This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.mft
File:                     iTJXvBVrUtqLlKIUINjTXa5v9K0.mft (raw, json)
Hash identifier:          TNn8PiijTRAnxLtvhRKlc5a7CnjVQwFiZHi0zPP5eus=
Subject key identifier:   AD:2E:3B:1E:D5:79:5A:D8:5F:FE:90:8A:AB:67:37:70:FD:45:20:7C
Authority key identifier: 89:32:57:BC:15:6B:52:DA:8B:94:A2:14:20:D8:D3:5D:AE:6F:F4:AD
Certificate issuer:       /CN=893257BC156B52DA8B94A21420D8D35DAE6FF4AD
Certificate serial:       24
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iTJXvBVrUtqLlKIUINjTXa5v9K0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.mft
Manifest number:          0914
Signing time:             Sat 22 Nov 2025 19:46:45 +0000
Manifest this update:     Sat 22 Nov 2025 19:46:45 +0000
Manifest next update:     Sun 07 Dec 2025 19:46:45 +0000
Files and hashes:         1: 2x63rnkcsFrODsY1Lj-l5eoal8A.roa (hash: hwbtAe8Bl562Pf3FjxFlgmdOVtPmfaR2XgYpxk/ozVY=)
                          2: iTJXvBVrUtqLlKIUINjTXa5v9K0.crl (hash: dQDUtPhpIxs6QXoHECRIX9tkW+ZXmN3rLVLSqESBj2M=)
                          3: qw3yz2AbXytt3iMTbrOwfi1bUfk.roa (hash: +9uqLyuHxBdI4baHbveE0BoSD8py8NfFfZ9nTMEiPfU=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iTJXvBVrUtqLlKIUINjTXa5v9K0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893257BC156B52DA8B94A21420D8D35DAE6FF4AD
        Validity
            Not Before: Nov 15 01:36:19 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=AD2E3B1ED5795AD85FFE908AAB673770FD45207C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:36:7c:94:f7:98:39:00:df:a2:d1:39:a3:
                    06:14:d9:13:24:7b:d7:0a:68:76:85:b3:d8:36:ec:
                    29:65:fd:2f:cd:b6:3b:8b:3a:af:66:3e:6c:5e:10:
                    d3:61:48:3a:62:96:55:d4:4a:73:70:57:37:b5:21:
                    98:3f:5f:8a:06:31:4f:36:86:89:ab:20:75:1d:7c:
                    e3:86:d9:ad:9c:28:af:e6:fc:5f:32:44:d3:70:04:
                    f1:62:25:d9:d9:7c:f7:20:b4:f3:2b:12:34:af:79:
                    36:24:dc:27:3a:0f:ba:65:e9:7c:01:d6:96:0b:16:
                    10:37:c6:66:e1:dd:a7:b1:60:0c:61:f6:77:71:ec:
                    1d:0e:f7:f8:f7:e8:7f:9f:2b:5f:6c:20:ef:f8:e0:
                    e4:96:c1:81:f7:8c:4c:af:13:37:cc:cc:62:00:99:
                    9f:e7:69:66:68:9a:31:29:2c:5e:2b:d3:1b:8b:c7:
                    72:39:e1:ee:ed:09:d0:b4:91:10:f9:1a:4e:07:45:
                    dd:99:05:be:ea:c3:d3:16:95:fa:88:b7:75:0d:bf:
                    96:6c:a1:ef:96:94:e6:5a:f7:69:73:9a:9c:d4:25:
                    74:2e:d8:9b:e1:49:29:f4:6d:ea:ae:a6:ca:65:f4:
                    02:eb:d7:e7:07:9f:d0:d1:9b:7d:38:0d:55:55:36:
                    8b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2E:3B:1E:D5:79:5A:D8:5F:FE:90:8A:AB:67:37:70:FD:45:20:7C
