This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
File:                     BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft (raw, json)
Hash identifier:          MqaB+jo/LBl4MQksc1uad14KIWwvCQWi2EOXSBaLJtc=
Subject key identifier:   27:15:D4:C7:64:A9:9A:AE:4D:95:45:5E:56:66:40:28:A0:E3:CE:45
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
Manifest number:          0A20
Signing time:             Sat 22 Nov 2025 19:01:21 +0000
Manifest this update:     Sat 22 Nov 2025 19:01:21 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:21 +0000
Files and hashes:         1: 0Eb9FXm2Fk-3H5ttmbe3POoFgSA.roa (hash: RJ+FVY0BEmzxO6/i0X8eIV7USCi5xuOnAYVgsTOe0MY=)
                          2: 23h2cxYjJscLkvGEBsXI9rKUOhA.roa (hash: CWo9oIaZgggBYK+7MRMDpj7CjAcpkHsq/7QCrka/EAE=)
                          3: 7cBqVwPWSL3j9YW56UTW3zTMqCU.roa (hash: XFUJAau6m8Z7Be6wXMGBIV+W9ncNgLaH0OLi6w01N7I=)
                          4: 8PQZxNTH1T0iY5AOqWxruyYgKeo.roa (hash: /zPFae9xhDAkDd9dB6tDNl8Hw9MNAKUm7sgTwHgAjOo=)
                          5: BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl (hash: 5jZdJcUJOQY6rv0oqedueIiIPzUpoacHwXw61JjA2kw=)
                          6: Ci2K33b27P3kv8sHvXrj1S1Zt7k.roa (hash: tQmzCTzOcm2+/80vJiuUyinRKf57UbbaXfQ/laeb3uQ=)
                          7: F0kOnkAl3z5y_NelY2KpT5Mtq-Q.roa (hash: iik/PTu5BpqQZwuh9yVKDEyBgbDbPIVvTdDmYx35OOg=)
                          8: FXalhLfgKMafIMjjvh9hvA2K3ak.roa (hash: iueUR+L3k7ltXc9/McKiwqwUciniGgyGyxC/BIjendI=)
                          9: IQOceJnaneno2duj7mud7tCmhtE.roa (hash: fXcZH2uJnraedj+nis+2N6l+hJZmlxBBWbrVXESNvG0=)
                          10: N5W1oJfpnXTFscrTf4r6iMb-JxU.roa (hash: ccmssfDvYca0flb5xDuogisj6cdPBWE61lL97wTAF/U=)
                          11: RqoaMqYTDGQHrVLwzn5HS2uXLI4.roa (hash: xJHqAeKZQ3AjBbor/NT3TEI4TklZlouDDwhl113hFPs=)
                          12: ryWQ2-jFBGuzwwpg_xY4Eyblc64.roa (hash: Lup+uN/rsWV3d7JNrTIMP2uhHfRyAqBPpJSNnizSa9c=)
                          13: v0fPo1cmyRWa7p9HxStG0rM7fcs.roa (hash: y24GN4GuJd3l0kYb8zqzp6fruzGQZvyhR8ewZeHNVP4=)
                          14: wR8qk9oyHxaLtTWx767Glr3cIXM.roa (hash: Jp61+3w0RAPqRj9jx5JOI51gCVsB50sFVP5zqjPIn00=)
                          15: zI7NKXIizS4veu_YdzeMR1hB28M.roa (hash: 7LjRKMg/RHVjit/gmjMn6e0VA1xb1CF1o7Md1tFhgMc=)
                          16: zNKkwfRok92sLOofWMTbR_ntZDI.roa (hash: U4+jbuDrq3CUElLEN6ehogtK5jIHwk2amx8h75BIl7w=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 15:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Nov 15 01:39:16 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=2715D4C764A99AAE4D95455E56664028A0E3CE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:95:0b:b8:b4:39:c8:7d:ce:a8:84:46:5f:
                    8a:d4:14:92:8f:67:6c:cf:ae:04:87:e8:b2:fe:0e:
                    3d:ac:96:c5:22:dc:2a:80:44:a0:79:71:f5:03:bd:
                    6c:91:d6:88:44:60:6d:4b:02:fc:b7:1a:9f:71:5d:
                    e2:58:a2:a7:5c:6f:c6:d5:55:8a:73:34:ae:fa:f3:
                    03:d9:b2:54:1c:b5:65:48:5b:bc:dc:83:6b:a0:58:
                    54:cf:b1:95:69:f7:6d:6f:e5:f7:6a:35:d0:a6:4c:
                    ac:a4:9a:45:5b:ee:09:5a:6f:50:38:71:53:d3:ba:
                    ad:d8:14:4c:a4:1a:e9:3d:60:bd:ca:44:1d:99:e7:
                    53:6b:90:f2:9c:7a:74:17:34:49:bf:6f:87:85:bd:
                    47:1e:bb:ad:41:a6:0b:64:d6:5e:d7:74:fa:eb:11:
                    63:06:02:a0:9f:55:1f:4c:72:b7:3b:9e:0b:40:ee:
                    2d:a5:2e:30:1c:27:d8:85:d9:f9:b5:17:86:81:10:
                    af:36:86:6a:27:5a:81:0e:97:b2:06:c5:2b:25:56:
                    9e:6e:9a:85:a6:57:8c:d7:19:f1:ed:6c:1f:55:cb:
                    1e:4d:81:25:4d:c9:66:a8:9f:d0:49:b2:d9:59:e0:
                    8f:cc:2e:59:f7:54:d6:76:30:04:aa:16:49:82:de:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:15:D4:C7:64:A9:9A:AE:4D:95:45:5E:56:66:40:28:A0:E3:CE:45
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:91:dd:49:9e:2d:f5:7e:93:46:aa:c0:13:1c:c1:ec:b8:fb:
         7c:c3:97:cf:1d:41:5b:0c:b2:17:d1:6d:54:ac:6a:9b:bb:b2:
         94:be:34:80:e4:c9:9d:3b:4c:77:34:29:dc:25:51:5d:15:65:
         88:06:b4:47:cf:c7:fe:93:fe:a6:e7:ae:9c:09:17:54:74:fb:
         c9:03:a9:7e:0c:20:48:11:5e:3a:22:54:dc:a9:be:33:bd:7a:
         c4:10:3e:e1:04:85:6b:9d:86:af:cf:d0:f2:e2:70:aa:50:c1:
         48:49:f7:87:f6:05:dd:55:26:23:a7:fb:18:78:6f:9b:99:8d:
         90:ff:56:6d:34:4e:d1:48:ba:8d:0f:b2:19:52:14:66:c4:25:
         ce:74:48:bd:04:20:dd:84:b5:e7:26:14:34:1b:08:ab:82:a9:
         0e:e6:8c:de:75:b1:96:6c:a4:f6:7c:9a:12:62:03:75:14:43:
         51:3f:89:7d:10:7f:22:5f:26:58:27:d9:4c:94:7f:82:d9:84:
         4d:43:dc:2c:4e:d9:8a:79:f1:28:6d:cb:dc:4a:b3:c6:b4:a2:
         18:01:af:64:4b:af:c0:68:66:e6:e7:73:6c:5a:67:d9:6d:12:
         73:fb:09:dd:39:0b:80:17:5f:b4:58:5d:86:e1:f1:4e:1f:01:
         34:bf:05:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:43:44 2025 by rpki-client