This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.mft
File:                     PI4MyX9YNkHmwu8HfrwWaMTuaZk.mft (raw, json)
Hash identifier:          E/j2k2aScrsBzkM1CVVro7d3es+ol+tGHsq3rlaeyTw=
Subject key identifier:   19:BD:D6:92:02:36:59:82:D6:99:AA:5E:0B:4D:A6:23:B8:1F:C9:CD
Authority key identifier: 3C:8E:0C:C9:7F:58:36:41:E6:C2:EF:07:7E:BC:16:68:C4:EE:69:99
Certificate issuer:       /CN=3C8E0CC97F583641E6C2EF077EBC1668C4EE6999
Certificate serial:       21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.mft
Manifest number:          0A84
Signing time:             Mon 26 Jan 2026 00:34:53 +0000
Manifest this update:     Mon 26 Jan 2026 00:34:53 +0000
Manifest next update:     Tue 10 Feb 2026 00:34:53 +0000
Files and hashes:         1: JJyHDuj6_YIoQ3K3i1Bg9xCdP3I.roa (hash: 8AlIi0jbf84NphtPpxw4wDpzxw5XWx1l3rKs8tRfOG0=)
                          2: PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl (hash: /JjFbYrYKWVA415zjseUhdajW3gfXYz46xwrNcJIfIY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8E0CC97F583641E6C2EF077EBC1668C4EE6999
        Validity
            Not Before: Jan 15 01:42:16 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=19BDD69202365982D699AA5E0B4DA623B81FC9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:42:11:e9:5c:36:aa:f2:d0:9f:1e:a9:25:b0:
                    6b:1d:cf:f8:0d:2e:86:2d:d8:f0:9f:0b:b8:a9:e2:
                    66:f8:4a:b8:d3:05:ac:67:93:2e:c3:19:b7:fe:af:
                    90:84:f4:54:01:5c:11:f5:f4:fa:f8:e5:50:65:8c:
                    c1:6a:42:35:f9:b0:7a:a8:ca:e5:4d:c2:01:2b:df:
                    7d:1e:cd:b5:9e:ae:c1:9d:ce:1f:10:88:b2:4d:c7:
                    65:4f:12:3c:16:5a:64:40:cd:1b:61:71:7e:38:5e:
                    67:e6:fc:85:a9:c7:21:09:56:1f:3b:eb:81:87:fa:
                    b9:1d:d9:16:32:26:02:c2:2b:ae:7a:8e:91:af:33:
                    4b:44:ad:be:a3:60:64:32:e8:dd:90:db:61:0b:7a:
                    37:4d:aa:6e:30:04:39:77:b8:06:18:e9:1f:ba:98:
                    b8:ef:e4:e0:d3:88:80:27:e1:a5:dc:ab:f9:95:1d:
                    78:a1:36:fd:30:4c:fd:16:97:10:bb:4d:62:c4:0b:
                    4e:ca:ed:c3:15:64:f3:38:d3:e3:a8:ab:1b:81:1b:
                    1a:14:23:4f:0b:c5:7d:0f:5f:94:06:64:7a:0c:0a:
                    8c:4b:78:fc:01:94:f4:8e:27:0e:c7:4f:47:5b:6b:
                    5b:07:76:b2:a3:d5:8d:30:d7:f5:b2:9f:bc:76:7b:
                    49:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BD:D6:92:02:36:59:82:D6:99:AA:5E:0B:4D:A6:23:B8:1F:C9:CD
            X509v3 Authority Key Identifier:
                keyid:3C:8E:0C:C9:7F:58:36:41:E6:C2:EF:07:7E:BC:16:68:C4:EE:69:99

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5a:c3:01:f1:31:b7:c7:aa:8e:4f:6a:30:a3:b5:b5:80:15:
         f6:2b:6a:5d:ad:88:c7:13:02:89:68:58:29:71:72:8a:19:3b:
         ba:cf:9f:07:35:bc:7d:e0:6c:83:b5:e7:16:ce:a4:a8:7a:4d:
         b4:b0:b2:f2:86:7b:b3:b2:f6:ec:db:b0:9b:93:7a:07:fe:a5:
         cd:19:f8:45:dd:d8:a5:60:b0:3e:6c:1d:a1:6d:2f:4c:dc:f7:
         cb:3f:a3:1c:5c:33:9b:db:f3:fb:e1:72:a9:ab:f6:84:17:5f:
         55:b9:4a:33:b8:39:45:ac:5f:aa:1e:97:f4:43:49:fb:ae:bc:
         65:ed:fe:9f:9a:df:5a:81:15:b6:86:dc:1f:be:81:ed:b3:80:
         8b:c0:2b:a1:66:47:35:d6:bb:9f:11:ec:96:83:df:38:88:38:
         e4:15:1b:16:6a:70:0c:5c:99:eb:a5:6c:81:61:1a:ef:07:08:
         de:f7:db:b5:e4:16:ca:93:a5:38:97:2c:83:00:55:98:61:6c:
         97:82:7d:51:f2:35:2d:e7:0b:ac:2f:7f:88:ed:52:37:ea:c0:
         4d:8c:8e:82:88:ff:17:ae:2c:1c:96:81:fb:e1:56:38:3a:61:
         d6:4c:bf:09:33:2f:ff:52:fc:81:ce:cf:e3:b2:6e:9f:8c:f2:
         e1:bb:fb:c4
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQzhF
MENDOTdGNTgzNjQxRTZDMkVGMDc3RUJDMTY2OEM0RUU2OTk5MB4XDTI2MDExNTAx
NDIxNloXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoMTlCREQ2OTIwMjM2NTk4
MkQ2OTlBQTVFMEI0REE2MjNCODFGQzlDRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN1CEelcNqry0J8eqSWwax3P+A0uhi3Y8J8LuKniZvhKuNMFrGeT
LsMZt/6vkIT0VAFcEfX0+vjlUGWMwWpCNfmweqjK5U3CASvffR7NtZ6uwZ3OHxCI
sk3HZU8SPBZaZEDNG2FxfjheZ+b8hanHIQlWHzvrgYf6uR3ZFjImAsIrrnqOka8z
S0StvqNgZDLo3ZDbYQt6N02qbjAEOXe4BhjpH7qYuO/k4NOIgCfhpdyr+ZUdeKE2
/TBM/RaXELtNYsQLTsrtwxVk8zjT46irG4EbGhQjTwvFfQ9flAZkegwKjEt4/AGU
9I4nDsdPR1trWwd2sqPVjTDX9bKfvHZ7SfMCAwEAAaOCAj8wggI7MB0GA1UdDgQW
BBQZvdaSAjZZgtaZql4LTaYjuB/JzTAfBgNVHSMEGDAWgBQ8jgzJf1g2QebC7wd+
vBZoxO5pmTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTI2My9QSTRNeVg5WU5rSG13dThIZnJ3V2FNVHVhWmsuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9QSTRNeVg5WU5rSG13dThIZnJ3V2FN
VHVhWmsuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTI2My9QSTRNeVg5WU5rSG13dThIZnJ3V2FNVHVhWmsubWZ0
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAJ1rDAfExt8eqjk9qMKO1tYAV9itqXa2IxxMCiWhYKXFyihk7us+fBzW8
feBsg7XnFs6kqHpNtLCy8oZ7s7L27Nuwm5N6B/6lzRn4Rd3YpWCwPmwdoW0vTNz3
yz+jHFwzm9vz++Fyqav2hBdfVblKM7g5Raxfqh6X9ENJ+668Ze3+n5rfWoEVtobc
H76B7bOAi8AroWZHNda7nxHsloPfOIg45BUbFmpwDFyZ66VsgWEa7wcI3vfbteQW
ypOlOJcsgwBVmGFsl4J9UfI1LecLrC9/iO1SN+rATYyOgoj/F64sHJaB++FWODph
1ky/CTMv/1L8gc7P47Jun4zy4bv7xA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:32:01 2026 by rpki-client