This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
File: nbu4hcPSk50dl7JOrYvQZxca0rI.mft (raw, json)
Hash identifier: EuntpKLpu+J/9I1U50IQ07LerpDJ+mzwCrwti+hfVV0=
Subject key identifier: 02:CB:8E:F5:05:D8:5E:0E:F9:40:88:5D:95:CF:48:81:84:1F:9F:C1
Authority key identifier: 9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2
Certificate issuer: /CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2
Certificate serial: 02
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
Manifest number: 47
Signing time: Sun 25 Jan 2026 17:55:40 +0000
Manifest this update: Sun 25 Jan 2026 17:55:40 +0000
Manifest next update: Mon 09 Feb 2026 17:55:40 +0000
Files and hashes: 1: nbu4hcPSk50dl7JOrYvQZxca0rI.crl (hash: Jt0l9MOEnT6BRqELYX8Y1GaIGZ7VURtdAFWhJL6AUE0=)
2: ym9lEzlvUqETVEu2HRHsUYWsS4Y.roa (hash: vORPAPneVCCw5RW/G3qI7iJ3tnca1g4uiBb9fMTwsUE=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 15:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2
Validity
Not Before: Jan 15 01:31:28 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=02CB8EF505D85E0EF940885D95CF4881841F9FC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:86:64:f9:9a:40:28:48:49:95:a8:2a:74:
19:94:a6:d4:7a:da:23:fa:c5:01:54:58:26:e6:5a:
ee:bf:2d:57:fe:b9:04:06:fb:8c:ff:ac:30:3a:14:
2e:2d:90:bb:60:b3:d7:ed:f5:f9:02:a9:6e:91:96:
d9:70:33:bd:45:ab:87:45:6f:36:50:40:f5:6f:1a:
da:6c:6b:14:27:81:13:f1:aa:2f:18:6e:11:d2:50:
79:8e:c5:74:6c:a1:5e:52:c4:f6:3a:52:0f:32:51:
9f:3b:d8:cc:b5:e4:68:3d:ce:d5:1e:3a:91:62:c2:
4c:28:75:02:97:92:67:82:f7:b8:52:ea:98:08:c7:
97:30:97:f4:de:eb:f3:23:b5:75:1c:2b:d9:fb:79:
65:0f:75:d7:98:d7:bc:08:57:71:68:59:22:62:4e:
b9:8f:fc:66:3e:13:65:51:fa:2d:b0:fc:62:9c:53:
39:5f:08:01:cb:b0:c5:a5:2a:af:9c:a3:6f:a6:29:
78:e7:e6:02:0b:6a:a4:85:25:d4:4f:76:46:2b:ba:
fd:b2:84:a4:30:92:4d:18:56:27:b9:aa:1c:e9:9f:
a3:3d:fd:ad:df:f4:47:e0:cc:a4:cc:1f:46:eb:a1:
f8:08:fc:cb:af:a2:98:3d:3d:45:53:e3:b7:41:b9:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CB:8E:F5:05:D8:5E:0E:F9:40:88:5D:95:CF:48:81:84:1F:9F:C1
X509v3 Authority Key Identifier:
keyid:9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:98:f4:37:8a:d5:1c:75:74:2e:8e:58:3f:fd:fd:13:b0:40:
00:2e:b9:59:f0:e6:60:32:f0:0b:f3:3b:33:19:11:cb:27:b8:
56:25:92:1b:45:1f:f7:fe:d6:63:29:b4:13:d2:63:f1:2a:1f:
a0:45:4b:69:5b:16:41:82:13:47:15:29:52:30:5a:9b:4c:9b:
24:34:ae:62:97:3b:5b:50:5e:ef:e2:3e:99:ab:6c:fc:64:b6:
15:a1:ae:05:50:e0:5b:c8:cc:50:97:7d:7f:d9:44:ed:ff:28:
2a:07:35:48:81:6a:dd:fa:18:93:d5:60:09:40:07:72:5c:f2:
ef:39:9c:52:c7:61:59:56:05:62:01:d8:58:e2:49:3b:ff:64:
73:94:f6:b9:44:0c:cd:13:fe:50:a2:8a:e4:3d:62:be:d7:06:
cf:06:17:18:7a:23:3b:3f:40:40:ab:85:5f:1b:05:45:b7:9f:
2f:74:63:7e:7a:66:de:3c:62:b1:ec:42:f8:35:a9:84:ca:e3:
57:66:70:9f:31:ab:7c:c6:77:f7:8f:ee:20:47:5a:02:97:c7:
68:e5:44:fd:95:08:37:51:e6:f4:cb:da:36:c7:59:75:03:9f:
6c:6a:33:59:20:fa:ae:36:47:ed:33:9a:fc:6e:f9:75:37:f8:
c5:21:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:00:08 2026 by rpki-client