This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
File:                     7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft (raw, json)
Hash identifier:          WFSt6N4ns+x1di1H8ikNIhLZBaOQwKG8Qr3VIVvU4mo=
Subject key identifier:   2A:59:33:03:03:DE:16:FE:65:23:A5:26:B0:3C:8F:09:15:B6:97:BC
Authority key identifier: EE:74:9A:ED:B2:74:53:82:7D:BA:83:25:F4:29:84:FA:79:C3:CF:76
Certificate issuer:       /CN=EE749AEDB27453827DBA8325F42984FA79C3CF76
Certificate serial:       2B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
Manifest number:          0AA3
Signing time:             Mon 26 Jan 2026 09:01:49 +0000
Manifest this update:     Mon 26 Jan 2026 09:01:49 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:49 +0000
Files and hashes:         1: 7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl (hash: mR0DeVtfiNLQA0O6SzNCyfrn61xcduDT9NNBQJ911kQ=)
                          2: JDgeaMKQJV5QrEw8FvQvdbx-B7M.roa (hash: Ebn3c/G70pJ3WMwcFxysJ9IT5J1p47JGyO+jwH3KcB8=)
                          3: qFoIeIMO2M3KuT6GqHoeMJugV1o.roa (hash: 1hc4DJuncS1V9gKuN31LUn202vFgw+nBoaEMcwJI1Os=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE749AEDB27453827DBA8325F42984FA79C3CF76
        Validity
            Not Before: Jan 15 01:36:53 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=2A59330303DE16FE6523A526B03C8F0915B697BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:4a:5a:51:9c:d6:a4:8d:a4:75:f6:a1:38:
                    e0:b6:0e:0a:ce:9a:87:aa:b6:d1:65:d7:1c:71:da:
                    bf:f7:68:15:db:43:35:17:2c:0d:ae:06:97:7c:e1:
                    2f:6b:9f:c0:20:d5:2c:4e:5f:51:e6:f1:d2:93:aa:
                    6a:6e:f1:95:2f:4b:e3:7b:ee:7d:73:d2:55:86:39:
                    c0:c5:a7:91:21:aa:a7:c2:bc:05:27:43:d5:31:99:
                    52:47:21:34:ec:ea:d1:83:7b:55:18:eb:36:f6:d0:
                    fb:55:0c:ff:d4:f9:e2:ac:9b:2f:08:ee:f9:90:db:
                    f3:c9:d5:e3:9e:f7:3d:c5:b9:c4:0a:d3:18:fb:1d:
                    52:fe:59:6d:39:42:e9:33:9a:ce:7c:59:bc:1a:f5:
                    a5:a8:17:7a:5c:0f:49:fe:0f:61:33:73:34:85:9e:
                    c7:1b:40:d7:de:30:31:e1:32:17:02:a0:31:d4:ba:
                    ff:2c:84:1e:15:58:e5:23:54:27:b9:b0:61:a1:85:
                    55:f5:36:87:61:66:1e:5c:1c:72:f0:36:a3:cf:cf:
                    b4:5b:ec:1e:b2:00:bf:ef:a5:16:1b:a8:39:4e:0f:
                    21:c5:c5:8c:74:51:0c:b6:3d:31:c0:69:96:17:ef:
                    2e:50:43:d3:11:2f:8c:ef:d1:38:54:e8:41:87:97:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:59:33:03:03:DE:16:FE:65:23:A5:26:B0:3C:8F:09:15:B6:97:BC
            X509v3 Authority Key Identifier:
                keyid:EE:74:9A:ED:B2:74:53:82:7D:BA:83:25:F4:29:84:FA:79:C3:CF:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f5:17:9c:e9:13:03:c4:ad:a3:9e:0a:29:ac:47:ba:4c:87:
         ba:db:b0:a9:f9:fa:ec:43:77:71:d9:1d:e4:22:f5:4c:8c:85:
         a3:34:0e:4f:53:12:e0:d4:dc:3e:15:6f:f9:01:51:09:d4:d5:
         b0:ad:77:cb:4b:10:1a:c6:7d:c4:a2:85:8b:93:f1:46:f3:05:
         1d:54:a5:9d:67:da:a9:96:73:98:f5:fb:e7:9a:d6:ab:83:25:
         05:73:3e:a0:97:c9:36:43:be:c2:79:cd:14:2f:64:9e:fd:e2:
         e3:21:27:ac:91:f9:04:e2:f5:e1:76:71:51:b6:6f:57:e4:d3:
         f6:ba:9f:ca:55:f6:11:36:24:00:84:f1:e8:14:2b:6e:7b:15:
         83:db:db:c8:20:b1:fd:79:9d:5b:05:9b:88:0c:60:42:7a:27:
         0a:87:34:c5:2b:4a:45:17:da:7a:68:d1:67:a3:7e:0b:c7:54:
         31:f2:ec:27:14:53:73:7c:84:89:25:5d:cc:ed:5b:25:e3:08:
         5c:3e:9d:52:1e:5e:43:42:ab:d4:f0:ef:e1:6c:8c:a9:7f:00:
         d7:07:c1:e7:e1:ac:ae:89:89:0c:33:45:21:50:cb:3c:28:4a:
         de:5f:3f:86:17:16:82:76:49:35:cc:d8:1a:65:ad:1f:e0:87:
         a2:4b:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:08:08 2026 by rpki-client