This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.mft
File: 1TkKLCMKW2EqKT_v59qPAgwo9NM.mft (raw, json)
Hash identifier: mYbEQOGgtijGp4g583W8DEFQtByCXPRlV65SY6i9VKw=
Subject key identifier: A3:8A:37:F1:DE:C6:36:20:08:42:F0:09:33:F2:FB:73:50:65:89:C3
Authority key identifier: D5:39:0A:2C:23:0A:5B:61:2A:29:3F:EF:E7:DA:8F:02:0C:28:F4:D3
Certificate issuer: /CN=D5390A2C230A5B612A293FEFE7DA8F020C28F4D3
Certificate serial: 08
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1TkKLCMKW2EqKT_v59qPAgwo9NM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.mft
Manifest number: 0405
Signing time: Mon 26 Jan 2026 12:42:16 +0000
Manifest this update: Mon 26 Jan 2026 12:42:16 +0000
Manifest next update: Tue 10 Feb 2026 12:42:16 +0000
Files and hashes: 1: 1TkKLCMKW2EqKT_v59qPAgwo9NM.crl (hash: TJt6xPcno1mqx2RKDWeXsFkMv64jwxQ8km7D+kAnSOQ=)
2: KAkvCm1Si0s6WCgmUX5TVBI3Z-8.roa (hash: KHep59T5CVdF5TU0IYl97FEIx0T9mytxg55/06uDWGc=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1TkKLCMKW2EqKT_v59qPAgwo9NM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5390A2C230A5B612A293FEFE7DA8F020C28F4D3
Validity
Not Before: Jan 15 01:43:25 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=A38A37F1DEC636200842F00933F2FB73506589C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:24:9d:d1:14:a1:71:c3:b9:b4:5b:97:7f:
11:0d:fe:4a:64:8a:38:d9:bc:a5:f6:ca:c2:00:6a:
8e:7d:3a:e4:3d:7a:df:76:af:c3:8b:ec:b3:01:a3:
29:a9:40:11:cf:a0:25:83:16:c0:1c:b7:2f:73:28:
42:67:8c:08:c6:53:7f:32:35:dd:2f:37:fe:08:23:
82:d0:e2:1e:af:6b:8d:51:c6:37:a4:a1:60:b5:e8:
c4:a2:de:bf:3c:87:4e:bd:b5:42:f5:e3:84:ce:3a:
4c:02:6a:35:c7:46:71:83:cb:0e:cc:06:b2:47:db:
af:29:07:9f:50:e7:94:23:01:d5:13:7f:b5:5b:da:
8c:6a:57:83:16:d1:66:bf:69:3b:a8:8e:b8:4a:15:
30:26:30:65:b1:d2:7e:e0:f4:37:5d:2a:7c:99:cd:
15:70:d7:83:cd:e5:fc:59:3b:95:63:30:bb:40:41:
40:07:c4:cd:01:ec:35:f9:2e:d8:1d:4b:d4:b1:7a:
81:15:46:8c:71:8c:d1:8c:90:48:ec:f2:cf:bf:69:
e1:75:d1:d3:14:17:03:6d:48:f8:a2:68:85:fb:64:
5a:c4:5a:e3:5c:76:2f:06:e3:d0:b4:5d:0c:c4:83:
01:2c:12:42:06:4e:a9:7b:90:8c:bc:6f:2c:52:bf:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8A:37:F1:DE:C6:36:20:08:42:F0:09:33:F2:FB:73:50:65:89:C3
X509v3 Authority Key Identifier:
keyid:D5:39:0A:2C:23:0A:5B:61:2A:29:3F:EF:E7:DA:8F:02:0C:28:F4:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1TkKLCMKW2EqKT_v59qPAgwo9NM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:f5:17:4c:fe:01:02:f6:b3:3e:9e:80:ef:dd:77:05:62:3f:
41:13:ac:87:f1:59:b7:33:d6:a1:2c:bc:23:c4:7b:17:fe:f2:
5d:a3:38:9d:dc:38:e2:af:07:7a:71:ba:1c:2b:f9:79:69:b2:
2c:5b:ec:4e:6a:99:ee:5b:05:f3:84:07:0a:d0:a6:3a:85:ee:
3c:ef:2c:24:0f:fb:e5:30:c9:1a:ee:9f:a0:b9:5c:73:6e:22:
37:42:b1:12:8e:6a:98:b5:eb:a0:e6:dc:b9:ee:54:f3:52:3b:
b7:20:c8:86:ac:30:6d:c8:56:7d:a5:30:4e:bd:f1:c0:bc:5a:
94:a0:b1:fe:c0:e5:62:c7:d7:d0:b3:62:5c:e2:9b:83:f0:45:
3d:57:77:96:e7:dd:bc:8c:a7:59:94:de:0a:0c:69:b5:c7:e4:
27:4d:fb:2b:e2:54:12:48:89:60:c1:7b:74:c3:ca:f2:af:0a:
9f:cf:ba:97:f3:c1:e7:d4:aa:ee:70:d1:19:62:60:10:0c:2f:
14:78:0c:64:13:26:50:63:2f:a9:5e:4d:48:39:b6:8b:45:ee:
a4:e3:0b:d7:7b:63:59:5f:c8:80:18:ba:5c:33:72:fc:ee:18:
96:fd:ff:19:3e:fe:33:2a:47:d8:f5:e3:a6:29:97:49:76:0e:
c6:42:83:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:23:29 2026 by rpki-client