This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2344/PbsW67aNlauUvG44o6PxmiX25sA.mft
File: PbsW67aNlauUvG44o6PxmiX25sA.mft (raw, json)
Hash identifier: pn/hzr+Wz9wkcwMy0CInf7tsJeesxAW43fXfUI+bCEI=
Subject key identifier: D8:28:D1:3F:C2:DB:4E:3B:4D:DB:ED:43:48:54:8D:3A:C3:2E:12:35
Authority key identifier: 3D:BB:16:EB:B6:8D:95:AB:94:BC:6E:38:A3:A3:F1:9A:25:F6:E6:C0
Certificate issuer: /CN=3DBB16EBB68D95AB94BC6E38A3A3F19A25F6E6C0
Certificate serial: 04
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PbsW67aNlauUvG44o6PxmiX25sA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/PbsW67aNlauUvG44o6PxmiX25sA.mft
Manifest number: 0233
Signing time: Mon 12 Jan 2026 11:25:22 +0000
Manifest this update: Mon 12 Jan 2026 11:25:22 +0000
Manifest next update: Tue 27 Jan 2026 11:25:22 +0000
Files and hashes: 1: PbsW67aNlauUvG44o6PxmiX25sA.crl (hash: 4Tw5gb4/WbytoQdOzLAJJq8wysmUXfj+t3jWROYTeeo=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/PbsW67aNlauUvG44o6PxmiX25sA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/PbsW67aNlauUvG44o6PxmiX25sA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PbsW67aNlauUvG44o6PxmiX25sA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 10:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DBB16EBB68D95AB94BC6E38A3A3F19A25F6E6C0
Validity
Not Before: Dec 15 01:32:12 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=D828D13FC2DB4E3B4DDBED4348548D3AC32E1235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:aa:7a:5d:c7:28:f8:ab:9d:c9:dd:b9:5c:
eb:5a:93:1d:49:79:43:e0:aa:40:09:ca:dd:c7:5e:
4e:d6:2e:07:b5:68:5b:34:49:2b:bd:bf:44:4e:04:
91:c9:74:a7:2a:14:47:08:68:0f:5f:2c:64:36:79:
07:50:9f:37:72:ae:10:c2:ae:58:3b:60:07:f5:25:
39:16:ca:19:c0:42:4b:6b:34:e7:95:10:04:47:58:
82:50:d5:f4:70:42:10:d0:c1:b2:20:e3:28:2f:09:
04:e9:d9:94:5f:72:6a:9c:6f:3c:e7:c5:31:87:57:
c0:2e:69:42:5c:95:89:a8:33:cd:7c:d5:74:c7:0c:
30:37:0a:a4:b8:92:7b:a3:f2:29:7d:13:fa:f0:56:
8b:76:4c:e3:16:ab:c6:20:f2:4e:0e:8f:08:38:af:
9c:47:71:a2:84:c7:e2:27:74:67:d7:fe:3c:ee:75:
f0:37:31:56:c6:7f:a4:9b:8b:eb:49:40:c5:76:90:
cc:6c:97:c0:87:43:17:0d:7c:ec:d8:96:7d:de:19:
a8:74:f4:a4:26:af:63:97:c9:2f:ed:b7:b8:cb:87:
78:18:10:07:fc:3c:e8:a8:eb:e2:fb:ff:d8:a6:91:
c8:05:87:5f:84:ca:8a:ae:1e:c9:f1:f6:cb:79:37:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:28:D1:3F:C2:DB:4E:3B:4D:DB:ED:43:48:54:8D:3A:C3:2E:12:35
X509v3 Authority Key Identifier:
keyid:3D:BB:16:EB:B6:8D:95:AB:94:BC:6E:38:A3:A3:F1:9A:25:F6:E6:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/PbsW67aNlauUvG44o6PxmiX25sA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PbsW67aNlauUvG44o6PxmiX25sA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/PbsW67aNlauUvG44o6PxmiX25sA.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:ae:ad:99:24:de:5f:0f:4c:0e:70:7b:52:b0:6d:f8:b1:4f:
f6:95:d0:69:2e:1f:49:93:0f:ad:0f:78:dc:26:55:b8:c3:a9:
0c:6e:ee:ee:7e:24:b1:3e:07:00:e3:df:88:cd:43:83:37:12:
77:e5:2b:5a:b1:d2:27:f2:8b:2a:56:31:e0:b3:26:27:de:7e:
55:d9:8e:a8:4c:2c:11:ad:a3:19:e5:30:39:0a:28:19:77:ec:
6a:71:cd:c3:e7:2f:ac:60:0d:f4:de:18:69:40:66:ed:80:c0:
81:91:b5:a8:f6:d0:ea:ca:6d:08:f2:cd:44:53:47:02:bf:6a:
6b:0f:44:87:a1:24:de:c2:09:30:e8:13:dc:fb:5d:c0:f7:5f:
d2:50:b8:2f:84:a0:ed:b8:f0:08:15:a0:6d:90:46:fb:75:b1:
e6:59:d3:06:15:61:ab:92:cc:14:2e:69:14:e2:67:ad:4d:58:
da:81:ba:8a:ca:02:a5:89:58:55:ed:23:c1:a1:16:da:24:2b:
07:bd:a3:16:c3:34:20:29:b5:32:41:26:1a:af:b5:cb:9c:fe:
01:d4:7a:ed:ac:1e:dc:18:80:5f:c7:4a:9d:87:2b:ee:c1:e6:
ab:dd:f4:32:32:c2:d9:1b:cc:ee:bc:9e:f0:fe:1a:7b:5c:4e:
ed:31:eb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:13:20 2026 by rpki-client