This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft
File: O3CeEsRyrtPcUkKKnItWyiHI_KE.mft (raw, json)
Hash identifier: 2qH35xmVxMtxTD0SkIKCpN7+xt80AihzJUwjXf34aZA=
Subject key identifier: CD:39:46:8F:E9:2D:0B:F9:07:D6:D9:D3:E6:83:D4:47:C2:F0:C2:57
Authority key identifier: 3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1
Certificate issuer: /CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1
Certificate serial: 4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft
Manifest number: 0B2D
Signing time: Mon 26 Jan 2026 03:55:00 +0000
Manifest this update: Mon 26 Jan 2026 03:55:00 +0000
Manifest next update: Tue 10 Feb 2026 03:55:00 +0000
Files and hashes: 1: O3CeEsRyrtPcUkKKnItWyiHI_KE.crl (hash: 9diMI9tFlCzp/xfxjWspBOhMFm+Jq/sKWQAEwbGaxGw=)
2: rxykgL7JoynXvsov788xGVHj6cI.roa (hash: 5GO0DnT0DnuoSExFYjGIwWU7+pFbBLMrEoumVKGMT5k=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 06:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1
Validity
Not Before: Jan 15 01:33:52 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=CD39468FE92D0BF907D6D9D3E683D447C2F0C257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:de:e0:f8:af:d2:73:ce:c8:95:98:2b:a7:
e0:7b:5c:ec:4f:84:0f:db:94:7d:c1:30:b6:d4:7f:
cf:ef:e6:5e:66:d9:99:b2:95:bb:3b:cd:93:5a:9e:
b7:f4:c0:20:52:8d:ac:d0:82:a7:13:a0:31:82:dd:
53:42:23:2a:83:b3:b6:fe:65:5c:d0:da:8a:d6:9a:
9b:e2:aa:a0:aa:d9:02:aa:85:91:87:44:d0:d9:ac:
04:fe:81:17:5a:42:8b:7f:90:08:fe:a1:7a:7c:84:
9d:c0:6c:37:e5:ad:a9:a0:8c:45:61:4f:76:5e:70:
31:e0:0e:9f:78:df:26:84:0b:e4:6b:f2:22:ff:a5:
f6:23:7f:76:fc:7e:8d:84:a0:f3:02:cb:a0:59:32:
c7:e1:4d:5b:03:f0:55:66:6d:59:5a:f4:50:a5:6d:
92:ac:69:b8:46:cb:94:8c:03:c7:ed:98:7a:77:a2:
68:dc:99:5c:8e:0a:d1:6b:ca:66:96:91:03:6d:52:
5d:f1:14:91:3b:eb:43:2e:0b:e4:4e:3a:92:5a:7a:
85:38:4a:a8:41:b1:7c:92:b6:cf:94:4c:27:aa:d0:
b1:6b:ac:d0:5b:02:59:23:84:4b:8b:06:d9:64:97:
ef:86:f3:cf:23:ea:24:e7:8a:f8:60:16:60:60:d6:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:39:46:8F:E9:2D:0B:F9:07:D6:D9:D3:E6:83:D4:47:C2:F0:C2:57
X509v3 Authority Key Identifier:
keyid:3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a4:67:5a:3b:ed:b2:0b:ae:54:02:8a:7d:d5:9d:ec:85:f9:
61:22:cf:35:e1:9d:27:ac:69:fd:e3:b5:76:0a:49:3b:84:03:
bc:0c:6e:e7:66:8f:bb:de:4a:8e:99:f8:0a:04:aa:54:4e:8f:
21:dd:33:22:e6:d6:6d:fb:b6:5b:65:46:55:bd:6b:e8:83:fe:
39:64:6c:ca:e5:7c:65:ab:6d:d6:19:f7:9e:35:32:11:0f:4b:
93:33:04:68:fd:50:b3:c8:1e:2d:37:7f:b6:ed:fa:16:12:15:
7e:a6:0f:60:27:c3:4e:ce:54:a3:60:2a:95:ef:c5:16:b0:53:
d9:aa:00:1b:58:90:7e:d6:2b:e7:80:11:0a:ab:fa:f8:7a:d3:
30:ba:7a:41:39:fc:3e:61:26:2b:1d:65:d8:98:4a:6e:5d:75:
1c:b2:b9:b2:6a:da:10:44:e1:a9:8d:9c:73:ef:f0:5c:bd:8c:
a4:52:bc:25:61:b7:69:12:fb:91:76:5a:39:09:66:1c:a4:df:
64:49:fa:eb:8d:03:26:df:5e:a9:42:11:a6:7a:aa:c5:6b:c1:
2c:03:84:5f:ef:96:a0:45:f1:de:94:82:09:18:2b:ef:b5:5b:
7e:a9:59:15:70:98:ac:4b:8d:4c:ac:89:94:67:8b:6b:32:2b:
48:0f:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:02:04 2026 by rpki-client