This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
File:                     r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft (raw, json)
Hash identifier:          RCwyVkPiNPLgAQcz9dXOfCVabc3yFn93pA3SVG/ruPU=
Subject key identifier:   7F:20:70:04:7E:E2:FF:1A:47:47:14:66:D2:B0:2B:E8:07:EA:8A:CD
Authority key identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5
Certificate issuer:       /CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5
Certificate serial:       10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
Manifest number:          04C1
Signing time:             Tue 16 Dec 2025 01:52:04 +0000
Manifest this update:     Tue 16 Dec 2025 01:52:04 +0000
Manifest next update:     Wed 31 Dec 2025 01:52:04 +0000
Files and hashes:         1: AGF6BVTB37rJn6cfIGftHxTXYC4.roa (hash: GYS9hhupWZxpcCNiV89CUq9c770pM3L2yY/a/3J4tdU=)
                          2: QiCXLLxeS7ZBggZKZd1pvBNt7hs.roa (hash: QUy8tKLl4dJ6Cwx6H9hlGr4TVfOPE4QAoMWud9oUpDI=)
                          3: RIlfvPtWgEfQR1T44I4HRUA7hxI.roa (hash: ZlgSS85A+e0l1Lr+OFsGyZrSbDbkKv5r8ayj1HbzLxk=)
                          4: ZxyRKq1OOfzmQ3dNbwrVH9rYoNM.roa (hash: UHN/OsvUcUKYDZem1OqbY2eQT1FPD3j8La5kPgxoWaY=)
                          5: g4sonl39UKodR8n_V9zTdkIQ5ik.roa (hash: x4vtN9KL5fTNT5U4HmEv3l8Gk4SVKwJuz12OtUbkX0E=)
                          6: r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl (hash: SaajjrXAuGdJKzkPjQaApbkauotkzYTFkqvVOK45CAs=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 01:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5
        Validity
            Not Before: Dec 15 01:31:42 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=7F2070047EE2FF1A47471466D2B02BE807EA8ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:78:16:8c:d0:24:d9:f4:2f:25:6a:76:ba:
                    bd:b3:26:0b:49:14:ab:1e:af:87:19:81:30:be:39:
                    41:73:88:97:61:dc:e6:29:36:6e:3e:b7:bb:04:09:
                    69:52:66:74:19:ec:2e:1f:c9:17:d3:77:4e:1d:a6:
                    04:3c:2a:d2:c9:aa:11:72:4f:0f:5c:b4:bd:07:5b:
                    ee:02:e6:69:d1:2a:7e:bf:be:92:eb:0b:40:e0:c2:
                    24:dc:c7:33:87:2b:94:2f:71:1b:4d:b9:12:51:68:
                    ba:4f:4a:30:95:32:08:8b:ab:e3:ac:f7:55:69:bc:
                    c7:2c:46:1d:3c:cc:cc:8b:b3:c7:31:80:64:f9:e7:
                    05:4b:29:1c:63:f1:40:78:cc:d9:98:b3:8b:1a:54:
                    82:84:1e:9a:6c:22:c8:66:27:21:0b:48:65:16:7c:
                    8c:42:ad:f5:d5:21:69:5d:ca:7c:2f:48:ed:1e:e5:
                    48:15:17:5c:78:ed:ea:54:80:27:e6:22:26:28:aa:
                    d5:33:e3:8b:49:f3:7a:6f:7c:18:ae:81:04:76:62:
                    ed:45:75:ac:49:3c:bb:63:2e:3c:12:7d:14:43:f1:
                    4b:6e:f2:c0:0c:6f:e6:f3:07:e0:57:a8:df:f0:95:
