb5aL7t72XSv2M2k=)
                          6: J5Rz8oXbQEJk8gssAfFbzH27kWE.roa (hash: /NvhgjAlB+2N48IuXxAhT1RxoomG+cancg5GOevnSpk=)
                          7: Muz4veYwYMXngxvdeFbGQkfqNzU.roa (hash: 9ktCjshvkIjF784V91Opr/PUKTq9lV72q0Qty0VQTlM=)
                          8: NAMn1afCARECE5vUVMtAYD75tTI.roa (hash: Rx5R0Q3ISExp8EqhSw0eelilGT5MkxakecoZB8o5nro=)
                          9: aCKUeZU3WSLhACxmTMwCPJCZLUw.roa (hash: gTGxvDID6/8y43sm1M1aG0OHolLQnUlbjN1MRV66t2Y=)
                          10: b5b-aW5uwh5i28IiNA7cctuW7DE.roa (hash: HWEP2PDQOID+gOurylLkMhJOtRgCxlzrSon9J10JluM=)
                          11: dlqlP92ne5iXEr_Jps1uHbvFaho.roa (hash: f3GSmSdhBD6ujxXoBZu17In7bwsMfVTCYKMhuNl4Ofs=)
                          12: iu1Fhx_wusf6qNPH07bxdsJ9tjs.roa (hash: 8CjfmAubG1rN3/yYGa9jSzoh1YjrWwT5yuraFxJJrRQ=)
                          13: rwNTvoN2RBjF4jD-4xLiPW6WfmE.roa (hash: Gs930vS1gAJpIdv986KapZr9qmnD8HKt/jvA2d7np90=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Nov 15 01:38:17 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=A2DBFF238A859EEFBB4DB793FD7F3A61A12B2CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:6c:d2:72:c9:1f:db:e3:b2:49:f6:c7:c7:
                    5c:ec:bf:ad:a9:5a:2c:07:07:6e:da:77:23:a3:26:
                    90:c0:eb:93:89:97:11:10:e8:dc:23:34:fa:73:14:
                    12:bb:f5:16:71:5b:30:6a:77:f7:78:37:98:8f:c4:
                    63:1a:60:d2:d7:26:59:58:e2:65:58:14:44:77:00:
                    ec:0e:21:92:0d:08:88:a4:82:ec:d1:9f:81:63:8b:
                    c6:c4:64:d2:9c:ab:05:6a:1c:1a:d2:2f:c0:70:14:
                    8f:58:09:6f:0d:9f:c1:d7:3e:c6:36:8a:5c:24:0d:
                    a7:4a:f4:fe:95:75:d7:6d:47:e0:14:19:b1:2e:17:
                    b3:09:88:04:18:4c:17:c0:d5:00:c5:ab:29:39:2a:
                    b2:17:87:43:bd:58:13:04:fd:88:18:8c:42:9f:2a:
                    40:55:7b:38:4c:25:7d:e7:f7:54:a0:16:ae:d9:2f:
                    55:10:b9:eb:7a:1a:a2:b6:80:17:5d:a9:26:96:e1:
                    49:7a:7f:ab:6b:84:9f:58:0f:82:bf:7c:e9:48:81:
                    d5:74:34:fb:3a:0e:48:7c:88:1b:d6:ae:f4:05:0e:
                    fc:ac:6d:13:39:0f:f5:d4:51:7e:26:19:2f:35:64:
                    51:2d:2a:34:cc:fa:36:81:e0:fc:a7:1d:24:57:ed:
                    13:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DB:FF:23:8A:85:9E:EF:BB:4D:B7:93:FD:7F:3A:61:A1:2B:2C:E6
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:2f:68:58:80:85:94:3e:e0:31:75:21:d1:eb:a5:ad:61:78:
