
$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
File: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json)
Hash identifier: 3kIYCadAqQARJsIB1G5yqKMYsftKotJcJft75bWpfWc=
Subject key identifier: 35:7E:0C:3B:07:66:56:65:18:44:98:73:C2:61:BF:C1:76:EC:12:78
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial: 2C786E5A01E40890A7FC31B9CB1BDE84E28B9460
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
Manifest number: 0BC9
Signing time: Sat 02 May 2026 02:00:00 +0000
Manifest this update: Sat 02 May 2026 01:55:00 +0000
Manifest next update: Sun 03 May 2026 02:00:00 +0000
Files and hashes: 1: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: Gt4FDhrN+28MeIEFQUXRXVybQ44ldI0QDu2JQIBZDW0=)
2: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: keOiZDcjlwbciwToj1zQSKIg8xd1cvE8dyAYL8Y+rXA=)
3: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: 4pYjD3vVYnnT7Vd2BpC8zUqzpY7fBZl0qUmOCIvq+d0=)
4: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 46sPnRy9Irgb4rrQNU7knYnrFtf4t9kVC4FpUVVN5f4=)
5: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 6pwOcY55h1w9q107rm235NhWJP++2dePf4iMO8ef3oE=)
6: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: V8HI3LeqhlDWaTNhOKrowUK3gcQBxuKNchpGfE7O8VY=)
7: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: T+jD0JhZMjE8i1nOFavU1KolcpDBIzceIHgb9yMEk0Q=)
8: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: H/OqXn1pbV8T/wjgjaAu0tZ0nsGa8M9kfs0xVMkzCT4=)
9: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: vs3UoJMNYjlIDAR0rzYNrKRhsWaZ/ZxH/RwXj9Ifxa8=)
10: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: B1nBYxAs50zgsqErVLGUMzYZqOCYEKZEMw+J5SQOX4Y=)
11: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: PBlellj4ewr+5Yi7IfzeFQB87Jb2lW/mh91ATEE+ypA=)
12: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: n/Q6/YX7fQB7FFCFPzrE7C/W2z5glsLpfDZQKuMlGkw=)
13: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: xOdpTeWx1XKyNghJjlzJHpj1FXT5YgC3jmRekathLYU=)
14: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: Wi1qb5YR6hM+Rr/97FNmrDj9BmcRyeZjRET4hlt6MxM=)
15: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: fb5NDZbCd/XUB12rINgdhjT9rwn3T/pzjFH1ldtPyco=)
16: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: SAkfjvG8Y6WQWfQk0MGV0etVn0uiNoUlRJFQFNokniE=)
17: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: /DgHrGsKZXfhHJDujJu1DCrT/bG0Lf+Gu/mfh7ooopc=)
18: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: F6Sb6C8r+kxQjBCkCG4vPtEDy5gC9s+/Ef15CAMZ1qE=)
19: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: SBHLbyLMe3Cd6T258Wh/Yr+hq19lrGB/i1+DLsvf6VA=)
Validation: OK
Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 02 May 2026 13:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:78:6e:5a:01:e4:08:90:a7:fc:31:b9:cb:1b:de:84:e2:8b:94:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Validity
Not Before: May 2 01:55:00 2026 GMT
Not After : May 9 02:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:af:b3:e6:8f:41:b1:0c:8d:da:68:1e:15:
9c:0b:a0:28:84:ff:95:d9:30:c0:29:f4:6a:94:f8:
02:63:2a:30:27:3f:36:31:94:8a:3f:60:de:99:9f:
e4:89:3b:da:df:b6:73:12:1a:a8:5b:a1:3d:41:d4:
ff:c7:19:92:77:80:2e:94:8a:6b:cc:46:e4:cc:c4:
5c:20:8a:ed:64:94:5a:56:0f:8e:8e:4c:dc:13:30:
4e:49:04:1f:ed:c8:09:d8:3c:72:44:37:71:7f:12:
9f:6a:c3:67:70:8d:2d:86:bf:5b:e0:55:2c:04:7d:
5f:db:9c:89:c8:82:b5:47:81:73:b0:dc:0f:b2:da:
f5:f4:32:8b:ae:95:23:5a:c9:39:4d:3c:8a:96:1b:
3b:4a:b7:1f:f0:9e:23:95:79:54:b6:d0:6a:96:df:
f2:88:90:4d:9d:c5:ef:79:2d:41:e2:67:fd:43:77:
c9:a1:3e:79:0d:b7:95:f5:29:8f:0b:8b:36:91:2c:
71:37:c2:6c:8c:78:b9:09:a9:6b:05:9a:22:df:62:
b8:be:48:79:19:42:ab:43:03:91:ba:0e:45:e7:1e:
5b:29:8c:24:2f:5d:92:b7:df:88:65:11:74:e6:c3:
1f:cd:fb:43:16:a2:5e:b0:87:13:63:61:39:b2:09:
1d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7E:0C:3B:07:66:56:65:18:44:98:73:C2:61:BF:C1:76:EC:12:78
X509v3 Authority Key Identifier:
keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a6:81:83:30:49:ba:fb:5c:59:88:1f:11:d9:46:1a:ad:31:
ef:a9:5a:f4:5d:ba:d2:95:26:82:0b:75:1d:ab:7c:c3:26:78:
81:21:30:02:be:e2:f0:14:47:cf:5c:c1:92:88:b9:4b:e9:03:
bd:15:42:85:88:f2:b7:cb:2d:1b:dc:ea:73:71:15:e2:78:27:
c5:e7:70:93:59:95:84:ce:e2:4b:09:ec:58:05:3b:97:cc:8b:
4a:08:fc:bd:02:7d:37:4b:77:07:55:0e:2e:ca:33:a4:0c:87:
21:e3:36:20:3a:7d:ea:8d:5b:b5:1a:5c:e5:87:53:1f:58:08:
6c:a6:88:7f:dc:a7:7a:75:33:25:76:88:e1:9f:5e:1c:9b:be:
15:89:16:32:42:fa:62:31:b3:ce:0f:98:5a:ae:7b:fd:c6:20:
eb:37:af:6f:f8:9a:57:9a:cf:b3:80:35:cc:b3:15:07:21:29:
ce:79:09:4c:3a:6d:a0:ab:03:9b:f2:4f:62:c3:46:a7:17:c6:
4e:3c:7e:01:57:19:b0:8f:45:d2:69:99:73:97:43:cb:e6:1c:
74:25:d5:16:eb:50:a3:f9:cd:b9:20:aa:c4:4a:de:f3:1b:18:
6e:4b:bc:25:84:f5:a3:1f:6b:fc:83:81:3b:62:4a:90:a6:67:
e0:7c:06:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 04:34:59 2026 by rpki-client