This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft
File:                     nbB2TG38Hj32vVgOpplKHnCY9So.mft (raw, json)
Hash identifier:          J0cwwmeI7LlomkOFPgLDwhLzFpuW/qXdFKzqzLWTe8M=
Subject key identifier:   E5:05:68:92:5C:7D:8A:DF:CF:4D:83:CD:E7:37:62:40:6C:9C:7E:06
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       A6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft
Manifest number:          09AA
Signing time:             Sat 22 Nov 2025 19:19:45 +0000
Manifest this update:     Sat 22 Nov 2025 19:19:45 +0000
Manifest next update:     Sun 07 Dec 2025 19:19:45 +0000
Files and hashes:         1: Kz91HkeQjh4fK9IQa14DIBLhHcs.roa (hash: OiZeIG5Z7iJl2KPslUN7LXpNree/aPmzHo1KraDZpAE=)
                          2: LJbzIXvN8xJ5rryQ2EMXAaJTu48.roa (hash: 9R+mB9XABKoH3ITjsCxBrQEitFyGiZxb4HDCY7Kkm9Q=)
                          3: PZPly0ziW6a6cqb3haW1z6kyLr8.roa (hash: iN6+y6OUKrZGKu8MY1RLNYveH/F5ynJsx07LnMfuZ7s=)
                          4: fBja1lE4uv85FlzI0-EMZ9b-6RM.roa (hash: Z3zQ/hl+T1m07oIJ5i1YjjkGJT6tpXFBrXo7YwZpkK4=)
                          5: nbB2TG38Hj32vVgOpplKHnCY9So.crl (hash: bwVdMDjsYIVzCB8r7uA2I+RCjAphL5YZuzL9D3NwzSc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Nov 15 01:33:53 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=E50568925C7D8ADFCF4D83CDE73762406C9C7E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d9:cc:bb:f9:61:09:99:bd:48:ad:3b:d8:bc:
                    2b:13:55:3c:5d:3a:b2:69:0e:96:2b:40:bb:36:df:
                    fa:5d:39:7e:ed:85:9c:7e:9b:5a:34:07:c9:64:0d:
                    33:85:5a:4b:7f:17:87:d5:38:7b:a1:6f:0e:b4:e8:
                    f6:94:6a:b6:f5:45:55:91:f0:23:56:cc:83:99:20:
                    77:22:32:c5:d5:b3:34:05:18:d3:c0:38:89:81:e1:
                    60:fa:63:02:37:f1:dc:86:6a:99:13:66:7d:56:08:
                    ee:e1:d5:cd:db:34:9a:53:19:a7:e1:ce:86:d1:d9:
                    46:0f:1c:b7:ab:ad:01:d1:a5:21:6c:7c:b5:2e:69:
                    3c:e6:54:65:4e:83:a8:9f:b7:79:a8:65:87:78:fa:
                    25:58:87:a4:da:6e:6a:5e:1d:5e:ca:e8:87:66:30:
                    fb:a0:91:1c:85:9e:78:7d:86:14:8c:6e:d4:b8:9a:
                    f6:67:04:ce:31:42:86:98:d3:ee:c4:71:ef:30:94:
                    55:1f:33:6c:f0:91:b5:65:4e:b4:48:20:40:d7:77:
                    48:68:a4:66:d5:40:c1:3f:54:26:3b:cc:ea:b7:49:
                    78:3d:e6:2e:24:4a:e2:9c:70:8e:dc:be:f1:80:81:
                    14:b1:83:68:74:de:ad:2d:b1:9c:5d:89:db:d9:28:
                    5a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:05:68:92:5C:7D:8A:DF:CF:4D:83:CD:E7:37:62:40:6C:9C:7E:06
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fa:3c:c7:84:23:d9:b2:f7:b9:cf:d4:ff:c1:6c:26:22:e8:
         af:35:04:48:cf:c4:04:96:e6:93:e7:39:44:de:11:2e:c4:8c:
         bf:b5:87:99:8c:e6:e8:03:87:d8:91:c4:8c:24:31:00:95:b5:
         14:16:f3:18:f5:cf:c5:bd:9c:a9:e2:90:54:dc:6b:19:62:ca:
         03:90:84:8f:cb:fa:88:6c:cc:50:26:9c:41:93:1c:a8:4c:c2:
         96:3c:c1:dc:68:89:de:f2:d0:6c:ce:6e:ee:20:50:9a:34:dc:
         24:38:87:fd:20:16:06:58:4b:49:e5:be:c1:0b:46:21:56:34:
         5c:e9:a1:7d:87:be:5d:c1:e3:ab:3e:98:51:b9:5d:52:2b:13:
         84:bb:fa:17:15:df:3d:b0:cc:f6:94:48:3b:46:67:69:1f:5c:
         3c:68:cb:f4:4b:47:43:ee:77:ca:f3:8e:c1:fe:a6:b5:6e:5f:
         81:36:2b:a9:e9:bb:f9:25:32:1d:42:41:7d:d7:4a:b5:58:d9:
         dd:93:f8:d1:64:a1:22:80:15:60:98:05:3f:c9:98:f2:92:6c:
         62:14:ad:b6:f6:5e:2d:23:dc:85:da:14:bf:99:e8:57:59:a2:
         81:1f:f1:f5:17:e8:a3:8e:cb:17:a0:cc:67:30:95:b0:04:8e:
         f4:0a:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:07 2025 by rpki-client