This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30054/tmVvfDkn0-UO9gE78kbGZjioANM.mft
File:                     tmVvfDkn0-UO9gE78kbGZjioANM.mft (raw, json)
Hash identifier:          E76kq/lw/DT09qNNOZLmNO10QzijZ/WA8QGqAbRPe0k=
Subject key identifier:   39:0A:48:6A:FE:36:F0:4C:DE:2E:17:BB:BD:55:2D:F7:F7:73:FA:FC
Authority key identifier: B6:65:6F:7C:39:27:D3:E5:0E:F6:01:3B:F2:46:C6:66:38:A8:00:D3
Certificate issuer:       /CN=B6656F7C3927D3E50EF6013BF246C66638A800D3
Certificate serial:       3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tmVvfDkn0-UO9gE78kbGZjioANM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30054/tmVvfDkn0-UO9gE78kbGZjioANM.mft
Manifest number:          0B08
Signing time:             Mon 26 Jan 2026 04:21:02 +0000
Manifest this update:     Mon 26 Jan 2026 04:21:02 +0000
Manifest next update:     Tue 10 Feb 2026 04:21:02 +0000
Files and hashes:         1: aoY0rVvYfHTe_xSJAKymfvKAELw.roa (hash: buVBfJBr9LGqkDCe2ascof95iE+OiqaSoc+qgb3I0pM=)
                          2: tmVvfDkn0-UO9gE78kbGZjioANM.crl (hash: 8GflEqsodaDjuv1Yj6qSSnHeF7yBRROfukartXE7Onc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30054/tmVvfDkn0-UO9gE78kbGZjioANM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30054/tmVvfDkn0-UO9gE78kbGZjioANM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tmVvfDkn0-UO9gE78kbGZjioANM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 06:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6656F7C3927D3E50EF6013BF246C66638A800D3
        Validity
            Not Before: Jan 15 01:34:30 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=390A486AFE36F04CDE2E17BBBD552DF7F773FAFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:70:d8:ee:5f:56:a6:07:17:f9:21:5d:10:
                    08:6e:6d:2b:e1:07:2d:8b:2b:20:58:ad:24:34:bb:
                    82:94:fa:cd:10:66:53:17:ec:ce:19:67:d7:3c:6a:
                    2d:74:64:1e:8b:91:42:e9:3c:d9:ac:88:98:8d:2c:
                    64:d8:d4:08:85:a5:b7:e6:3f:01:41:39:57:de:ac:
                    ee:58:98:4a:00:f1:d2:84:2f:32:17:6b:ff:08:76:
                    77:a6:10:4d:f1:a6:81:12:8c:85:25:3a:c8:4e:58:
                    a2:56:78:c9:0c:1c:16:77:54:7d:db:a5:30:6a:89:
                    8e:04:7c:95:5b:40:a3:eb:3e:8e:79:44:3f:b9:0d:
                    0e:7d:6d:48:e4:32:3f:bf:0b:b7:c4:77:b8:0f:25:
                    28:0c:e7:15:1d:d4:62:00:21:5f:70:b4:9a:07:0f:
                    16:43:05:f2:af:d1:d1:05:4b:67:e1:a6:83:16:da:
                    90:e7:20:af:94:ed:b0:8b:a5:d9:94:24:ef:8f:2b:
                    a3:0c:cd:d8:30:8b:b9:c4:8c:c8:2f:e6:c9:ac:c2:
                    9d:6a:ea:e5:25:68:5c:a7:f4:40:bc:19:51:81:00:
                    e9:06:e3:60:ad:f3:69:5f:73:d9:0d:0b:b1:ca:44:
                    9a:c9:83:66:13:71:5b:75:ca:10:bb:02:c4:8c:75:
                    1a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0A:48:6A:FE:36:F0:4C:DE:2E:17:BB:BD:55:2D:F7:F7:73:FA:FC