            X509v3 Authority Key Identifier:
                keyid:89:32:57:BC:15:6B:52:DA:8B:94:A2:14:20:D8:D3:5D:AE:6F:F4:AD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iTJXvBVrUtqLlKIUINjTXa5v9K0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:65:4e:91:7e:49:1d:96:5e:e8:b4:2e:69:24:fb:2c:83:c3:
         b7:e8:94:12:5e:f0:32:67:9e:62:d7:33:74:ed:4b:a2:83:3a:
         25:e3:7f:f9:23:bb:08:7a:13:70:5f:64:68:81:ae:e0:d1:67:
         5e:1c:f5:a2:03:ef:0b:d4:03:2d:3e:7d:52:c2:a9:5e:ec:09:
         c4:d1:08:bd:ff:13:08:f1:11:a2:0a:79:c1:c9:bf:2b:04:c2:
         c0:22:af:1f:48:c1:3b:34:0d:cf:d0:f4:3b:0e:99:cc:8a:e3:
         6c:28:20:f3:ba:09:77:32:79:1b:7e:64:34:c4:94:58:79:9b:
         7a:53:bc:4c:36:56:ee:d7:a1:c7:03:74:9f:ec:ed:f6:91:56:
         1d:e8:06:4c:5c:a3:0c:85:4d:8c:76:c7:ca:f3:62:db:be:13:
         34:3a:92:19:ef:47:f9:5a:23:4e:22:d6:b3:64:55:c8:b6:0e:
         64:58:31:25:7b:d8:84:8f:7b:1f:15:12:53:59:d3:96:7e:46:
         75:94:65:66:4a:d1:0a:b8:69:26:c6:06:55:c0:c9:ec:a8:f7:
         7c:0a:7d:ae:26:d8:66:7d:75:14:64:d6:c2:1a:bc:22:a0:62:
         5d:c5:84:bb:c3:f2:8b:5d:0f:a5:02:0e:80:f7:1a:05:87:68:
         6c:e6:79:6c
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OTMy
NTdCQzE1NkI1MkRBOEI5NEEyMTQyMEQ4RDM1REFFNkZGNEFEMB4XDTI1MTExNTAx
MzYxOVoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoQUQyRTNCMUVENTc5NUFE
ODVGRkU5MDhBQUI2NzM3NzBGRDQ1MjA3QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANFaNnyU95g5AN+i0TmjBhTZEyR71wpodoWz2DbsKWX9L822O4s6
r2Y+bF4Q02FIOmKWVdRKc3BXN7UhmD9figYxTzaGiasgdR1844bZrZwor+b8XzJE
03AE8WIl2dl89yC08ysSNK95NiTcJzoPumXpfAHWlgsWEDfGZuHdp7FgDGH2d3Hs
HQ73+Pfof58rX2wg7/jg5JbBgfeMTK8TN8zMYgCZn+dpZmiaMSksXivTG4vHcjnh
7u0J0LSREPkaTgdF3ZkFvurD0xaV+oi3dQ2/lmyh75aU5lr3aXOanNQldC7Ym+FJ
KfRt6q6mymX0AuvX5wef0NGbfTgNVVU2i5UCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBStLjse1Xla2F/+kIqrZzdw/UUgfDAfBgNVHSMEGDAWgBSJMle8FWtS2ouUohQg
2NNdrm/0rTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyMTYvaVRKWHZCVnJVdHFMbEtJVUlOalRYYTV2OUswLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaVRKWHZCVnJVdHFMbEtJVUlOalRY
YTV2OUswLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjE2L2lUSlh2QlZyVXRxTGxLSVVJTmpUWGE1djlLMC5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHZU6Rfkkdll7otC5pJPssg8O36JQSXvAyZ55i1zN07Uuigzol43/5
I7sIehNwX2Roga7g0WdeHPWiA+8L1AMtPn1Swqle7AnE0Qi9/xMI8RGiCnnByb8r
BMLAIq8fSME7NA3P0PQ7DpnMiuNsKCDzugl3MnkbfmQ0xJRYeZt6U7xMNlbu16HH
A3Sf7O32kVYd6AZMXKMMhU2MdsfK82LbvhM0OpIZ70f5WiNOItazZFXItg5kWDEl
e9iEj3sfFRJTWdOWfkZ1lGVmStEKuGkmxgZVwMnsqPd8Cn2uJthmfXUUZNbCGrwi
oGJdxYS7w/KLXQ+lAg6A9xoFh2hs5nls
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:16:46 2025 by rpki-client