                    ab:33:23:6d:d1:41:5b:7b:c9:37:67:26:64:4d:62:
                    17:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:20:70:04:7E:E2:FF:1A:47:47:14:66:D2:B0:2B:E8:07:EA:8A:CD
            X509v3 Authority Key Identifier:
                keyid:AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a7:f9:0d:c3:36:7e:07:4f:69:82:49:8d:d7:f9:85:a9:cd:
         5b:c5:a9:41:76:63:dc:a6:00:37:f9:cf:3e:fc:bb:b9:a2:0b:
         86:48:4d:03:e1:76:d7:1a:1a:00:7c:2f:81:c6:a1:74:35:13:
         24:da:ff:60:a8:48:3c:d2:d3:75:94:c5:37:4c:56:70:a5:28:
         27:31:4d:85:f3:ba:ee:5c:ce:c6:16:6a:b8:f7:15:b2:20:5d:
         e7:34:f3:b5:8f:c2:fe:47:10:13:8e:bb:cd:5d:e6:b1:ed:b2:
         12:68:7c:21:d0:34:f6:af:67:68:65:20:b9:e8:f6:92:43:ae:
         53:56:c7:cf:9f:35:7c:56:02:a9:b9:dd:bf:3c:97:49:26:76:
         e9:45:04:05:02:5a:7a:a7:e0:cc:32:cb:1f:25:78:b0:aa:4c:
         33:41:5f:a6:f2:b8:6d:6a:8f:85:cb:99:70:2b:f7:48:6e:23:
         92:cc:9b:73:21:7e:39:21:b8:11:5e:16:e4:a5:52:fa:69:b7:
         11:bb:49:22:80:3a:c0:d4:7a:81:d8:b4:f6:6c:6a:cd:22:be:
         5e:99:13:5f:6b:79:f4:28:ea:35:0a:d9:30:be:68:6d:ee:3e:
         96:a0:da:72:01:da:44:f1:fd:e9:6b:d7:d7:59:1e:07:3b:c9:
         82:c0:63:e8
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRkQ4
MjQ3N0EwOTFCMTdDREE2MUM1NTYzQkMyOTIwQ0RDRDdBQUE1MB4XDTI1MTIxNTAx
MzE0MloXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoN0YyMDcwMDQ3RUUyRkYx
QTQ3NDcxNDY2RDJCMDJCRTgwN0VBOEFDRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMpBeBaM0CTZ9C8lana6vbMmC0kUqx6vhxmBML45QXOIl2Hc5ik2
bj63uwQJaVJmdBnsLh/JF9N3Th2mBDwq0smqEXJPD1y0vQdb7gLmadEqfr++kusL
QODCJNzHM4crlC9xG025ElFouk9KMJUyCIur46z3VWm8xyxGHTzMzIuzxzGAZPnn
BUspHGPxQHjM2ZizixpUgoQemmwiyGYnIQtIZRZ8jEKt9dUhaV3KfC9I7R7lSBUX
XHjt6lSAJ+YiJiiq1TPji0nzem98GK6BBHZi7UV1rEk8u2MuPBJ9FEPxS27ywAxv
5vMH4Feo3/CVqzMjbdFBW3vJN2cmZE1iF2cCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBR/IHAEfuL/GkdHFGbSsCvoB+qKzTAfBgNVHSMEGDAWgBSv2CR3oJGxfNphxVY7
wpIM3NeqpTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMDYvcjlna2Q2Q1JzWHphWWNWV084S1NETnpYcXFVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcjlna2Q2Q1JzWHphWWNWV084S1NE
TnpYcXFVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTA2L3I5Z2tkNkNSc1h6YVljVldPOEtTRE56WHFxVS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+p/kNwzZ+B09pgkmN1/mFqc1bxalBdmPcpgA3+c8+/Lu5oguGSE0D
4XbXGhoAfC+BxqF0NRMk2v9gqEg80tN1lMU3TFZwpSgnMU2F87ruXM7GFmq49xWy
IF3nNPO1j8L+RxATjrvNXeax7bISaHwh0DT2r2doZSC56PaSQ65TVsfPnzV8VgKp
ud2/PJdJJnbpRQQFAlp6p+DMMssfJXiwqkwzQV+m8rhtao+Fy5lwK/dIbiOSzJtz
IX45IbgRXhbkpVL6abcRu0kigDrA1HqB2LT2bGrNIr5emRNfa3n0KOo1Ctkwvmht
7j6WoNpyAdpE8f3pa9fXWR4HO8mCwGPo
-----END CERTIFICATE-----
Generated at Tue Dec 16 04:26:48 2025 by rpki-client