This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
File:                     U5vfL-GP84f9A4QsUIGhRe7rHPc.mft (raw, json)
Hash identifier:          dW0i+wi78tPkmKYuEbwVkoOheUKBq6C5jFkddaZKjOc=
Subject key identifier:   23:06:FD:64:C5:01:0C:E0:33:EC:76:13:95:42:E8:EF:87:B2:6A:AD
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       4C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
Manifest number:          0AAF
Signing time:             Mon 26 Jan 2026 12:29:40 +0000
Manifest this update:     Mon 26 Jan 2026 12:29:40 +0000
Manifest next update:     Tue 10 Feb 2026 12:29:40 +0000
Files and hashes:         1: 0dTu7i0QE1MmdwBmZwQht6Ip4vs.roa (hash: brxXRnxehaTeJPUvvAv2aJPjGavcr32h8KRoz9Bm7Gw=)
                          2: 25n0k1GgZh2ksd47dcWAD9oCe3I.roa (hash: S/TZPxJ+L9ZqihZWiA88yicTJh2PCbxBitBAPBC1HDo=)
                          3: 9SDBBu7dJRVHkMbct_RYsMuJOPw.roa (hash: ka7qAiKZpcHEflgg9CKwwESmSFjL4Ac1Ce7/F1rUGnM=)
                          4: BoEAeyRkcZS_QFStonRbyOsKqIY.roa (hash: HVh+hGl1fpkAWkSLA3yxCdikcc1cEJeXrKJCPMwE21Y=)
                          5: U5vfL-GP84f9A4QsUIGhRe7rHPc.crl (hash: QAjvmlxnoyr/fp9Z+O4l1jC1+37HCuqlV7kLQf5AtN8=)
                          6: Y3rUQEevYw_edDBgVpD-bjNVHF4.roa (hash: zV7J/nP2DCikY9zTp0upJvJK9SIVxMCBvvS9CEPrg8U=)
                          7: ab18vAWCCiRQ0bei0-s0GDomD_I.roa (hash: UhpA28rPMETDzIUktf97td9keRGqG7FXmLLuw7baDN8=)
                          8: apOFNH78vG0gTf900P5kAmHoNsk.roa (hash: dBqz9Fcc/gKitPEJCAcIIwof0yyBuO9DZ0/RSe/IhKY=)
                          9: hYnSGc5uaroYvyZp3D8eGeNI5Vg.roa (hash: Y9ECUrETmTg7gcgYSfQn7KuDPoVmdxNRsPZR5PqcwTE=)
                          10: pSkGf5BEtL5V4Zc_sxR_VGsx7yI.roa (hash: WKdnDBbjK5F/bCNADBD533qf+yFHSEXW+/DjO6cl6qQ=)
                          11: rLBquink9VsRT-uwa7QWwjPvPls.roa (hash: plzJf/NOqQwLejq3UcQGiy72dV58pWHI/vyDhiAWDSw=)
                          12: u8Es1L1Qe3MCtDUpGSxSq5PjAEw.roa (hash: 22pWaa0D+vQjqZPAYHk+noJy9/zeBdhmPZHD2YqmvCI=)
                          13: z4hzQp2TWWjkLDbdgpW07hfU5bM.roa (hash: kLX/wF6QM+YLFZDpFMn8J1n5NJEhuMSpTF6LqwFMUTw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 12:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Jan 15 01:36:22 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=2306FD64C5010CE033EC76139542E8EF87B26AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:9c:9b:7b:d4:00:2b:07:28:3d:78:8f:d4:
                    90:eb:4c:7e:a9:9d:48:33:6e:3f:73:8a:30:d8:eb:
                    45:23:88:af:47:9e:a1:fa:c8:03:74:ea:ac:bb:8c:
                    59:bc:9c:aa:b7:fb:65:d6:f4:81:ca:05:45:75:2b:
                    92:66:ba:4e:7d:61:a3:68:11:96:07:cb:38:9a:88:
                    8f:9b:d5:c6:90:78:a6:54:71:ad:9e:a2:70:3c:eb:
                    c7:a6:f9:41:a5:4c:98:44:1c:19:40:85:cd:8f:7d:
                    a9:74:8c:1e:c0:04:27:3f:f2:45:0c:d8:60:82:0f:
                    4f:f3:96:28:b8:ac:f6:dd:8e:7a:5e:bc:30:0c:12:
                    b1:b9:5c:2e:95:a9:68:ef:05:2c:17:92:8b:9f:9c:
                    98:80:b6:a6:f6:2b:26:a0:58:b4:da:c0:a8:9f:a0:
                    c3:6d:f2:07:6e:0d:1b:24:52:32:46:73:86:df:91:
                    25:0c:d1:b9:f0:8a:db:95:25:49:28:ee:f0:f3:1a:
                    4d:d1:29:1b:95:d0:7b:45:9c:b4:81:3a:99:d6:7b:
                    47:51:a1:2f:51:16:5f:2e:54:e0:97:f1:74:79:cb:
                    7e:d1:12:26:5b:01:2b:3b:d5:76:9c:5c:46:09:94:
                    88:7b:c7:1f:74:72:f8:6d:4e:31:56:e8:a7:5c:a7:
                    c4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:06:FD:64:C5:01:0C:E0:33:EC:76:13:95:42:E8:EF:87:B2:6A:AD
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:48:8e:b0:c0:83:04:40:40:e6:64:0f:3c:b9:1b:f0:d0:87:
         ef:2e:05:c8:45:61:84:f1:a2:50:73:10:01:9f:fc:f2:10:3a:
         b3:0b:88:64:c1:e4:a6:48:1e:ed:c8:27:2b:a1:e5:70:a3:b7:
         83:5a:ba:16:21:78:f5:dc:38:b3:94:ba:0c:44:d8:77:4e:8d:
         5d:59:db:0e:0c:24:ce:97:68:8a:c9:e5:94:62:a1:0e:51:19:
         0e:43:15:b4:2d:1f:5c:fb:17:9b:9d:f3:5d:ed:9d:9d:4d:d1:
         e2:69:e0:bb:35:18:18:f1:74:ad:c8:ef:fd:6c:2d:71:d9:04:
         f9:f5:ec:d9:2b:dd:59:0d:15:67:06:d3:f4:0b:13:b1:7f:27:
         89:bf:5a:bc:c8:0e:fb:b6:e3:70:ec:cd:9e:00:37:26:35:e5:
         b9:94:52:fd:b8:d6:c8:4d:03:04:5e:fd:35:ae:fd:1f:f1:65:
         ad:f8:04:4c:27:93:5c:54:25:9b:e5:00:05:64:93:22:5e:57:
         8c:3e:41:06:59:c5:c2:c8:aa:47:6f:7d:e0:d6:c3:70:ab:2c:
         c9:0d:69:c9:16:f7:ff:62:63:b6:3d:7d:46:ec:c4:bd:38:4e:
         8b:c3:b9:3b:05:a3:7f:35:cc:91:de:40:ef:74:cf:57:11:f6:
         6c:74:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:08:55 2026 by rpki-client