This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
File:                     yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft (raw, json)
Hash identifier:          Bbd5WoIPQYyp7Z+/AyxRz5eddLXpoQAS46mz1LpnCtY=
Subject key identifier:   0D:39:7B:1E:74:5D:6D:F4:6E:3B:8E:CD:FE:54:C9:3F:66:DD:53:EA
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       87
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
Manifest number:          0B45
Signing time:             Sun 25 Jan 2026 23:32:42 +0000
Manifest this update:     Sun 25 Jan 2026 23:32:42 +0000
Manifest next update:     Mon 09 Feb 2026 23:32:42 +0000
Files and hashes:         1: 9OtReXpivMF1cpyFDnNFGM7ijcA.roa (hash: OR7CPwZ6MpHkZuOGG+e93YJLPJuneOSY4zyIdDNWnNQ=)
                          2: CDAwG6xx4G2yuH4jPsgXz2yDfuI.roa (hash: RBaBTPGeeD45uOTMFp+wq/rQCA3uDtcIdv8QYeJkeK8=)
                          3: SmpCeMzzEWGEIEcZUdh3lt8oa80.roa (hash: /Uox37FoYXH6eNTNB86Q4PbWJAKl1oSK7OCOLMxNbwk=)
                          4: bS-dW7McKcQWfsSCZKsKYJB7ivw.roa (hash: 6YggiAWt57JhOAVIjv8pworKPUEyvDQE3G1yWLj4gL0=)
                          5: gW0SUSx1KCDaQhK-dVpgtj9eUnU.roa (hash: AHOSoN/02Ut56nGoIwJCmjGgur2VYxhNH9yRofdyQ2M=)
                          6: ozQSdbcao1q2XLbqse6ejvXOC6o.roa (hash: KNxPC3AZLEybBjmnYWu2kx8x+IogZDif+Wq7bNzorEk=)
                          7: t2BnTgSFvmQuOG4nOvoz5VJHPR8.roa (hash: wU/5iSSqYGZKC2AHSc5jcwCDSZN+OgbZrIcAqX5i5fs=)
                          8: tmRXDBNLCSsrdJNLWdAlGLTpQpI.roa (hash: GhAaPEG/2cFDEhuE3hcsyBAwA7J82m48rmpOcH2NMJA=)
                          9: wc5lF7KvljLd2cELNKI-qEhSbis.roa (hash: vb4zNPPWYjlyqaH0oWjHMtjItqakcYwrEK2xf/zICyg=)
                          10: yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl (hash: zlrns1fPQO3rXyzUpHs+U+0fC9G4cjjUR7np/1OYJpU=)
                          11: yRslL42OrEG4wOocLeHugfdI5BM.roa (hash: jeXJjoXurOcXAlphxRZAZ+q4l7fzMqsWwHH+toAhSAI=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Jan 15 01:33:29 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=0D397B1E745D6DF46E3B8ECDFE54C93F66DD53EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:5c:88:61:a5:35:ad:2d:b1:ad:46:dc:9e:
                    ea:07:f0:d8:12:ab:1f:79:83:85:cd:88:dc:8e:a9:
                    1d:bd:2d:53:48:06:a9:f2:0a:07:2d:6a:a1:32:d7:
                    93:38:be:1a:eb:c9:46:19:9f:c9:53:4d:ae:be:8b:
                    14:7f:72:11:79:bc:7a:f7:ff:5c:50:e4:55:f2:77:
                    29:83:eb:7b:c7:73:91:15:9e:23:69:d7:b9:49:fa:
                    b7:1b:8f:d8:e8:56:61:c1:09:b3:cc:8c:35:72:3c:
                    6b:fa:c3:40:60:9b:75:b6:62:66:60:f1:07:03:e3:
                    5b:ea:3b:bf:e5:fc:e3:0b:f9:a1:52:80:c8:8d:a4:
                    e6:24:bb:77:15:fa:9e:1f:42:89:46:65:32:54:6c:
                    7f:08:1c:e7:fa:fc:0c:15:ae:52:c9:7e:a3:41:42:
                    40:af:9a:b8:f1:65:66:2f:1a:c3:d8:d0:0d:3e:04:
                    f3:70:a9:55:e0:25:c3:9d:46:46:89:8f:43:21:d8:
                    1a:4c:74:de:fc:fd:82:fd:13:76:96:da:bf:fb:a1:
                    fa:a9:40:46:f2:1d:be:4e:0d:cc:c1:3f:9d:09:63:
                    27:cd:6d:11:f8:de:e6:d8:48:1a:90:42:57:04:74:
                    35:fe:e1:a2:b7:a2:f4:fc:d1:0f:5d:65:f6:ce:16:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:39:7B:1E:74:5D:6D:F4:6E:3B:8E:CD:FE:54:C9:3F:66:DD:53:EA
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:3a:ff:b8:c2:a7:16:a3:8e:b3:02:a2:65:49:0c:00:e7:bb:
         d5:00:a9:55:b7:9b:0b:76:55:7b:14:cc:9f:8e:37:52:81:46:
         73:a5:df:bc:d6:e5:bb:79:15:9e:09:69:84:4c:cc:22:a6:e4:
         c6:e7:cc:f2:54:60:17:d7:85:b8:22:1f:6d:41:0e:ea:aa:b2:
         8b:92:c4:85:67:a9:34:a8:63:bd:4b:90:9c:23:2a:6e:c2:14:
         57:66:d0:4b:4b:29:e1:74:ef:e5:80:f4:3b:e6:3c:31:cc:0b:
         8b:07:b6:0f:95:b8:86:93:7b:87:08:f7:0c:03:d3:b7:f3:92:
         09:ed:56:09:75:6d:a4:20:53:d6:bc:e0:e6:ff:d0:a8:5f:f1:
         6f:78:fb:5b:fd:c6:fc:e4:70:e4:8a:ca:9b:c0:e3:22:8d:e3:
         4c:14:bf:d8:79:cc:45:34:80:b8:bb:61:b1:65:a1:82:f1:48:
         21:5a:ba:50:14:b7:3f:e5:ba:6f:9a:eb:8a:6e:a7:53:c9:88:
         e9:77:b7:9a:f7:24:4b:9b:69:ad:70:3a:0f:01:6c:61:85:e2:
         16:d1:4b:f6:22:ae:a1:c8:6a:3e:f9:dc:f7:3a:3c:8b:ca:d1:
         13:53:78:e7:6b:81:bd:82:c7:5e:c0:6d:f7:3a:d9:0f:19:97:
         57:a0:c6:72
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzgx
NEQ4NUJENDgzNjBBNjVEOUQ0MTQ0RUM2RDIwNzUyQzFFREM3RDAeFw0yNjAxMTUw
MTMzMjlaFw0yNzAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBEMzk3QjFFNzQ1RDZE
RjQ2RTNCOEVDREZFNTRDOTNGNjZERDUzRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr0VyIYaU1rS2xrUbcnuoH8NgSqx95g4XNiNyOqR29LVNIBqny
CgctaqEy15M4vhrryUYZn8lTTa6+ixR/chF5vHr3/1xQ5FXydymD63vHc5EVniNp
17lJ+rcbj9joVmHBCbPMjDVyPGv6w0Bgm3W2YmZg8QcD41vqO7/l/OML+aFSgMiN
pOYku3cV+p4fQolGZTJUbH8IHOf6/AwVrlLJfqNBQkCvmrjxZWYvGsPY0A0+BPNw
qVXgJcOdRkaJj0Mh2BpMdN78/YL9E3aW2r/7ofqpQEbyHb5ODczBP50JYyfNbRH4
3ubYSBqQQlcEdDX+4aK3ovT80Q9dZfbOFo/tAgMBAAGjggI9MIICOTAdBgNVHQ4E
FgQUDTl7HnRdbfRuO47N/lTJP2bdU+owHwYDVR0jBBgwFoAUyBTYW9SDYKZdnUFE
7G0gdSwe3H0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU3My95QlRZVzlTRFlLWmRuVUZFN0cwZ2RTd2UzSDAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95QlRZVzlTRFlLWmRuVUZFN0cwZ2RT
d2UzSDAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTczL3lCVFlXOVNEWUtaZG5VRkU3RzBnZFN3ZTNIMC5tZnQw
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQCPOv+4wqcWo46zAqJlSQwA57vVAKlVt5sLdlV7FMyfjjdSgUZzpd+81uW7
eRWeCWmETMwipuTG58zyVGAX14W4Ih9tQQ7qqrKLksSFZ6k0qGO9S5CcIypuwhRX
ZtBLSynhdO/lgPQ75jwxzAuLB7YPlbiGk3uHCPcMA9O385IJ7VYJdW2kIFPWvODm
/9CoX/FvePtb/cb85HDkisqbwOMijeNMFL/YecxFNIC4u2GxZaGC8UghWrpQFLc/
5bpvmuuKbqdTyYjpd7ea9yRLm2mtcDoPAWxhheIW0Uv2Iq6hyGo++dz3OjyLytET
U3jna4G9gsdewG33OtkPGZdXoMZy
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:06:42 2026 by rpki-client