This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
File:                     qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft (raw, json)
Hash identifier:          zpnyw2nuu77NFU1ZKAFu8iInVODJcRPDe4UT9/AWon4=
Subject key identifier:   91:34:E8:0D:BF:9D:5A:B3:85:49:CD:9B:8A:33:30:36:49:2A:F7:A0
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       6A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
Manifest number:          09E6
Signing time:             Sat 22 Nov 2025 19:05:34 +0000
Manifest this update:     Sat 22 Nov 2025 19:05:34 +0000
Manifest next update:     Sun 07 Dec 2025 19:05:34 +0000
Files and hashes:         1: 5Hi5II5jIayLrKUp-nvrQr3PJF4.roa (hash: S2iXMSjj9YZuM3C436hhhXBzauDLNfMTmCUtl1GyO98=)
                          2: 77d_NB6-BPsDHNHq1qFbNR29K8s.roa (hash: Dzu83RLk7932jxZ8FAE8Oeltt3fZVWj1s1tyxWnLyjM=)
                          3: 7xhOacFwKUoQhWJMR403CSF5ooQ.roa (hash: kGNn10W2R0hTGmbwzBqUmZOJPd8RLy4QcJEjQCPWEv0=)
                          4: D69mHvRQirzJlu5CJlGLqDEeivw.roa (hash: vZ9rRlYbjtXNGNSSLngyUUKOlziWBYOUehj8Q32V9i8=)
                          5: TwJEe3dtoJ8dcxgPHiNAgtKgIZc.roa (hash: L1pqklHPHso3MG1ZJjEtLbApzqIKmAJH/VgTZkq+6Nc=)
                          6: d_Ug1aibOlfBP6TNC1N_ZM90Pno.roa (hash: 14LCYv+M1QAE6geWjma/muR7/AjjGBrPv4rInpw3ZD4=)
                          7: nr8eQMTzmU2hQDghfblKV5OLOac.roa (hash: iJU3ECypsH/9BterRqeAFzFbFS6BEAwowMcJ9gvBUkk=)
                          8: qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl (hash: LExonn5EBTAjWQTENoDPitO9YPoR+nRerUPmYIvESW8=)
                          9: w1SYH1Ou6UWGsPijFAQXLmGJFdE.roa (hash: NrXGWThrpVkK+Bc8xsOk+91Ng4fWbi8XHrgkLV2OOY0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: Nov 15 01:32:26 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=9134E80DBF9D5AB38549CD9B8A333036492AF7A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8d:60:2a:b4:6d:b3:7e:14:b9:dc:cc:59:03:
                    19:b5:5a:56:18:b0:db:ad:7a:83:0c:9e:39:27:45:
                    40:ac:bd:24:82:4e:09:ec:67:49:d3:a7:b2:d7:c9:
                    83:b5:2c:50:95:69:48:65:e2:a9:4b:70:41:5e:7d:
                    c8:f0:46:62:9c:96:5c:ba:28:f8:a0:97:45:0c:44:
                    90:2d:44:a6:d2:9d:c4:f7:76:45:48:d3:6d:43:f2:
                    e8:4f:6b:6b:74:94:c8:ab:07:8a:15:0e:a2:4c:06:
                    6c:df:a8:27:97:04:48:3c:70:b7:e6:d1:c2:55:f2:
                    f1:17:af:b8:63:0a:f7:66:d0:e4:43:b4:6a:1b:3e:
                    2e:5f:95:71:18:88:2f:44:e9:ad:24:7b:f6:f8:fc:
                    20:46:68:e8:16:12:9e:0a:7c:9c:fa:62:a7:d7:e0:
                    b4:6d:68:39:2e:2c:89:6f:af:5e:45:8b:ae:69:36:
                    4b:63:16:2c:94:5b:a1:4d:bc:91:86:a8:30:4b:cb:
                    a0:68:63:65:06:a6:c1:b7:32:bf:0f:f3:6f:2c:52:
                    3a:79:bb:a5:89:48:06:d8:f4:a3:05:c7:ae:c2:a5:
                    cf:69:fa:8d:ae:62:7a:75:66:b8:8a:49:00:79:89:
                    49:88:97:9a:72:20:bd:87:bc:8f:16:ed:81:08:37:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:34:E8:0D:BF:9D:5A:B3:85:49:CD:9B:8A:33:30:36:49:2A:F7:A0
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:6d:15:65:3a:61:e7:53:91:58:c1:eb:03:9f:a2:93:03:d6:
         92:35:cf:7e:17:6a:37:91:2d:2a:0d:ba:c8:0e:8d:5d:bb:13:
         87:ef:5d:ad:ce:ca:31:89:7f:35:54:5b:88:78:7f:9f:a5:c9:
         41:38:51:08:bb:1d:27:03:56:56:ec:21:93:40:7e:97:3d:ee:
         b0:78:1f:e3:b6:0d:61:37:77:63:be:07:23:3f:73:dd:5f:43:
         40:88:e4:37:23:72:0f:fb:b2:b8:ac:5f:96:d5:7c:fe:78:fa:
         cd:7d:1a:db:4c:2c:f8:b2:94:8d:2b:01:82:b0:bb:cd:1e:90:
         a3:ff:f4:fd:8b:56:7d:37:d2:cb:39:20:82:96:94:6e:e6:e6:
         7c:b4:67:f6:b5:bd:80:45:b4:21:7b:5b:3b:95:60:8e:37:aa:
         50:b7:76:ea:82:2b:d4:66:c0:9c:48:e2:54:0d:db:92:6d:a4:
         a9:c1:2f:cb:8a:9c:87:cd:af:64:52:a0:31:f6:fe:55:9c:a6:
         68:74:4e:89:6f:1d:50:11:b0:f8:57:60:bf:83:39:cf:15:17:
         d7:82:59:dd:56:12:ff:15:cd:af:4d:66:a3:c3:a6:2f:ce:79:
         91:8e:8b:2b:4a:64:90:63:71:f6:68:47:59:04:7f:31:54:83:
         2f:8f:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:16:20 2025 by rpki-client