This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft
File:                     AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft (raw, json)
Hash identifier:          Glg9kaSIfhafGF/NhhFKg+xSrySXQP6v3Vz6FkV54JQ=
Subject key identifier:   5D:5B:21:1C:39:F4:70:9C:53:E9:56:C5:B4:A4:25:06:A6:84:52:4A
Authority key identifier: 00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4
Certificate issuer:       /CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
Certificate serial:       52
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft
Manifest number:          0A6F
Signing time:             Tue 23 Dec 2025 19:49:34 +0000
Manifest this update:     Tue 23 Dec 2025 19:49:34 +0000
Manifest next update:     Wed 07 Jan 2026 19:49:34 +0000
Files and hashes:         1: -6um_qrS71A3FhjPew3sGoRuEko.roa (hash: IUnPQMtQOCs12hEMt8/TBwue9+KCbseFJomvr2YatUU=)
                          2: AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl (hash: n2N3iFDEu0huSJyXNsUDvJtw8L2INO6i4/HaP3kgQHQ=)
                          3: _Jd8rHCMICBdurEuN8FQjJX8zik.roa (hash: VZYQECne9dijiPEg8xC+gqaW2E3vgO0KO7yX8nCntQ8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 19:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
        Validity
            Not Before: Dec 15 01:40:54 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=5D5B211C39F4709C53E956C5B4A42506A684524A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1f:7f:02:2d:93:59:d7:32:b1:88:07:0b:62:
                    dd:c8:14:68:cb:5d:50:89:6e:28:70:6f:d2:5d:58:
                    30:cb:66:29:c7:70:c9:ec:0b:5e:75:fb:bc:f9:b5:
                    e9:7b:4c:f1:ea:37:4c:4e:a8:14:9f:b7:9d:c4:26:
                    84:f4:35:b6:a4:4d:47:8e:43:06:36:57:bb:80:6f:
                    13:a0:1a:70:36:a8:30:a6:e5:9c:f3:b6:86:85:38:
                    5b:50:6e:1d:0c:a9:69:a6:ee:74:f9:10:23:23:bf:
                    9e:3b:e4:58:ad:11:d5:b9:67:c4:a3:8c:c3:67:96:
                    1e:97:7d:92:80:c2:3a:a2:39:1e:06:b7:02:0e:9c:
                    36:c9:a6:6f:a0:49:2a:36:94:31:3f:cf:6a:cc:b0:
                    80:58:df:6f:3e:f8:72:2e:28:61:51:35:c5:55:65:
                    b6:4c:99:33:75:2f:b2:7b:f7:4a:f3:05:64:ea:e1:
                    1d:ff:37:69:18:d0:0c:56:fe:55:94:92:a1:08:7a:
                    c6:bf:da:55:a0:50:1a:a4:01:e5:d6:d0:77:ca:7d:
                    29:4a:67:37:fd:92:8c:8e:b4:82:67:41:73:65:0c:
                    05:fe:1f:74:58:1a:c2:f1:b8:63:01:c2:6b:be:8b:
                    d2:3c:e7:0e:a4:8d:1e:d8:a4:33:47:07:95:a8:a0:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5B:21:1C:39:F4:70:9C:53:E9:56:C5:B4:A4:25:06:A6:84:52:4A
            X509v3 Authority Key Identifier:
                keyid:00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b8:d2:55:0d:41:1b:7b:82:aa:1b:ba:e1:f0:22:d2:2c:46:
         01:f3:59:c6:62:ca:f4:36:f7:94:3b:4c:10:b8:b0:01:ad:51:
         1d:3e:d7:63:1e:57:24:90:98:a4:0f:71:70:a6:cd:94:00:e7:
         34:80:58:e5:4c:f6:24:2b:2c:1d:f8:06:0c:09:d9:16:d8:3c:
         f8:18:69:7e:d8:2d:10:7f:1c:c8:7f:c6:37:e1:48:e8:69:62:
         5a:be:b4:de:e7:7d:06:f3:15:61:91:35:4c:62:c4:a8:19:25:
         79:2f:8a:46:d7:77:83:c1:2c:ca:5f:f4:80:d8:04:97:23:16:
         2a:0d:ea:b7:97:72:f1:f9:e7:5a:e3:03:ed:ea:da:77:3e:b3:
         10:e3:6a:e2:2b:94:0b:01:29:aa:87:6e:81:0e:db:b9:b4:9f:
         8c:6e:ea:f4:7e:72:2e:44:4f:49:47:db:ce:99:03:6f:39:cb:
         d9:1b:a2:33:e8:92:7a:0e:a2:05:45:8e:22:b8:15:ae:3e:75:
         24:a0:b3:df:86:11:b6:b8:e1:01:54:47:d9:fa:14:23:45:23:
         49:17:b9:be:2a:25:a2:43:2c:38:46:38:b9:04:eb:2e:ef:ef:
         25:22:05:d6:fc:37:45:c4:2c:c9:72:b1:c7:4a:94:bf:84:6a:
         06:75:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 00:19:06 2025 by rpki-client