         1f:da:1d:3c:c2:ff:a4:9c:62:61:7a:8c:2b:eb:53:a9:5a:14:
         68:6f:b9:6c:11:d9:af:97:7b:aa:83:63:43:97:5c:f8:ae:5e:
         f9:f4:db:a1:54:b2:8d:1e:b0:09:ae:8e:21:5c:10:2f:20:44:
         9d:06:9a:ec:5b:df:a3:93:b8:4a:11:64:dd:ec:a2:4f:fd:c6:
         a2:8f:e4:55:c1:29:dd:d1:0a:da:d2:ae:5f:ef:18:5f:d7:40:
         55:77:f9:f8:77:89:e8:04:99:46:60:7e:ba:8d:82:fa:1d:94:
         52:b4:c3:b8:a5:0b:cc:2b:c0:73:ca:1a:6a:dd:8c:db:34:1f:
         70:cb:e6:a4:64:ec:16:a1:44:0c:85:bb:dc:e2:16:47:1e:c9:
         a0:b9:f2:0c:1c:49:e8:df:05:86:00:3a:6d:b8:cb:e8:43:72:
         3f:11:4b:1e:a6:94:59:57:35:e1:a2:e9:a6:1e:a6:67:0a:36:
         f7:93:ca:a4:31:d7:4c:2e:38:8f:ee:dd:6b:4e:65:a6:8d:fc:
         c0:2a:25:e6:0f:35:6c:0f:d2:ba:c9:c5:08:b5:b3:b9:8b:d4:
         b9:eb:5d:b1:b8:3c:bd:b6:fc:43:ec:1f:89:6f:8b:2a:99:5c:
         c8:e8:59:e4
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgICANIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTAx
QTkwRTRFNzRDNDAzQUJFOEU1RTBBMUZFOEU0MTU3QUJEMkFFNzAeFw0yNTExMTUw
MTM4MTdaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEyREJGRjIzOEE4NTlF
RUZCQjREQjc5M0ZEN0YzQTYxQTEyQjJDRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHfmzScskf2+OySfbHx1zsv62pWiwHB27adyOjJpDA65OJlxEQ
6NwjNPpzFBK79RZxWzBqd/d4N5iPxGMaYNLXJllY4mVYFER3AOwOIZINCIikguzR
n4Fji8bEZNKcqwVqHBrSL8BwFI9YCW8Nn8HXPsY2ilwkDadK9P6VdddtR+AUGbEu
F7MJiAQYTBfA1QDFqyk5KrIXh0O9WBME/YgYjEKfKkBVezhMJX3n91SgFq7ZL1UQ
uet6GqK2gBddqSaW4Ul6f6trhJ9YD4K/fOlIgdV0NPs6Dkh8iBvWrvQFDvysbRM5
D/XUUX4mGS81ZFEtKjTM+jaB4PynHSRX7RMbAgMBAAGjggJBMIICPTAdBgNVHQ4E
FgQUotv/I4qFnu+7TbeT/X86YaErLOYwHwYDVR0jBBgwFoAUEBqQ5OdMQDq+jl4K
H+jkFXq9KucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMTczL0VCcVE1T2RNUURxLWpsNEtILWprRlhxOUt1Yy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VCcVE1T2RNUURxLWpsNEtILWpr
RlhxOUt1Yy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDE3My9FQnFRNU9kTVFEcS1qbDRLSC1qa0ZYcTlLdWMu
bWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAXS9oWICFlD7gMXUh0eulrWF4H9odPML/pJxiYXqMK+tTqVoUaG+5
bBHZr5d7qoNjQ5dc+K5e+fTboVSyjR6wCa6OIVwQLyBEnQaa7Fvfo5O4ShFk3eyi
T/3Goo/kVcEp3dEK2tKuX+8YX9dAVXf5+HeJ6ASZRmB+uo2C+h2UUrTDuKULzCvA
c8oaat2M2zQfcMvmpGTsFqFEDIW73OIWRx7JoLnyDBxJ6N8FhgA6bbjL6ENyPxFL
HqaUWVc14aLpph6mZwo295PKpDHXTC44j+7da05lpo38wCol5g81bA/SusnFCLWz
uYvUuetdsbg8vbb8Q+wfiW+LKplcyOhZ5A==
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:17 2025 by rpki-client