Manifest

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
File:                     FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json)
Hash identifier:          t4C0a+Sj+pg1SFn70HcjyL1en0kvGirLI5A0/WijKyw=
Subject key identifier:   7D:48:08:8C:B1:6D:94:96:E6:5A:61:F3:FC:A7:04:06:C6:93:53:95
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       5A11FF80CCD38FA86CBDC882EC6F5B0EE2D40728
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
Manifest number:          07A1
Signing time:             Thu 02 May 2024 11:00:00 +0000
Manifest this update:     Thu 02 May 2024 10:55:00 +0000
Manifest next update:     Fri 03 May 2024 11:00:00 +0000
Files and hashes:         1: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: QEovfwngluzW1OdWHgqdqgsMmpZk0S2akp86vfWfS64=)
                          2: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: dtJg25DLWyz0zFzEmPGZYOuijcAMqxDZS9hH1WUnAvY=)
                          3: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 4OKNzXQZaQBFPJeT8CDvUSfceSgDf/4rXnVpojNI/K8=)
                          4: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: S+k6sDy/aBYq10vSWW6GxvvJJw/U5GaFZGHVZnCCZ68=)
                          5: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: MoZJKyTQ87kKxu2ejbfezItwOeIEAvhL/lZWPvUke70=)
                          6: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: Z2kToLXpI7c0b1PbtL91xustIKaSxJN+JMus3cPU16A=)
                          7: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: 49L2LQW9c5IgH7Ybceennr8SuvgOI0+ebX5fXGXjg00=)
                          8: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: MAbIUElpvFGTdzArltpZ/RudA4ffnwWPNRH58qLgk6U=)
                          9: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: RxGsIdlN6yfFJt01yqfdvZ4I2uLCgu9ShQWrUWlq200=)
                          10: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: SYZ2OH+k2YISjuktZbG4B3PzStjw5pYcBLRc6bwXWhs=)
                          11: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: 2y5RrEm7AmncXQavryz34HGOq3g39MIR1G4EV+1W3mM=)
                          12: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: CfFGit4cz8Im152rFnV7muQ0Cl5ndiWxfPL70dNC/G0=)
                          13: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: o3F/bydf3No0iTGX5upcp8bfx8ynAY7P3fXxUtAS1rI=)
                          14: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: G+XcX1/8cBGg+LRrm3xDy7bx8agCbHKWzMeUncXRv2c=)
                          15: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: qmtN8NiOPZWmtfFTQ+rmZl7tpBpeX9jfrIjAtoE93/g=)
                          16: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: eTLy/rY002hBPuygo79gy6WtD/WQk8Tuf3awi/rYdH8=)
                          17: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: QvWt+mYVbqg4EvfCf4LuV8jFBkDOKhmHPp36TZtK9DE=)
                          18: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: NC46EeBAd+aePRB8f9CzQf6C6pep7n/solMPrbFb3xY=)
                          19: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: Ey6/pdWtzRm/CBKBZ8uStFOA2aGd+FdlNsTVeyBIrb4=)

Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 10:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:11:ff:80:cc:d3:8f:a8:6c:bd:c8:82:ec:6f:5b:0e:e2:d4:07:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: May  2 10:55:00 2024 GMT
            Not After : May  9 11:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:92:dc:4d:6f:95:65:e0:9a:a5:d1:36:19:a4:
                    bb:9e:3d:52:7a:81:c8:02:50:dd:ba:51:3d:ae:eb:
                    9d:0f:38:04:94:1d:a5:0a:b7:7c:4f:9f:20:3f:32:
                    82:3d:0e:11:a9:a8:3a:09:60:6d:a1:64:8f:7e:4d:
                    6e:28:4e:c1:41:e6:8c:3b:85:79:50:a3:0b:1a:13:
                    7f:44:cd:8d:d2:d7:e6:24:08:36:1a:2c:42:53:6a:
                    9f:cc:77:a8:60:49:20:73:8e:e9:1c:51:32:e0:aa:
                    75:06:86:41:8b:6b:0c:84:ea:0d:ad:7b:2b:cb:da:
                    9e:3a:16:74:c9:1c:c8:28:d6:0a:46:79:62:bf:4f:
