This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
File:                     piJKoaybMP-6N30uvrl5ocN-0gI.mft (raw, json)
Hash identifier:          g4ooxabBnvSJTBN+mqYL8ZgYdStJjYKS+WdAxuYE/+I=
Subject key identifier:   6A:D9:8E:BB:EF:0D:03:66:E1:13:4D:50:10:C3:71:68:DB:A0:EC:92
Authority key identifier: A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02
Certificate issuer:       /CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
Certificate serial:       10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
Manifest number:          0751
Signing time:             Sun 25 Jan 2026 23:59:47 +0000
Manifest this update:     Sun 25 Jan 2026 23:59:47 +0000
Manifest next update:     Mon 09 Feb 2026 23:59:47 +0000
Files and hashes:         1: E7wiPInEht-zu-gG_gy_Z9sDius.roa (hash: bh0mazX8O8HzyFGyAfuLAkAaIyxr79ZBjlP4kagXbYE=)
                          2: piJKoaybMP-6N30uvrl5ocN-0gI.crl (hash: gdZR7/HMIipHIx5H0LFsuI5ipw29mVW6NQAj3NFwBNM=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
        Validity
            Not Before: Jan 15 01:30:28 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=6AD98EBBEF0D0366E1134D5010C37168DBA0EC92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:11:91:b3:d8:d1:dc:2e:fc:1c:58:ae:12:
                    01:58:b6:17:88:68:3b:1f:29:42:12:66:9f:cf:ff:
                    21:44:9a:84:bf:89:6b:62:6b:ed:f3:4c:d2:93:79:
                    fc:2b:12:73:9e:d1:b2:23:ec:87:bb:b5:27:7b:d7:
                    79:de:f8:51:f3:e5:3a:f3:e1:56:07:5e:9f:35:c7:
                    88:64:95:96:fe:a9:3f:05:13:6b:a4:5e:54:d6:53:
                    49:5c:30:94:a9:3c:fe:eb:a2:d8:d4:34:6a:7a:fc:
                    54:6b:68:c4:65:bc:9d:b6:af:1d:71:b0:76:36:98:
                    42:f0:00:d9:34:75:33:b0:e2:3c:ad:55:ec:eb:5e:
                    3f:d0:ca:a5:76:76:19:8a:bd:4b:53:b1:3b:c2:47:
                    a5:cc:01:75:e2:fe:71:10:72:36:b3:51:58:78:69:
                    54:0a:b0:0d:cf:46:f3:65:a7:3d:93:51:40:7e:23:
                    e8:15:59:fa:5c:07:cd:d2:ce:03:e7:76:35:01:1f:
                    f2:95:75:ac:02:14:af:86:f9:d8:76:f2:10:2b:59:
                    17:6e:71:8a:b1:cb:25:94:df:54:b1:64:85:67:38:
                    eb:3a:b2:4f:c1:a4:17:16:73:4b:f2:dc:a6:d2:24:
                    fe:ec:a7:5e:2a:b5:f1:24:41:96:21:03:3b:83:6a:
                    3a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D9:8E:BB:EF:0D:03:66:E1:13:4D:50:10:C3:71:68:DB:A0:EC:92
            X509v3 Authority Key Identifier:
                keyid:A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:4d:6e:0a:59:2e:b5:e6:eb:8e:ce:17:b3:47:e7:22:25:75:
         b2:d4:e8:dc:e5:c8:8e:06:dd:5b:63:7e:e5:d4:d3:4d:f1:d0:
         43:57:82:a6:a2:0f:96:e5:e6:de:b7:6f:66:6a:b0:4f:11:60:
         47:91:b9:4c:6f:68:50:87:4f:a5:d8:73:a5:b6:24:d6:29:84:
         ec:b9:22:c3:46:3a:b1:4c:53:2d:f1:48:49:96:e4:ec:51:92:
         27:5b:eb:c1:22:dd:e5:2c:a7:de:d9:e5:74:ef:1a:c9:4f:2e:
         be:76:2a:ca:39:17:7b:82:7e:91:cb:4c:37:9d:0a:55:45:25:
         fb:e6:35:8c:e1:9c:b7:5a:ba:0e:36:d8:1b:98:11:8f:bf:fd:
         aa:a6:5d:16:8c:eb:6f:bd:b1:86:cc:0f:1a:e4:b5:66:c4:0c:
         26:f4:1b:c8:73:b0:51:de:d3:be:1e:e6:1e:d0:04:87:ab:ca:
         04:63:81:82:bd:a4:d3:e1:ce:d2:e9:18:9b:71:e7:f7:47:60:
         cd:37:8b:5b:53:80:7a:93:e5:0f:d2:68:5b:fd:ee:81:6a:69:
         9e:dd:7c:29:a1:f3:7e:55:2d:2e:bf:70:16:99:b8:bd:5d:e5:
         a9:f7:65:ed:09:4b:60:9c:15:a6:03:65:6e:cd:84:77:77:93:
         d6:e7:07:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:31:22 2026 by rpki-client