This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
File:                     GbT9rpYvSWBYix0r5qHtQvE3CY4.mft (raw, json)
Hash identifier:          MjzX0zYv0xmZF650d2HAD3n1Nt8rU+mYV9293vjUaSU=
Subject key identifier:   D1:75:0D:07:33:AA:16:84:F4:CE:10:B9:17:B0:62:CC:41:00:D2:E9
Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
Certificate issuer:       /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Certificate serial:       64
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
Manifest number:          0D9A
Signing time:             Sat 22 Nov 2025 18:43:05 +0000
Manifest this update:     Sat 22 Nov 2025 18:43:05 +0000
Manifest next update:     Sun 07 Dec 2025 18:43:05 +0000
Files and hashes:         1: 5NtwJDKw7aN72kMkAGdME-Bkdyk.roa (hash: aih7U5A2ZYFvePC46lOc+jI2bSCubcVA4ehSKk8NqCc=)
                          2: GbT9rpYvSWBYix0r5qHtQvE3CY4.crl (hash: ujGowvXrq8kDqbo3GG0dsJ+vWXBQFL8aSqqQfYO4Rlo=)
                          3: l0PUhy1nNlcP8HolNU1vhMOFAlg.roa (hash: Nz9gT8j2GGsLLXJZaom54oiuFfawP/x6IgvrtmRs86g=)
                          4: mXzII3oOUttKbVZDlW8wqKiJtE4.roa (hash: +J8bYpFVueGlE80XHvoQ2fPKenZcmTxcvDkswv2KJDs=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 15:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
        Validity
            Not Before: Nov 15 01:31:52 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=D1750D0733AA1684F4CE10B917B062CC4100D2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:e5:21:f4:cd:32:dd:b0:8f:ac:e3:88:d9:
                    47:e2:4c:cf:5d:7a:74:c5:77:e8:83:20:c1:06:74:
                    2e:ae:69:58:ce:3c:56:74:11:ff:62:e6:71:25:55:
                    3e:05:e5:cf:47:56:3e:96:db:eb:6c:8a:f7:0c:2e:
                    80:41:ea:2a:72:97:19:e9:17:9c:31:6b:ea:9e:f0:
                    16:0a:88:ec:9d:84:22:a2:2f:a6:a1:04:dd:ad:e8:
                    a5:8d:a9:ea:49:f8:25:51:89:30:cd:51:e8:78:20:
                    fc:90:72:59:fd:a4:76:e2:26:38:50:fd:78:40:13:
                    c4:65:91:a8:d7:f8:8a:8c:b3:58:96:ee:ac:d9:d8:
                    8c:cf:6a:e3:8c:b6:50:a8:ec:d8:c3:15:05:7b:16:
                    45:ac:13:36:c7:f0:e5:af:3f:18:77:60:a9:2c:9c:
                    cd:19:a2:c2:92:c5:7c:92:b6:54:8a:98:b3:45:36:
                    f0:af:66:4c:e4:e1:9a:45:10:63:a8:60:1d:e1:63:
                    aa:9d:17:c8:4d:f3:8a:f6:0a:b5:d9:0b:e2:ee:ac:
                    f6:34:38:75:81:02:b3:7b:7a:5c:d5:21:3c:d7:5e:
                    fc:a8:4c:5c:5e:38:03:15:5a:d1:78:a5:47:aa:77:
                    38:b1:d3:37:24:cb:93:a3:fe:c5:96:ff:0b:fb:72:
                    0d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:75:0D:07:33:AA:16:84:F4:CE:10:B9:17:B0:62:CC:41:00:D2:E9
            X509v3 Authority Key Identifier:
                keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:29:aa:7a:e5:09:92:94:3d:9b:fb:fc:67:97:97:b4:4a:93:
         57:b1:2b:4b:2e:39:f5:67:62:85:cb:e8:e0:e9:13:74:e6:10:
         ae:52:04:b3:88:0f:60:91:52:75:4b:e6:b9:8f:8d:b7:38:0e:
         ae:65:28:35:fe:81:23:53:b8:b2:4b:31:ce:94:80:1c:d9:d7:
         44:12:f1:0a:bd:91:bb:02:2a:ad:5c:ff:25:0f:58:6b:97:cd:
         d1:90:ad:3e:dd:82:dc:ca:84:fc:24:f2:6b:d6:5f:65:a9:f2:
         70:29:e4:ee:4a:ed:64:60:96:ef:77:5d:ad:b4:20:15:38:f0:
         77:5e:d6:da:a2:2a:e3:4b:a7:dd:ef:8b:ea:2e:37:30:99:a3:
         bf:28:bd:8d:69:10:c2:6b:d5:d0:0b:54:8c:86:bc:f6:35:f6:
         ef:09:57:d8:e2:08:b6:09:00:25:43:96:c6:15:82:36:59:ec:
         f8:3b:33:76:4d:fa:0a:bf:7d:b6:fa:9b:07:73:89:9b:02:ae:
         f2:e1:02:77:26:94:e1:7c:65:35:69:9b:83:3f:9b:b4:ff:9c:
         a8:0e:ee:95:85:55:7c:76:33:45:bf:77:1e:cf:1c:90:36:90:
         1b:39:4b:f2:a3:02:ac:f0:bc:51:18:1e:92:8d:50:7c:a6:ae:
         ae:7f:8f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:52:18 2025 by rpki-client