                    b7:d9:67:38:49:42:14:d3:41:a1:39:7b:c2:09:d6:
                    df:fe:7d:15:85:26:ab:d3:94:7b:df:58:53:d7:92:
                    10:67:56:8b:6c:b2:b7:bc:7a:3e:56:fe:db:d9:04:
                    c0:88:67:2b:7f:9d:42:b1:7c:1c:02:99:a3:35:10:
                    72:82:e9:64:14:cc:a8:9a:3f:a1:89:dc:4a:1d:8e:
                    e6:b1:97:c5:9b:6d:92:09:2a:c9:e3:b9:5a:a1:48:
                    69:87:0b:25:09:65:f9:df:7d:2c:14:4e:d0:96:af:
                    28:00:2e:a2:05:50:52:39:32:7a:28:76:70:06:0d:
                    96:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:48:08:8C:B1:6D:94:96:E6:5A:61:F3:FC:A7:04:06:C6:93:53:95
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:82:a3:cc:c7:5a:5d:6f:55:3b:33:0c:87:fb:b7:10:ab:4a:
         d2:f8:d6:61:1e:97:81:14:7a:47:e0:41:49:31:39:eb:77:03:
         d3:a4:eb:6a:ff:c2:ff:f8:12:0f:29:b5:40:d9:b9:99:ef:f1:
         82:82:f7:c0:85:99:7a:be:6c:a6:8e:b5:9b:5c:5f:4e:96:e9:
         c7:a2:7c:04:b1:93:69:da:1a:6d:ff:3b:9b:00:15:38:79:36:
         c6:c8:fd:69:42:f0:e9:a3:4d:cd:b5:c2:eb:61:30:85:1d:df:
         b4:65:42:8e:73:2f:bc:f3:63:fd:27:fb:4c:37:63:d6:b2:28:
         37:5d:ef:dc:f8:48:00:c0:ee:7c:bc:da:10:1a:58:c7:26:4e:
         19:66:7f:8b:77:ed:e0:f6:54:c2:17:2f:0b:22:89:cb:02:9f:
         8b:ab:df:74:b9:22:41:11:86:aa:f1:69:99:79:09:83:13:b0:
         27:b9:b6:f7:7c:ba:7d:ef:7c:59:94:57:bd:d6:13:fe:7a:04:
         9b:e4:32:44:97:e8:aa:9f:9c:3b:b7:81:b5:54:25:07:aa:da:
         ab:64:34:30:31:9f:9b:f9:62:72:34:d2:4b:c3:99:57:13:2e:
         2f:6d:c0:7a:fb:65:b4:52:9a:4e:89:79:c4:cf:63:3a:09:eb:
         1f:7f:e7:b6
-----BEGIN CERTIFICATE-----
MIIG4DCCBcigAwIBAgIUWhH/gMzTj6hsvciC7G9bDuLUBygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy
QkQ4MzdBNzAeFw0yNDA1MDIxMDU1MDBaFw0yNDA1MDkxMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTY5MkRDNEQ2Rjk1NjVFMDlB
QTVEMTM2MTlBNEJCOUUzRDUyN0E4MUM4MDI1MEREQkE1MTNEQUVFQjlEMEYzODA0
OTQxREE1MEFCNzdDNEY5RjIwM0YzMjgyM0QwRTExQTlBODNBMDk2MDZEQTE2NDhG
N0U0RDZFMjg0RUMxNDFFNjhDM0I4NTc5NTBBMzBCMUExMzdGNDRDRDhERDJEN0U2
MjQwODM2MUEyQzQyNTM2QTlGQ0M3N0E4NjA0OTIwNzM4RUU5MUM1MTMyRTBBQTc1
MDY4NjQxOEI2QjBDODRFQTBEQUQ3QjJCQ0JEQTlFM0ExNjc0QzkxQ0M4MjhENjBB
NDY3OTYyQkY0RkI3RDk2NzM4NDk0MjE0RDM0MUExMzk3QkMyMDlENkRGRkU3RDE1
ODUyNkFCRDM5NDdCREY1ODUzRDc5MjEwNjc1NjhCNkNCMkI3QkM3QTNFNTZGRURC
RDkwNEMwODg2NzJCN0Y5RDQyQjE3QzFDMDI5OUEzMzUxMDcyODJFOTY0MTRDQ0E4
OUEzRkExODlEQzRBMUQ4RUU2QjE5N0M1OUI2RDkyMDkyQUM5RTNCOTVBQTE0ODY5
ODcwQjI1MDk2NUY5REY3RDJDMTQ0RUQwOTZBRjI4MDAyRUEyMDU1MDUyMzkzMjdB
Mjg3NjcwMDYwRDk2RTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAlpLcTW+VZeCapdE2GaS7nj1SeoHIAlDdulE9ruudDzgElB2lCrd8
T58gPzKCPQ4Rqag6CWBtoWSPfk1uKE7BQeaMO4V5UKMLGhN/RM2N0tfmJAg2GixC
U2qfzHeoYEkgc47pHFEy4Kp1BoZBi2sMhOoNrXsry9qeOhZ0yRzIKNYKRnliv0+3
2Wc4SUIU00GhOXvCCdbf/n0VhSar05R731hT15IQZ1aLbLK3vHo+Vv7b2QTAiGcr
f51CsXwcApmjNRBygulkFMyomj+hidxKHY7msZfFm22SCSrJ47laoUhphwslCWX5
330sFE7Qlq8oAC6iBVBSOTJ6KHZwBg2W5QIDAQABo4IB7jCCAeowHQYDVR0OBBYE
FH1ICIyxbZSW5lph8/ynBAbGk1OVMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN
N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov
L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1
NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI
KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G
Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjBvBggr
BgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS5hcGVybmV0Lmlv
L3JlcG8vQVBFUk5FVC8xL0ZDQjE4MDVGQTdBRTIyRDU2NUUwQTUwMkQwOEQzN0VC
MkJEODM3QTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQBcgqPMx1pdb1U7MwyH+7cQq0rS+NZhHpeBFHpH
4EFJMTnrdwPTpOtq/8L/+BIPKbVA2bmZ7/GCgvfAhZl6vmymjrWbXF9OlunHonwE
sZNp2hpt/zubABU4eTbGyP1pQvDpo03NtcLrYTCFHd+0ZUKOcy+882P9J/tMN2PW
sig3Xe/c+EgAwO58vNoQGljHJk4ZZn+Ld+3g9lTCFy8LIonLAp+Lq990uSJBEYaq
8WmZeQmDE7Anubb3fLp973xZlFe91hP+egSb5DJEl+iqn5w7t4G1VCUHqtqrZDQw
MZ+b+WJyNNJLw5lXEy4vbcB6+2W0UppOiXnEz2M6Cesff+e2
-----END CERTIFICATE-----
Generated at Thu May 2 11:34:15 2024 by rpki-client on console-fra.rpki-client.org