This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
File: NkR8af6TQwpO9eshfECeu1tna7k.mft (raw, json)
Hash identifier: v5sCKL5XC0cQEYhhEtaGHubEkibXUDiaCk3d6VnhsTY=
Subject key identifier: 65:0B:E1:24:41:62:0D:F9:7B:EF:DF:B7:F0:5D:61:EB:BD:B3:DC:76
Authority key identifier: 36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9
Certificate issuer: /CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
Certificate serial: 34
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
Manifest number: 0AD4
Signing time: Sun 25 Jan 2026 20:37:16 +0000
Manifest this update: Sun 25 Jan 2026 20:37:16 +0000
Manifest next update: Mon 09 Feb 2026 20:37:16 +0000
Files and hashes: 1: NkR8af6TQwpO9eshfECeu1tna7k.crl (hash: QqQcnHvqwe5Gz2g3U5IglnFAa6rC1s74kgKLJ/io1qw=)
2: TzJlOK3LY0zBfBLbAaqnSIe9w3Y.roa (hash: STdnLSbbhfScoQZAi6A8jRkgnMGyOCxQDnWgT3KiPqY=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 19:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
Validity
Not Before: Jan 15 01:35:23 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=650BE12441620DF97BEFDFB7F05D61EBBDB3DC76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:73:57:a6:3f:73:ca:54:d2:5f:23:96:dc:
b9:19:13:03:b1:1f:9c:e3:ce:83:2b:05:a6:e2:b9:
d8:49:6c:f1:62:ee:e6:a6:ea:8a:20:d1:09:ee:70:
98:4d:2f:bf:96:5f:fc:33:ca:df:4a:57:3d:59:4c:
89:6f:d2:bc:2d:7d:87:d5:b6:e3:48:bc:98:18:81:
45:df:28:82:23:d7:ff:9d:36:d6:f9:c8:64:84:fe:
5c:62:7d:c3:ff:f7:e1:10:40:f1:34:51:cc:cf:89:
74:d1:a5:98:26:62:15:15:7b:30:f8:e6:46:bc:87:
0d:11:a0:c2:d4:87:fa:f1:cb:ed:c3:14:15:87:bd:
eb:68:ce:89:d0:b7:92:95:1c:10:af:6d:ad:b4:18:
31:40:db:56:37:48:9e:3c:3a:cd:35:e0:3e:44:2a:
1e:df:50:4f:d1:8b:3b:bb:bd:7e:3c:8c:f1:ee:b1:
d6:e8:55:f0:f2:b1:43:a8:cb:eb:cb:18:20:67:6c:
bd:e4:d3:82:9f:ed:49:74:8d:ed:df:4c:55:88:2f:
27:44:4b:04:64:7c:40:f8:59:1b:a1:a3:54:1e:f6:
26:92:25:61:56:33:6b:8a:2d:3b:83:4e:4b:98:7c:
62:02:dc:4d:16:6a:eb:71:2f:33:b9:05:b2:26:0f:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0B:E1:24:41:62:0D:F9:7B:EF:DF:B7:F0:5D:61:EB:BD:B3:DC:76
X509v3 Authority Key Identifier:
keyid:36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:73:70:6a:8f:13:7d:ae:ce:a0:32:35:60:37:0a:d2:54:13:
e0:2e:00:60:67:d9:df:61:88:dd:ac:ec:fa:6d:20:4a:5b:73:
23:ab:3c:59:04:8d:18:01:17:04:2f:4e:69:8f:9d:14:c3:28:
00:bb:3e:b9:61:2f:31:4f:18:35:2a:9a:6a:eb:1f:d9:ee:9d:
ca:6d:2a:16:37:8f:0f:e3:9b:9c:f2:f2:cd:93:3b:47:76:d1:
29:a0:45:2c:03:d2:6d:ef:a8:ad:de:94:cb:d5:fb:fc:b0:68:
69:4b:27:bd:71:44:fb:c0:9a:12:9e:45:30:75:82:8c:74:fc:
02:2e:a4:b6:15:42:c4:92:4a:7c:4f:c8:6a:cb:fd:e5:5b:f0:
ec:bf:10:2f:0d:02:d9:80:2b:2a:fe:d2:e8:b5:91:7c:a2:b2:
58:64:dc:a0:42:8a:c7:5e:d0:18:74:8f:b4:14:47:43:d7:2e:
89:0a:be:5a:dc:74:cd:85:91:24:69:69:5e:f1:e4:8c:20:8b:
9a:04:2d:46:c4:6c:a5:46:ea:6b:a1:56:c6:3b:a4:3f:88:87:
b4:95:0a:cc:f1:af:9d:3a:da:df:83:8c:57:a7:cf:49:7e:9b:
1f:6f:bb:cd:f8:18:ce:18:e4:bb:0a:33:df:61:3f:ea:49:2a:
8e:b6:b4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:07:59 2026 by rpki-client