This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
File:                     7hOsz353sCkq4XsFNAIRyPlxdgs.mft (raw, json)
Hash identifier:          gm6Sz5AyeaCZfqWnCGRYS1BdXNvbaJ7j9sVsFK5Ljjs=
Subject key identifier:   A1:57:2E:60:59:AA:59:06:0E:81:A7:95:85:0D:A2:F0:07:C1:3A:A4
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
Manifest number:          0955
Signing time:             Sat 22 Nov 2025 19:44:24 +0000
Manifest this update:     Sat 22 Nov 2025 19:44:24 +0000
Manifest next update:     Sun 07 Dec 2025 19:44:24 +0000
Files and hashes:         1: -PNhwY-CTFXNbkCw5hJCg2ul2vY.roa (hash: UlEsdIoEBg/ozDa6A5PrkMwysa3z6Udu3mvwhAghppM=)
                          2: -dWSZcplAkkVaLrw3-4fA6xILZk.roa (hash: b5XesvpiwLFCjWInyGyISjj0C4cYYXAk+WjS07Sl3l8=)
                          3: 0-lo3vDW5MFUxpJ61I9Fn9oL790.roa (hash: c4cQFL1RLjPuB3yrsUTE6nO13Wpu9CleUZrgO/EtNmo=)
                          4: 2DHFSAnBZCnl1dUno4n5m6s3ePQ.roa (hash: ZbkZSpBhHfDj0trMoRTlOKxMpYIg9U8GLLBRB1c9YHo=)
                          5: 7hOsz353sCkq4XsFNAIRyPlxdgs.crl (hash: 6BQraKkzs/RU66yd/uxp2LIt3xQl+XAXRnvW9Qs6XGU=)
                          6: BkA8wyb8wW-wUM7VW6oPScpAa3c.roa (hash: SWTK7ZnqM8yHvUMKBTyOUXDewy5cp5fXqoSaN/6NwFw=)
                          7: E9Cfwkk7I4Ed2GLUeKe1BBYh1E8.roa (hash: Pjcc1xt1JqcICoEXnHyEDqI2rpaOVHeLOuV6tvPZ+wA=)
                          8: JZs_gJSmFUdRrEPINLNMDeQ5mfg.roa (hash: qPAfdnse695pbwQEURXXN8DSAMJizwjYaZsxcXgu79U=)
                          9: WKC66I9GyGwxG7nc_jmRlk8okDI.roa (hash: VOY/oC7HiH9g9Q10MyDIEdxJAri1VguN/mDZK7xEMM0=)
                          10: aAiPFOXOtgBnt9tATwCsOIScD2Y.roa (hash: 2otb2/fXwO3ZDqK7Ed2Qum2SCLHUMKjtXEfj64hwARQ=)
                          11: cqRWRI5fGlV0lCiv21ZSnMyeeK4.roa (hash: az91/TW7neaOosGcmRgu+OWLKUCto1S7i+7TPXijYaM=)
                          12: hHFuTlwo7DH4aE2NTwWoalMa1Gs.roa (hash: P5cSelIHfRErRfSAuqmJayW7X02Wo8RLt7hbsLvmeKs=)
                          13: x6pG1mwUhjl1eXAI4SzzBTtrKYE.roa (hash: xmXXGF3m6vOT9UuakmjGH1Irfq6dmU5Vkvj3cV5HVnc=)
                          14: xQ6bWu0BKuQdAIJZG2MMHBdF130.roa (hash: /WO6GXJacN59MeJ391bnvIF+h3itO5C1k1hfLLl8ke0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Nov 15 01:36:00 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=A1572E6059AA59060E81A795850DA2F007C13AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:3b:f4:8c:d7:04:25:47:ed:0d:44:65:3e:
                    85:54:48:9a:0e:b7:4c:3c:5a:2e:3b:7b:2d:aa:bf:
                    b8:24:01:16:7e:7b:75:fa:9a:36:6d:5e:47:84:d7:
                    45:a2:e2:60:14:20:1a:2c:0b:a7:77:03:08:b3:b9:
                    fc:32:03:26:23:2e:dd:e3:e8:ed:f9:cf:f0:9f:ff:
                    f2:7d:d0:e8:57:ba:bc:03:05:d4:7c:af:c1:32:ed:
                    fb:b2:cf:01:f1:39:58:ab:aa:6d:df:4d:56:79:89:
                    af:7a:37:44:b4:7c:78:1e:30:66:75:d3:ce:73:fe:
                    13:2f:b0:3a:0f:e2:28:aa:14:f8:97:66:78:cc:2f:
                    56:89:6b:58:f8:15:24:c7:f1:2f:df:11:37:a3:ac:
                    80:48:1d:b8:a4:4d:fb:ff:cc:27:34:1f:c4:b2:ef:
                    2c:e5:63:b4:ed:30:5e:ac:0b:8a:38:c9:c8:ac:22:
                    eb:b2:43:a4:18:7d:a5:cf:96:37:e4:b3:57:54:85:
                    a3:98:e7:04:a4:13:69:74:8b:24:29:4b:fa:29:f3:
                    c0:1f:98:6c:07:96:cc:90:d4:35:14:aa:f2:f1:d9:
                    38:07:d3:1f:4e:57:b2:1a:46:c8:ad:3e:ae:88:8d:
                    f9:36:88:85:1c:ab:c6:0e:3d:7f:f6:f4:ef:87:4f:
                    38:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:57:2E:60:59:AA:59:06:0E:81:A7:95:85:0D:A2:F0:07:C1:3A:A4
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:51:50:90:a9:2c:c6:f9:2f:29:58:d3:f5:f9:5f:4b:99:02:
         a6:3b:c0:6d:92:37:35:73:8b:aa:f5:08:d9:5a:e0:95:a2:2b:
         1a:77:df:62:5d:5f:f0:43:00:15:43:2c:23:09:44:5c:66:67:
         45:c2:e6:0f:77:09:29:72:a0:d2:de:ac:0d:6d:36:dd:f3:12:
         1d:88:3a:ea:10:d9:14:9b:2a:0a:6a:e6:83:2f:e2:a8:f4:e3:
         1e:fd:32:4f:b6:30:f6:12:27:7c:8f:6b:0d:e2:0e:94:2f:70:
         24:79:5a:b7:c9:50:7a:75:f8:e3:18:33:7d:0b:13:be:bd:40:
         bb:16:47:d2:02:53:5d:c3:aa:a6:6d:9b:8d:ed:e6:ba:76:ed:
         ef:1e:00:84:97:ff:0a:5d:8f:e8:3a:82:ad:c9:3f:ef:17:31:
         84:a5:e2:e6:69:25:b5:cd:5e:c5:9c:e0:dc:59:84:be:8d:d7:
         ac:c7:35:b1:61:a4:dc:bc:36:1b:c8:e1:cb:6c:14:db:04:4b:
         85:b3:42:0b:35:e4:bc:c8:33:c4:3e:fa:2e:6c:04:14:40:13:
         a8:7c:7c:c7:5d:5e:c5:d4:80:f2:3f:9c:63:13:e2:51:99:60:
         92:19:9d:10:13:51:83:4e:7a:36:49:33:38:be:8e:06:09:cd:
         17:b1:05:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:16:43 2025 by rpki-client