This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
File:                     jWKobqs5_EDjGb5zRvIsyPWxkaM.mft (raw, json)
Hash identifier:          IikGJdhxfUPvURAGD38z/z1Et7xdXJJqpkq1UUW7xIY=
Subject key identifier:   77:ED:19:08:56:43:BC:33:92:38:51:92:1C:B2:E6:E9:D8:55:13:F5
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       53
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
Manifest number:          0948
Signing time:             Sat 22 Nov 2025 20:10:27 +0000
Manifest this update:     Sat 22 Nov 2025 20:10:27 +0000
Manifest next update:     Sun 07 Dec 2025 20:10:27 +0000
Files and hashes:         1: 1KfvnydsSvOlr7qfBj4j75L_1LQ.roa (hash: l0KTqYxSfgyJGfD2A2Fd+AmFt9lWhpaBDtN98RC0UWw=)
                          2: 3Pgp2zzQR8bUcDiVNxKJEnQhwLc.roa (hash: arpHEuEVYFWaQtY+CcX1KreGenY7lsoPaUlhglma14U=)
                          3: 8TffEkZIkZ7Z9UODyo4t0iG6gfU.roa (hash: 5OSKvLSPBkF2FAGv/TwghXiU2hQuQtG4s3ihsX2EMcw=)
                          4: BpG8cWDUTWRwOHG0MLAYxfQBm2U.roa (hash: vF+r+ZhU9oQCiHDo9QBc/wEQgafA/TV+7EWtiOGGepM=)
                          5: FBKrP688X-FSuOuNkfn-7e_LUKs.roa (hash: aiSnIz4+f1fVe2bGOfIvbK2sUVVhBVq2yTgprBZ3Lok=)
                          6: MOWibSwiVu15SCZE1Q4KFkwRo8g.roa (hash: iSB1EzNocuGaL6E4WACcJdXNh0IGpdHVrqur7blat0E=)
                          7: WTtFluepqLvn_68D2CxmsLPUbjc.roa (hash: AgZvTk2hkz5lD69i2WzD1L1yDqvp8qkmkprqMy7ohbI=)
                          8: YltXz-V1rThFJdSAkDLbhW80gLg.roa (hash: JIGqEoWJsnZ7PlsDTs1cWMt+vTzHVzaZsOixMk2E5jM=)
                          9: jWKobqs5_EDjGb5zRvIsyPWxkaM.crl (hash: sF2Za7I3zvsimcVFzadev9JHKcarORQpmden8Rm2nvo=)
                          10: kjxLx5ScVPg60H2w7X9zexkfSb4.roa (hash: eZWaorpqYVGm+DzgEocEaKdzI36lmuDG1q2WJoPkUuQ=)
                          11: mktAVX4l852y9Iit0NJ9UqmSSi0.roa (hash: uwB0R6axeViMhqJtD+A20hw5OlIuc6cV359VTw7yhg8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Nov 15 01:41:04 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=77ED19085643BC33923851921CB2E6E9D85513F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:27:29:5f:50:48:60:fd:e0:0e:60:ef:76:d2:
                    43:0a:ca:38:3e:40:c3:ab:d3:f3:1f:17:af:bc:21:
                    ce:9f:5a:2c:2c:f9:c2:1c:5e:d1:0f:15:2f:f2:42:
                    a9:41:81:95:88:2c:a0:32:22:1a:51:b6:ab:05:de:
                    dd:51:18:58:a5:4b:8a:48:5e:2e:fb:7e:43:e2:d3:
                    7f:92:4f:bd:7d:75:cc:77:e6:09:a5:4c:24:67:af:
                    5b:4a:8b:fb:8b:0f:74:49:4f:9d:fe:f9:e0:33:67:
                    b0:e5:bb:dc:ed:3e:b6:ef:50:80:bb:3d:c9:6a:64:
                    6e:41:08:d9:89:88:93:de:bc:67:43:83:f8:4b:1b:
                    ec:50:ec:e9:45:0c:bf:2a:13:8d:db:9a:21:bd:0e:
                    49:b2:a1:34:bd:91:b3:25:05:c3:05:35:11:21:8d:
                    78:f1:4b:e4:0a:9b:8f:e2:fb:45:1d:70:94:43:82:
                    09:46:15:69:e3:3e:e7:b0:13:9d:6f:0e:72:3f:b4:
                    7f:60:34:62:e0:78:74:d4:ef:3c:c0:3f:a7:83:87:
                    70:19:11:59:d9:5c:a1:4f:5b:8e:97:30:cf:73:c7:
                    89:c2:2c:e5:2a:8f:e9:c2:32:37:66:45:c4:c9:31:
                    33:5c:fc:0d:76:8c:51:d1:7d:17:47:da:bb:9b:7f:
                    37:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:ED:19:08:56:43:BC:33:92:38:51:92:1C:B2:E6:E9:D8:55:13:F5
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6f:5f:14:7f:7d:84:6e:a3:ae:70:ce:0a:26:6c:e7:4d:63:
         ef:9e:15:9a:06:04:01:e7:ed:04:fc:7b:24:3b:ea:16:30:f0:
         32:8c:f1:22:72:d8:91:39:88:28:15:0b:39:05:3d:4b:03:29:
         05:46:95:10:ca:2f:c7:35:30:f2:57:7e:43:fb:c6:9f:ee:be:
         6d:08:c1:01:d4:50:94:6d:89:cd:b9:b0:38:f8:e0:75:cb:e4:
         c1:02:a8:98:f5:6a:0c:54:a2:c0:94:d1:e2:f6:b8:e3:d1:e7:
         7c:e3:5e:8f:63:30:7c:37:56:32:3b:47:3d:7b:86:ed:cb:fd:
         83:0d:0b:b5:9a:98:05:65:6e:56:f9:1c:ae:b3:20:b4:cd:74:
         7a:7f:00:23:f7:14:52:56:d1:d9:d9:86:fb:e4:f3:07:48:b4:
         81:d8:69:92:c9:88:0a:11:c0:7a:b5:97:33:48:0f:24:20:43:
         62:8a:bf:c8:22:cd:04:41:7e:a1:19:12:6f:d3:e4:78:6e:0b:
         28:27:60:b9:e9:57:0f:ed:95:43:7f:23:b9:13:0c:c5:c5:67:
         09:da:a4:9a:f7:f7:38:bd:ba:ae:73:a0:ec:68:72:dc:4f:18:
         22:c3:b3:c0:00:ba:66:f6:7f:f3:e5:d4:32:0b:e8:a9:a4:21:
         0b:47:48:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:11 2025 by rpki-client