This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
File:                     15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft (raw, json)
Hash identifier:          +J/aO96Zxpv9wM6F9dKfPqih4Vb6mqIVVult1tzUc88=
Subject key identifier:   E5:9B:A4:B8:E6:D9:93:15:30:14:40:B7:1A:EB:FB:51:62:98:1E:74
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       59
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
Manifest number:          097D
Signing time:             Sat 22 Nov 2025 19:33:40 +0000
Manifest this update:     Sat 22 Nov 2025 19:33:40 +0000
Manifest next update:     Sun 07 Dec 2025 19:33:40 +0000
Files and hashes:         1: -QVqp3M6EtDVUC-eq4_DkRlP4bY.roa (hash: Hy6DFCvhOza/9RQYS+P6kjjaPSIM+dpIqNNm70MUbFA=)
                          2: 15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl (hash: ydVop46FAi9MyaG6zHMnUBfv2Uej+tSSQ1duaPzQb0c=)
                          3: 7mPmWLcS908PMohb3QV2WV43kB0.roa (hash: UHNjOl1RTqmVab5oDPS2ioXBjxqvdA3y0OClcsHPA8o=)
                          4: 8rmtaf8XK88-hy7HtFMw2pETmhI.roa (hash: aiXKijlXrAgSqi/qJvxFv8MpPJghKmPQ5D3lhHg4rFQ=)
                          5: I7XaQRXr0bsyqfK-wBrC-RjM8rw.roa (hash: r32urzhKTnYJgredR32DRh0tldy+2/1dUvsFp9YI28U=)
                          6: RgJXte6MsHxEvydFh41XhEr2Luc.roa (hash: l9cKrGlA7OVMXPaVSKBf5LQ6ybENo8+qlhipMIIPzNI=)
                          7: SN7eX0Vz5TWZksUqy3rG8JfI_es.roa (hash: DnLGx/hrRfuJVexVMngXhO5zs+szRyDR5YMK0Uv3L34=)
                          8: WsWdFuuqkKgEcuGq7LajOdjaofI.roa (hash: 89HyfCFN2Mpz8EGMQkWPu7oaLroAa3MghC8iizMNZGM=)
                          9: bSFclYtck_zlS__8f0ieZqBfPEs.roa (hash: 2+J3SbVAlW9XZRH4UKFamchP/QQk4E8mO0qTwvxTM5Q=)
                          10: oVQTNs0iJWGjv6xrJ-RZK1EcPtg.roa (hash: 7oDgDxtP4QJznnr73bIgI9kDwxhpwiAnIZBos1kYfNw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: Nov 15 01:34:24 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=E59BA4B8E6D99315301440B71AEBFB5162981E74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f8:83:07:a0:d3:c4:36:e8:74:a0:b1:58:15:
                    8b:71:65:f9:79:50:3f:f1:f4:41:e7:3f:89:01:22:
                    2e:da:74:39:a7:d4:de:7f:8d:bc:bb:7a:70:10:15:
                    0a:c3:95:34:93:e9:f2:1d:6c:f5:ce:3f:af:26:64:
                    01:61:72:4d:1f:e6:aa:f7:a6:b4:3d:e8:ba:0e:af:
                    62:93:31:30:d6:c2:d0:29:00:8c:ea:e8:d6:78:e7:
                    99:c6:b2:92:35:13:88:92:fa:c7:5a:ab:fe:06:01:
                    b3:55:1f:a1:35:cb:19:c6:49:81:f1:cc:6c:bf:15:
                    3b:19:f6:79:80:e1:44:4b:42:74:77:ec:81:9d:2e:
                    fd:4a:8a:f4:20:10:69:87:18:38:b7:0d:cc:69:1c:
                    bf:df:15:29:e7:ce:4c:b3:e7:93:da:4c:d4:a4:a1:
                    62:7c:c4:0e:aa:b4:e2:08:f2:d9:68:7c:eb:ab:44:
                    cb:b8:cc:ac:09:c8:72:d4:fd:74:4d:5b:a7:25:46:
                    1b:8b:52:d2:e9:74:2e:f6:17:cb:ae:ab:07:8e:3c:
                    93:74:f1:85:c2:49:f0:52:ae:39:5b:8b:a9:01:51:
                    51:72:82:cc:8b:46:70:c9:0d:8b:53:cb:96:68:a1:
                    43:a4:ec:37:56:7f:1d:47:a5:59:ea:1a:38:d0:84:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9B:A4:B8:E6:D9:93:15:30:14:40:B7:1A:EB:FB:51:62:98:1E:74
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:55:a1:01:f3:ec:53:53:b3:56:cb:0d:c9:b7:96:eb:7c:b9:
         95:bf:2c:95:06:11:06:8c:ee:1d:3e:69:92:e7:67:7e:de:50:
         d0:d1:61:42:74:5b:5d:0b:4f:ff:5e:21:7a:49:a4:53:66:00:
         45:60:44:13:40:85:89:30:0a:e6:a7:c9:f6:c2:35:a6:0e:61:
         8b:a8:98:b0:b4:9e:70:f0:1d:17:11:ec:42:02:99:b7:07:ad:
         89:a8:99:3a:38:4e:d2:85:6a:40:89:c0:12:c4:2d:16:fd:af:
         63:7c:52:7e:bc:4a:1b:bc:68:b9:3f:e5:c2:d1:17:8b:02:11:
         ce:85:02:90:13:18:f8:e8:1c:37:7a:3e:fa:4c:16:ad:fc:ef:
         25:bf:67:80:22:5f:d9:92:90:87:6a:e7:0f:53:20:f1:4d:33:
         f5:a8:a6:18:96:2b:ae:0a:00:89:8e:d1:50:4b:a6:eb:97:7d:
         25:42:ba:98:fb:b4:db:1c:2e:e5:5c:5e:31:5b:76:27:51:bf:
         e2:74:ae:25:c9:4a:1f:f2:bc:3a:e9:2a:a3:18:ab:6f:83:5e:
         8d:b8:4c:1b:63:2d:7e:d7:94:df:d2:97:0b:8a:55:1b:d8:ee:
         ef:3e:32:58:3d:a9:d7:d2:6d:3b:7f:dd:a9:04:58:d2:48:f2:
         ea:1f:f6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:09 2025 by rpki-client