This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
File:                     q2yEZLBStyD10sACDmQmtsftGGs.mft (raw, json)
Hash identifier:          xZod4//g6ZnDMj+8uBYJlRuH7RqMa5Ro81QIdXYT2Y8=
Subject key identifier:   69:C6:44:20:97:52:C3:1D:A7:0D:BD:C9:98:F2:23:AB:61:A3:68:FB
Authority key identifier: AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B
Certificate issuer:       /CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
Certificate serial:       21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
Manifest number:          0A85
Signing time:             Mon 26 Jan 2026 00:51:21 +0000
Manifest this update:     Mon 26 Jan 2026 00:51:21 +0000
Manifest next update:     Tue 10 Feb 2026 00:51:21 +0000
Files and hashes:         1: YsJIgATB39tNRPLD2FYqu0Fd-So.roa (hash: 85DDhX8IYygaLJEcJgCws9c9VwcXvzTFF9sd56k9d48=)
                          2: q2yEZLBStyD10sACDmQmtsftGGs.crl (hash: lXsR5BXehCuNlzHfnswmoh9SJUd4nxNT5R5xFYC4SMM=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
        Validity
            Not Before: Jan 15 01:37:54 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=69C644209752C31DA70DBDC998F223AB61A368FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:f0:08:38:21:92:25:0f:b8:70:8d:7b:a4:
                    28:ae:98:d3:4a:24:fc:7d:3c:99:9c:2a:cb:05:e8:
                    c9:26:39:e0:0e:cb:80:06:82:42:d3:a9:fb:01:4f:
                    eb:07:dc:b1:05:f3:9b:41:6b:e8:7e:8e:70:a9:0a:
                    ce:45:95:1e:83:9f:dd:b0:32:5e:fa:1d:aa:8c:49:
                    d2:ca:2a:8c:de:76:d4:b5:38:64:d7:a0:aa:eb:c8:
                    88:40:3a:86:2b:13:72:e7:78:d5:7d:31:db:cf:32:
                    1f:ec:e7:6f:ca:9b:94:ff:3a:68:1f:09:34:d3:6d:
                    bc:4e:df:57:da:5b:44:80:86:15:85:7e:7b:ec:5e:
                    2e:b8:43:e5:90:bb:1f:6b:76:ad:0a:46:93:a5:8f:
                    d3:40:88:4a:a3:87:27:29:07:a4:85:c8:3f:13:17:
                    37:ad:e7:4f:c1:fe:c1:85:ea:d6:a2:c4:95:2e:37:
                    ae:bf:9d:cf:07:e2:db:7c:9f:1c:a5:ad:d5:b5:b6:
                    08:11:b5:6e:70:be:99:98:bf:60:c4:6c:8d:98:35:
                    a2:44:9e:a1:69:03:d5:97:37:8b:3c:b4:0b:be:da:
                    f0:f1:f3:07:e7:7b:4c:3f:fe:3a:75:73:b3:f9:fe:
                    61:52:f9:a1:30:16:ef:d9:8b:99:50:3d:82:d1:35:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C6:44:20:97:52:C3:1D:A7:0D:BD:C9:98:F2:23:AB:61:A3:68:FB
            X509v3 Authority Key Identifier:
                keyid:AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:7f:56:cd:a2:ea:ee:ef:e8:ce:46:a5:c7:81:79:9b:41:92:
         cb:d6:54:83:e5:5b:de:68:79:3c:26:7a:86:48:e0:ae:20:03:
         00:c3:5f:ce:a1:d8:b4:1d:9e:f2:63:1a:dd:d2:ad:06:75:c6:
         e5:1a:3c:c2:83:04:c0:30:e9:e6:5b:cc:e8:c4:e7:09:19:51:
         a0:20:e6:06:8c:d5:d9:6f:6c:aa:04:3e:85:c1:90:a2:2f:50:
         29:78:70:06:78:73:b0:3e:4d:70:6c:13:ce:27:25:4b:57:e2:
         4d:d7:41:02:5c:85:09:12:56:b0:3d:a6:b7:01:c8:c8:31:8a:
         c7:e7:35:93:a7:0f:f2:3a:62:90:52:a8:17:4d:5e:f4:10:55:
         a0:f0:b6:e2:22:1e:cf:b9:67:03:8b:02:79:8d:64:38:c4:7a:
         1c:0a:90:5b:4b:09:d3:cd:eb:2b:b6:c3:36:74:c2:4a:f7:27:
         6e:99:e3:b3:a9:e3:e9:7c:9e:4e:5b:27:d4:64:58:9d:38:6c:
         cd:86:98:7c:18:a9:76:c2:46:4c:58:7b:aa:8d:b0:3c:84:e3:
         15:33:b5:fe:8a:b1:b7:a7:5d:e4:8c:bc:c3:a6:93:95:8c:83:
         c2:73:5e:eb:0d:55:0b:98:78:9d:64:65:34:9f:ac:cf:50:9e:
         57:f0:f3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:31:19 2026 by rpki-client