This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
File:                     P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft (raw, json)
Hash identifier:          2sdMNwXmB3ojMwIeMDzGkFxNE0fOhVfKmYm+Cwsz/yM=
Subject key identifier:   3D:F6:94:50:58:15:9A:25:51:46:BE:EF:05:50:59:74:63:D7:F3:C3
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
Manifest number:          09B4
Signing time:             Sat 22 Nov 2025 19:23:45 +0000
Manifest this update:     Sat 22 Nov 2025 19:23:45 +0000
Manifest next update:     Sun 07 Dec 2025 19:23:45 +0000
Files and hashes:         1: 3w55Aq5_XhnR6Y9ZlHD5Wkz10Gk.roa (hash: 3+/WhNQ6P++yZG9d1hAWhq42rPOWkPbHwLv8sNj9/+I=)
                          2: 8US7P4mHK_grEZV8AkrPVaEF27M.roa (hash: UaTTU4ho6aHwr/pdfNHnRtBexghHpJ/HHHDfUrmgAl4=)
                          3: I0u5MDE6F4DKPKic_W8-whlIJw0.roa (hash: BOsD8TnNOsusXHnt8vxFUCkTY+49KCZRCWArh/WUsFE=)
                          4: P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl (hash: EyqW3h1JUvP7QiZKIkuG5Ug83X1dDp/qoVaspDOWYLg=)
                          5: P7xio0KA9JvheLkPt86LjIPBYec.roa (hash: rykWYT1aJFmJwifYoq3qoc6T0JxhaAR2am91Wf0Mf6Q=)
                          6: cPPtPhw2z4LG6OYrDRpgkW_0C-o.roa (hash: dtwettJTfHG1EU6GmD7qDvj7M81or3dZeGj7kB3j4js=)
                          7: iyg50tbe_yk-g7bROurgIxUlr34.roa (hash: frIgahydOSD1un3mp1eCw1ci/Wz40gW8PP2Tvd7PqWY=)
                          8: maL5VrMJiafk1Daw9XXuqSqi_8I.roa (hash: V5Lad3vwUUTiBuzDFnxVn6Es6FKPa8YoyME9Bf4DS2M=)
                          9: pOZ8eAgUlVI_-yL5pSuAtV1JM_k.roa (hash: 1XoX03XXVuCxzJMs8xyhBBCgnQ4SAcjhQljrZrRW1Pc=)
                          10: qh1hcK1IKFMdDa0PIXTMizvTOSI.roa (hash: +ucjTo31G0R+oxxk3rt9nVLGraAquFR++xE1vt9tvSU=)
                          11: vCOr-3jRfUTNBwgYg_kCDxQT1Fw.roa (hash: vve29zVaSc5+pN7xBYH0EHDtf95OmahggV+4O6xTfNg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: Nov 15 01:33:43 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=3DF6945058159A255146BEEF0550597463D7F3C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:4f:fe:fa:fe:30:77:63:32:d1:9b:de:bb:
                    92:69:4b:16:53:71:c0:79:26:ec:a8:1f:ca:c9:f6:
                    76:70:62:41:da:2c:7f:64:d4:c0:6a:1d:0d:be:6d:
                    fc:fa:e5:f0:f2:53:cc:11:8e:65:f2:28:17:f0:9a:
                    1b:e2:c8:7a:32:e1:c8:5a:49:ac:a0:6b:73:9a:d8:
                    83:f3:2e:b7:f6:58:53:6f:9e:12:0a:55:e3:1e:19:
                    ba:88:5c:1c:b2:25:1e:f3:45:8f:b4:8a:72:33:44:
                    96:99:5e:77:53:8a:42:69:40:e5:61:f8:3d:cb:54:
                    d4:ab:5e:6c:23:1f:d7:d0:4e:df:00:be:6a:a5:6d:
                    83:ba:7f:70:c2:20:26:10:71:cc:99:02:a3:cc:30:
                    0c:39:81:62:71:cf:f2:3e:bb:f9:03:d9:9a:a8:52:
                    71:7b:4f:7f:8e:ef:79:f3:3d:42:a3:73:4b:26:20:
                    d4:20:91:60:40:8a:02:ff:66:8b:22:31:eb:2b:9d:
