This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3408/0hYo4c5MkslRRGEeunThprW0oWk.mft
File:                     0hYo4c5MkslRRGEeunThprW0oWk.mft (raw, json)
Hash identifier:          8poPeUfqiRiufDc10nNLOq2FEKMyaaVUop3RS5WYgU4=
Subject key identifier:   D5:40:7E:89:B9:BB:75:BC:7A:76:72:50:55:80:6F:6B:44:2D:5F:72
Authority key identifier: D2:16:28:E1:CE:4C:92:C9:51:44:61:1E:BA:74:E1:A6:B5:B4:A1:69
Certificate issuer:       /CN=D21628E1CE4C92C95144611EBA74E1A6B5B4A169
Certificate serial:       2B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0hYo4c5MkslRRGEeunThprW0oWk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3408/0hYo4c5MkslRRGEeunThprW0oWk.mft
Manifest number:          0ABA
Signing time:             Mon 26 Jan 2026 01:37:12 +0000
Manifest this update:     Mon 26 Jan 2026 01:37:12 +0000
Manifest next update:     Tue 10 Feb 2026 01:37:12 +0000
Files and hashes:         1: 0hYo4c5MkslRRGEeunThprW0oWk.crl (hash: gXDUGVl3Z0ZAO6VbNUVtmI+wSeghcX4ZsqUZwbag9AQ=)
                          2: ID_D_gOsPydovCc_c2o-HJ-jtgU.roa (hash: 6YQCmCfK1/9c4l5MaEdudGqbtTtx860pdCvIoigKVZs=)
                          3: VyKurMnaYuqvdVGMhsZJvmbRa3M.roa (hash: mpeVNP1HmpnCCjPSD07uD+9L2ijd/V4riCJCx8CCZPc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3408/0hYo4c5MkslRRGEeunThprW0oWk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3408/0hYo4c5MkslRRGEeunThprW0oWk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0hYo4c5MkslRRGEeunThprW0oWk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 03:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21628E1CE4C92C95144611EBA74E1A6B5B4A169
        Validity
            Not Before: Jan 15 01:35:39 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=D5407E89B9BB75BC7A76725055806F6B442D5F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:30:d1:41:a4:3a:5d:35:74:bd:36:ef:43:
                    3d:b7:60:c4:a1:46:72:e3:c7:d9:86:ee:81:8a:7f:
                    5a:b1:5a:b2:90:56:95:f8:80:79:8f:31:18:9b:34:
                    a5:fb:cf:a3:92:01:91:3f:b6:fe:b9:75:e2:a1:e3:
                    d0:6e:7b:59:71:fd:89:48:3f:8f:bf:34:5b:bd:71:
                    78:2b:75:a4:04:d6:a1:b3:31:47:56:89:c1:03:c1:
                    25:a9:b4:06:a8:0f:a7:fd:36:95:84:ee:64:d9:b1:
                    5b:79:ee:cc:c1:fd:86:04:d3:5f:60:2c:e5:2d:0a:
                    30:63:95:fa:27:90:df:fb:b8:53:0a:fe:d1:e5:f3:
                    45:76:d2:74:9e:a5:23:9e:64:8e:dc:ba:0a:d3:72:
                    ea:5a:78:22:57:c6:19:5d:31:98:23:81:b6:d6:37:
                    6e:d2:df:8c:07:54:2b:ee:b7:8d:8c:65:32:c7:73:
                    0b:3b:21:80:a9:45:12:0e:76:dc:d5:48:ec:1a:54:
                    8c:3f:91:75:b0:55:87:1f:74:aa:55:e5:6a:cf:19:
                    57:2e:96:28:b8:c4:04:b1:08:ec:d7:59:fa:68:bf:
                    c9:a3:48:a0:aa:45:82:5d:dc:67:99:9a:b1:3c:2d:
                    24:f7:c4:19:cc:e7:b1:d4:c8:ce:72:66:03:c6:22:
                    74:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:40:7E:89:B9:BB:75:BC:7A:76:72:50:55:80:6F:6B:44:2D:5F:72
            X509v3 Authority Key Identifier:
                keyid:D2:16:28:E1:CE:4C:92:C9:51:44:61:1E:BA:74:E1:A6:B5:B4:A1:69

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3408/0hYo4c5MkslRRGEeunThprW0oWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0hYo4c5MkslRRGEeunThprW0oWk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3408/0hYo4c5MkslRRGEeunThprW0oWk.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:5d:2c:4e:ad:a6:cf:7d:84:5f:49:cb:9b:9f:c3:5a:90:84:
         eb:9e:d3:aa:f4:fe:90:36:bb:f2:0a:0d:5c:96:e0:cf:c6:9b:
         28:49:79:c6:91:63:88:d6:bd:01:22:51:34:cd:c1:54:8d:b7:
         b9:47:17:ff:bd:21:79:fe:17:f4:b0:cd:b6:46:58:7c:8c:0f:
         69:d6:18:7a:e0:86:d9:be:8c:7c:90:44:30:23:c3:cd:a5:20:
         a1:17:02:ba:51:38:4d:d6:03:b0:73:4a:a9:01:d5:4a:47:23:
         a4:99:0a:14:b3:86:b3:c3:5f:dd:12:e1:df:3f:f8:2f:5f:3f:
         56:ed:19:fe:ce:24:4b:1c:25:5e:a9:92:63:8a:e1:02:e1:9c:
         f7:f5:b3:90:3d:9e:5b:51:71:7a:21:d4:38:e4:82:52:25:94:
         70:52:7b:2b:98:f2:ba:31:f3:b0:22:c8:47:21:04:d9:3c:5d:
         11:8e:22:ee:ff:21:a3:59:bc:53:08:ff:4f:66:3f:49:a9:da:
         a6:22:de:53:ed:5f:76:26:48:af:19:3f:d2:b8:4d:e3:3e:e6:
         5f:66:b5:0a:0f:3f:be:be:de:83:36:a3:fc:97:59:89:c4:e4:
         3c:51:f0:e2:8d:c3:b0:d9:20:69:54:de:c5:ec:a8:f4:30:cd:
         11:6c:19:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:12:23 2026 by rpki-client