This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft
File: h9rsIO30ogEEI917AE4VdPETpzU.mft (raw, json)
Hash identifier: 1EZqwbytn8N/A7YenD/uUo3AjwYXTY+dSym37G+bI70=
Subject key identifier: 1F:00:71:20:23:AD:96:60:85:1F:4E:4E:C5:D3:34:5D:4F:CA:60:BD
Authority key identifier: 87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35
Certificate issuer: /CN=87DAEC20EDF4A2010423DD7B004E1574F113A735
Certificate serial: 46
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft
Manifest number: 0AF9
Signing time: Sun 25 Jan 2026 08:36:33 +0000
Manifest this update: Sun 25 Jan 2026 08:36:33 +0000
Manifest next update: Mon 09 Feb 2026 08:36:33 +0000
Files and hashes: 1: MrD_YS1Mv1spqa-jT_dN2RQkxV0.roa (hash: FZ+J5DiDLrROXm6TZ4rQwDyuzaN1Xm3+olTcY/ip1TU=)
2: h9rsIO30ogEEI917AE4VdPETpzU.crl (hash: aWuO21JprAR59tH7uE1aMFvYfBQydzlZIVdcLgbvDdg=)
3: hcpVdWaz68NS1lzqmKZe6RUW4lk.roa (hash: s5o9R3jz6Et+GYZYz//rTnJMZUngqYjE91uInA9SUeE=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 09:19:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87DAEC20EDF4A2010423DD7B004E1574F113A735
Validity
Not Before: Jan 15 01:34:45 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=1F00712023AD9660851F4E4EC5D3345D4FCA60BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:67:ef:0b:cb:3a:84:f1:2c:e7:d8:df:e8:
82:b1:d8:8b:da:34:68:4e:b6:f9:c7:99:fa:59:fa:
d1:08:00:b8:04:c2:36:f9:1d:b4:73:5f:96:f0:d8:
c4:5f:75:a4:10:44:33:35:1a:ce:7e:c1:fd:bd:d1:
fa:4e:e6:f4:52:53:67:ec:71:76:c6:96:f9:96:d2:
95:30:78:a1:89:1a:c9:4a:da:a0:8f:ab:b0:63:bf:
4a:64:ea:1b:c7:7b:ec:a0:87:9e:63:a8:6a:79:a5:
60:57:4d:2f:50:d4:8c:81:e7:c6:38:45:f1:2c:96:
a5:02:b6:f1:e2:8a:48:f7:4f:0c:91:0e:b7:1c:60:
f1:9f:f2:50:ba:cd:e4:87:4e:d0:34:f0:2c:b3:f2:
ff:4f:1f:37:a9:22:8f:50:aa:03:ed:e3:35:12:61:
f5:fd:d7:0c:6a:01:82:91:90:35:b9:33:05:c0:d8:
c4:25:03:ab:ba:92:f2:5f:2f:86:bb:e1:1a:78:c3:
93:63:95:c5:55:72:c4:c0:bf:ff:cd:63:2d:24:c7:
af:1f:ce:1a:57:51:61:86:8d:f9:b5:5f:4e:0a:01:
da:ca:89:62:23:97:12:61:62:7b:28:b9:fa:50:01:
93:c3:c3:a7:fd:a9:f8:e3:76:e0:28:1b:7b:df:30:
4c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:00:71:20:23:AD:96:60:85:1F:4E:4E:C5:D3:34:5D:4F:CA:60:BD
X509v3 Authority Key Identifier:
keyid:87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3e:a4:3c:34:83:81:c0:d0:53:72:d2:b8:42:47:68:5c:20:
5b:a0:dc:3a:c0:21:dc:ff:48:88:5b:e6:e8:e8:ad:3a:4c:ba:
63:cd:f7:ae:2c:b0:d7:9a:cb:dc:07:5e:fb:2e:2a:48:f0:c6:
7f:47:ac:39:6a:04:fb:0c:fa:02:a2:4b:dd:ca:78:35:8f:2d:
62:6e:c3:53:09:91:d5:b2:d7:ad:01:45:38:f2:cd:96:0e:ea:
64:b5:5c:6a:a1:33:0b:68:74:33:46:ec:05:cc:39:54:f9:43:
00:43:34:51:a3:e6:c3:b4:a0:4e:68:f8:b7:e6:16:8e:b6:d2:
03:35:09:6e:a9:1e:51:0d:1e:0f:f0:3c:1f:96:99:60:c6:59:
eb:8a:92:37:59:d8:41:09:7b:3e:15:97:81:4e:08:c4:bc:bf:
74:91:37:91:75:0b:b6:f0:86:a7:a4:a1:74:63:20:e5:0d:52:
2f:bf:08:61:a2:11:e0:73:68:d5:89:1a:48:03:49:55:7a:c2:
9d:5e:9f:4f:b0:53:18:71:2a:e7:a8:68:d0:d1:55:23:1b:f5:
3a:36:0d:29:02:5c:e3:9c:db:97:1d:22:9b:3c:97:f6:09:e1:
d1:b6:26:f1:1d:dd:03:a6:a3:0e:f3:7a:c5:30:40:4a:c9:32:
31:0f:a6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:30:09 2026 by rpki-client