                    f8:9d:06:09:d1:e9:c6:ad:f6:db:2d:34:47:c5:b3:
                    b5:7c:9e:3f:ea:14:65:0d:e1:a9:89:6a:bb:1f:4a:
                    4f:9f:9c:f1:a5:6c:bf:6e:09:7a:a7:ff:04:1f:37:
                    77:be:8c:67:68:96:a4:0f:7d:c6:2b:08:4b:e1:db:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F6:94:50:58:15:9A:25:51:46:BE:EF:05:50:59:74:63:D7:F3:C3
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a6:79:07:0d:91:58:9b:e9:1f:34:0b:f6:19:bd:32:aa:b1:
         48:c8:b2:e4:c0:7e:da:a8:00:e9:d3:fc:04:e7:ba:8d:d8:20:
         54:3d:35:16:a3:74:b4:c1:3c:c5:2c:80:06:ee:a0:7f:71:7d:
         9c:1c:e5:92:fc:b9:02:63:9b:87:a5:a3:a4:42:1b:42:cf:d0:
         c5:5a:df:2c:a8:da:76:17:6e:21:ba:9c:1e:10:00:7a:7e:b7:
         d8:c1:b2:4b:60:8e:ed:ce:0f:a9:ce:46:72:86:df:c7:69:4b:
         46:e5:91:e5:d9:ad:9e:09:94:b5:8f:fc:74:b2:38:44:e0:91:
         e4:b3:a8:fa:f6:ec:88:06:f4:ee:b0:25:fa:eb:cc:5c:ab:0f:
         e5:2b:70:a8:67:05:0f:18:09:bd:64:3f:22:2c:57:33:54:55:
         9c:a3:94:91:f4:c0:17:51:71:18:01:35:3c:6f:20:08:5c:32:
         69:4b:e0:25:1b:ff:5f:14:59:fc:70:7c:ad:27:6b:01:62:e6:
         4e:05:34:94:a9:21:4d:4c:9c:a1:b7:94:25:f8:df:34:31:9f:
         2e:44:33:0e:02:76:f2:3f:46:93:8d:1d:4a:e9:b4:5d:81:e6:
         bf:51:78:12:43:1a:12:8a:7c:3c:fd:77:56:84:4b:f4:41:9e:
         66:b8:f8:78
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRjkw
RjJGQkNBQTI1MzhDQTY1NzRGQjIyRDhDNkVCM0U5Q0EwNDZCMB4XDTI1MTExNTAx
MzM0M1oXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoM0RGNjk0NTA1ODE1OUEy
NTUxNDZCRUVGMDU1MDU5NzQ2M0Q3RjNDMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL9cT/76/jB3YzLRm967kmlLFlNxwHkm7Kgfysn2dnBiQdosf2TU
wGodDb5t/Prl8PJTzBGOZfIoF/CaG+LIejLhyFpJrKBrc5rYg/Mut/ZYU2+eEgpV
4x4ZuohcHLIlHvNFj7SKcjNElpled1OKQmlA5WH4PctU1KtebCMf19BO3wC+aqVt
g7p/cMIgJhBxzJkCo8wwDDmBYnHP8j67+QPZmqhScXtPf47vefM9QqNzSyYg1CCR
YECKAv9miyIx6yud+J0GCdHpxq322y00R8WztXyeP+oUZQ3hqYlqux9KT5+c8aVs
v24Jeqf/BB83d76MZ2iWpA99xisIS+Hb0OMCAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBQ99pRQWBWaJVFGvu8FUFl0Y9fzwzAfBgNVHSMEGDAWgBQ/kPL7yqJTjKZXT7It
jG6z6coEazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODU5L1A1RHktOHFpVTR5bVYwLXlMWXh1cy1uS0JHcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1A1RHktOHFpVTR5bVYwLXlMWXh1cy1u
S0JHcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NTkvUDVEeS04cWlVNHltVjAteUxZeHVzLW5LQkdzLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACSmeQcNkVib6R80C/YZvTKqsUjIsuTAftqoAOnT/ATnuo3YIFQ9NRajdLTB
PMUsgAbuoH9xfZwc5ZL8uQJjm4elo6RCG0LP0MVa3yyo2nYXbiG6nB4QAHp+t9jB
sktgju3OD6nORnKG38dpS0blkeXZrZ4JlLWP/HSyOETgkeSzqPr27IgG9O6wJfrr
zFyrD+UrcKhnBQ8YCb1kPyIsVzNUVZyjlJH0wBdRcRgBNTxvIAhcMmlL4CUb/18U
WfxwfK0nawFi5k4FNJSpIU1MnKG3lCX43zQxny5EMw4CdvI/RpONHUrptF2B5r9R
eBJDGhKKfDz9d1aES/RBnma4+Hg=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:14:26 2025 by rpki-client