This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
File:                     EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft (raw, json)
Hash identifier:          UlZNXkxeNGZgmAW28+b84GT15VGDTUtICUWAs0RZ8sc=
Subject key identifier:   A2:DB:FF:23:8A:85:9E:EF:BB:4D:B7:93:FD:7F:3A:61:A1:2B:2C:E6
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
Manifest number:          1CF3
Signing time:             Sun 25 Jan 2026 19:48:26 +0000
Manifest this update:     Sun 25 Jan 2026 19:48:26 +0000
Manifest next update:     Mon 09 Feb 2026 19:48:26 +0000
Files and hashes:         1: 3vcLkGdAkyeYB2dNUvSka_wHngg.roa (hash: Ank/GQ8gbIv5D7Bvyt3kImLf2TZVFiB9yEhAvHAXz3s=)
                          2: 5IjCZgSrV9ix_njviiE0Tk0YHHo.roa (hash: gJsoYwhkqnnrlN3plIV93fccMy4a17ZFnSve17lo5zw=)
                          3: 8t4_4obrL7QUpvNM99yzTRuS4uM.roa (hash: uHjukjOgqsJbZ3v64gV+WBraQJwW1gnZkwvQrlCo1ak=)
                          4: CSMu1ryvQioKDyD7cSxBe7ofaFc.roa (hash: YQ/qkuHtT+RdEiGqEt4CbHQh9IDnyoMgVQrj/u4CtQc=)
                          5: DXXbowcfgdOeYKvZHja2hi_9Apg.roa (hash: FovbXSYwUN4+b3NGj06GCzyiIUI6VAxGO3KK30uxsSc=)
                          6: EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl (hash: vQpMMTUOzwPZKMhFhlWF+brelm8hUb/CvekcyZ92Vvs=)
                          7: HvhrG5I-CcsH10EdewHmgM-K7s4.roa (hash: 3ZB4UQZQ2p8c9rJwyCR4QQdniHH+uSjMb5J8F96PJ/c=)
                          8: cMO06GRG2J_TBEs7JDUc9Q7t2EQ.roa (hash: k3cikG071HrMP7d0mL11iusgC1DMmeVtSh94BNMCMjM=)
                          9: gdZv4drrv_qKWuAEnCJNU_eQC8I.roa (hash: eh+k5WpKHBz2unz+/6s33I+ccEqv0KPmzLe+ydWDO6A=)
                          10: hAgHYHLvzwOgBfhZVr3TFwVIXxE.roa (hash: gScu5r7AykNEKqnD9IJuv6/CsSp+YjDDZY04/xreXLQ=)
                          11: kxvPJ3R4DXye7NedAjB8GbAa9Tk.roa (hash: OK2r7xyQjx5QTS1ZvQ2ZzHFs60LUceO4zGuf8NlHs3s=)
                          12: qfknMj3RijI1sUXaJWzboMC-qIE.roa (hash: yVEPIxeHlSOPePGOfvtC/THaWuoqrh2BsJ1gnr0OdeI=)
                          13: wbp3B_0KHkfU7GMiKWABSp2pC0A.roa (hash: 13OtEGGR/pNsqDh/OZGjAICfFYt64q37Wjbor1AnLxs=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Jan 15 01:38:41 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=A2DBFF238A859EEFBB4DB793FD7F3A61A12B2CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:6c:d2:72:c9:1f:db:e3:b2:49:f6:c7:c7:
                    5c:ec:bf:ad:a9:5a:2c:07:07:6e:da:77:23:a3:26:
                    90:c0:eb:93:89:97:11:10:e8:dc:23:34:fa:73:14:
                    12:bb:f5:16:71:5b:30:6a:77:f7:78:37:98:8f:c4:
                    63:1a:60:d2:d7:26:59:58:e2:65:58:14:44:77:00:
                    ec:0e:21:92:0d:08:88:a4:82:ec:d1:9f:81:63:8b:
                    c6:c4:64:d2:9c:ab:05:6a:1c:1a:d2:2f:c0:70:14:
                    8f:58:09:6f:0d:9f:c1:d7:3e:c6:36:8a:5c:24:0d:
                    a7:4a:f4:fe:95:75:d7:6d:47:e0:14:19:b1:2e:17:
                    b3:09:88:04:18:4c:17:c0:d5:00:c5:ab:29:39:2a:
                    b2:17:87:43:bd:58:13:04:fd:88:18:8c:42:9f:2a:
                    40:55:7b:38:4c:25:7d:e7:f7:54:a0:16:ae:d9:2f:
                    55:10:b9:eb:7a:1a:a2:b6:80:17:5d:a9:26:96:e1:
                    49:7a:7f:ab:6b:84:9f:58:0f:82:bf:7c:e9:48:81:
                    d5:74:34:fb:3a:0e:48:7c:88:1b:d6:ae:f4:05:0e:
                    fc:ac:6d:13:39:0f:f5:d4:51:7e:26:19:2f:35:64:
                    51:2d:2a:34:cc:fa:36:81:e0:fc:a7:1d:24:57:ed:
                    13:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DB:FF:23:8A:85:9E:EF:BB:4D:B7:93:FD:7F:3A:61:A1:2B:2C:E6
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:29:30:a1:42:0c:f3:7f:e6:b4:2f:51:d7:a5:a8:8c:a8:4f:
         65:e6:fc:b7:14:c8:ae:5a:2e:06:e1:fa:9e:ab:73:26:b8:c2:
         b4:0b:74:60:d3:e8:28:17:53:03:86:ff:79:51:0a:bd:8f:c6:
         00:22:52:9b:fe:db:e2:5a:1b:13:f0:f4:c4:e3:9e:b9:86:ce:
         9b:e6:d6:2e:ea:49:0d:26:e6:ba:19:1c:28:fa:57:37:ea:05:
         f6:eb:12:6c:2f:ea:ed:cc:85:56:9f:f5:e4:a2:2c:9d:cc:4b:
         aa:70:8f:2d:f8:9f:53:65:b3:51:e8:22:26:ba:cf:4c:e1:ad:
         71:69:39:36:37:a6:98:97:e4:e8:96:aa:6d:b5:a4:89:83:9d:
         a6:b4:c8:02:50:fd:62:b4:da:33:f2:9d:d4:46:c5:b0:71:14:
         00:4b:78:8a:c7:66:48:bb:41:33:eb:74:ba:22:32:4d:4e:c3:
         70:d7:8d:31:b1:3e:ab:1f:6c:98:56:24:b6:79:e4:e5:f2:b6:
         54:df:b6:6e:f0:8d:a3:74:7f:97:d4:c2:06:d2:c3:3c:23:d3:
         da:2e:92:70:84:99:d8:5a:b9:e4:06:68:65:7a:91:f1:ff:f8:
         f7:e8:36:0a:bf:de:16:4d:28:5e:b4:15:64:74:df:97:de:7e:
         a1:52:7c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:44:28 2026 by rpki-client