            X509v3 Authority Key Identifier:
                keyid:B6:65:6F:7C:39:27:D3:E5:0E:F6:01:3B:F2:46:C6:66:38:A8:00:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30054/tmVvfDkn0-UO9gE78kbGZjioANM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tmVvfDkn0-UO9gE78kbGZjioANM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30054/tmVvfDkn0-UO9gE78kbGZjioANM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:28:7a:90:e2:4d:67:08:2e:8c:b4:19:bd:df:b4:52:d2:11:
         62:8c:9b:bf:38:82:c9:9b:c9:c9:49:58:d1:a3:13:06:77:8b:
         7c:bf:a5:24:bf:e8:2c:9a:01:d2:29:c4:4a:23:2c:6b:0c:b5:
         4c:6e:0a:47:fe:fc:c2:a6:3f:35:84:49:fb:35:9d:ac:a0:6f:
         c2:19:4f:47:50:43:97:44:32:88:fd:43:9e:23:c9:89:dd:67:
         11:24:80:78:a3:70:b9:1d:c0:41:fa:90:50:9a:86:89:01:9e:
         aa:44:14:f5:5e:3c:d3:69:67:58:b2:49:5e:c7:c1:e9:96:b0:
         22:78:96:a7:9a:8f:32:95:d3:d0:00:7b:60:46:78:8d:a3:f8:
         0a:75:d8:e9:80:b4:3d:44:2e:e0:78:38:ca:04:40:60:42:2f:
         2e:10:06:3e:dc:b3:e3:01:41:e1:b8:4a:e1:c1:f7:c9:a7:b1:
         f0:37:c9:db:6d:e8:9f:6d:af:02:68:28:9c:c1:e5:80:51:34:
         5e:ff:2c:20:a9:8c:66:6f:c5:2a:24:c7:3e:cc:23:83:70:8f:
         30:12:29:55:ff:37:14:7a:98:08:3f:8f:67:4b:d1:a8:ac:1f:
         00:8e:1d:c5:c8:c8:aa:7d:8e:b6:a6:1a:10:b8:cf:f5:f4:f9:
         3f:74:c6:16
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNjY1
NkY3QzM5MjdEM0U1MEVGNjAxM0JGMjQ2QzY2NjM4QTgwMEQzMB4XDTI2MDExNTAx
MzQzMFoXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoMzkwQTQ4NkFGRTM2RjA0
Q0RFMkUxN0JCQkQ1NTJERjdGNzczRkFGQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANL/cNjuX1amBxf5IV0QCG5tK+EHLYsrIFitJDS7gpT6zRBmUxfs
zhln1zxqLXRkHouRQuk82ayImI0sZNjUCIWlt+Y/AUE5V96s7liYSgDx0oQvMhdr
/wh2d6YQTfGmgRKMhSU6yE5YolZ4yQwcFndUfdulMGqJjgR8lVtAo+s+jnlEP7kN
Dn1tSOQyP78Lt8R3uA8lKAznFR3UYgAhX3C0mgcPFkMF8q/R0QVLZ+GmgxbakOcg
r5TtsIul2ZQk748rowzN2DCLucSMyC/myazCnWrq5SVoXKf0QLwZUYEA6QbjYK3z
aV9z2Q0LscpEmsmDZhNxW3XKELsCxIx1GgECAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBQ5Ckhq/jbwTN4uF7u9VS3393P6/DAfBgNVHSMEGDAWgBS2ZW98OSfT5Q72ATvy
RsZmOKgA0zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNTQvdG1WdmZEa24wLVVPOWdFNzhrYkdaamlvQU5NLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdG1WdmZEa24wLVVPOWdFNzhrYkda
amlvQU5NLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDU0L3RtVnZmRGtuMC1VTzlnRTc4a2JHWmppb0FOTS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7KHqQ4k1nCC6MtBm937RS0hFijJu/OILJm8nJSVjRoxMGd4t8v6Uk
v+gsmgHSKcRKIyxrDLVMbgpH/vzCpj81hEn7NZ2soG/CGU9HUEOXRDKI/UOeI8mJ
3WcRJIB4o3C5HcBB+pBQmoaJAZ6qRBT1XjzTaWdYsklex8HplrAieJanmo8yldPQ
AHtgRniNo/gKddjpgLQ9RC7geDjKBEBgQi8uEAY+3LPjAUHhuErhwffJp7HwN8nb
beifba8CaCicweWAUTRe/ywgqYxmb8UqJMc+zCODcI8wEilV/zcUepgIP49nS9Go
rB8Ajh3FyMiqfY62phoQuM/19Pk/dMYW
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:02:44 2026 by rpki-client