This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
File:                     FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json)
Hash identifier:          BpSkxTB+C3Ri9w4mJH5VUD7hofd3gHmPbfcx4PxUP4s=
Subject key identifier:   0D:7B:AC:4F:95:32:B4:01:8C:A3:DB:46:F6:78:AC:C8:72:60:A9:2A
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       58ED6380307DB378A096858A81D99211E52B5F62
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
Manifest number:          0B41
Signing time:             Thu 29 Jan 2026 09:00:00 +0000
Manifest this update:     Thu 29 Jan 2026 08:55:00 +0000
Manifest next update:     Fri 30 Jan 2026 09:00:00 +0000
Files and hashes:         1: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: /DgHrGsKZXfhHJDujJu1DCrT/bG0Lf+Gu/mfh7ooopc=)
                          2: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: keOiZDcjlwbciwToj1zQSKIg8xd1cvE8dyAYL8Y+rXA=)
                          3: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: SBHLbyLMe3Cd6T258Wh/Yr+hq19lrGB/i1+DLsvf6VA=)
                          4: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: kephFAfMBUWrp4aoQeSmcgT2sE6soRtS1tegFMCEkDE=)
                          5: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: T+jD0JhZMjE8i1nOFavU1KolcpDBIzceIHgb9yMEk0Q=)
                          6: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 3HkSBkgK4LRC6JzSCbaaRRptvnynVy4LYa9iN1sN/qw=)
                          7: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: V8HI3LeqhlDWaTNhOKrowUK3gcQBxuKNchpGfE7O8VY=)
                          8: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: Gt4FDhrN+28MeIEFQUXRXVybQ44ldI0QDu2JQIBZDW0=)
                          9: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: F6Sb6C8r+kxQjBCkCG4vPtEDy5gC9s+/Ef15CAMZ1qE=)
                          10: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: SAkfjvG8Y6WQWfQk0MGV0etVn0uiNoUlRJFQFNokniE=)
                          11: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: zRC2uGd1inhs6KfyF86XQrMjx/87ZSPG4ivJMGZPqXg=)
                          12: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 6pwOcY55h1w9q107rm235NhWJP++2dePf4iMO8ef3oE=)
                          13: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: Wi1qb5YR6hM+Rr/97FNmrDj9BmcRyeZjRET4hlt6MxM=)
                          14: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: BC754BBmLYtzW2DYjylW3Lxadf4mWhwcczkW75SRgsk=)
                          15: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: cmEAybMqPuIfLlMXrSUEMt6Vuv/W/pq4j5d4IDZPeMI=)
                          16: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: xOdpTeWx1XKyNghJjlzJHpj1FXT5YgC3jmRekathLYU=)
                          17: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: GmzwPuD2DZb/X1KHipct6FTga0ctsidHQkxtEUi5nVo=)
                          18: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: B1nBYxAs50zgsqErVLGUMzYZqOCYEKZEMw+J5SQOX4Y=)
                          19: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: H/OqXn1pbV8T/wjgjaAu0tZ0nsGa8M9kfs0xVMkzCT4=)
Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ed:63:80:30:7d:b3:78:a0:96:85:8a:81:d9:92:11:e5:2b:5f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: Jan 29 08:55:00 2026 GMT
            Not After : Feb  5 09:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:35:e4:9b:f6:9f:fb:cd:19:73:87:03:28:51:
                    04:de:eb:49:0c:e1:d3:39:66:2b:a1:4c:1f:5e:67:
                    60:0f:e3:72:1e:a8:d9:de:0d:9b:eb:d5:28:6c:f9:
                    6d:a1:38:69:2d:99:97:70:0b:c1:3d:50:a5:9b:36:
                    46:c7:3d:15:ee:14:87:97:42:8f:37:72:3d:ab:1a:
                    b9:79:b6:67:ca:fa:d3:a5:ea:68:2a:da:57:84:b8:
                    5f:41:1b:59:6c:33:84:20:a8:4b:6a:9a:1d:7a:4f:
                    80:4d:84:ae:37:79:d6:5e:3f:a4:69:45:dc:35:c1:
                    6b:6c:1f:39:2b:a5:ae:c8:29:63:c6:1f:7f:d2:53:
                    8a:e9:5f:c8:51:f5:85:7b:38:02:d3:b7:48:47:af:
                    43:25:58:45:2f:2d:cc:a6:5d:ac:67:53:87:94:fe:
                    08:f0:2a:3d:d9:f3:a2:95:0b:7c:29:91:fb:ef:92:
                    4e:6b:46:41:a0:dd:99:55:ee:95:a1:00:8e:57:20:
                    61:57:c9:9d:c3:e8:25:ce:a0:49:00:94:11:0d:9b:
                    95:d4:a7:12:a4:19:4b:22:f4:67:79:1f:a0:22:c4:
                    bb:df:7e:a1:e6:f2:f9:e4:a1:47:1f:06:1f:4b:91:
                    bc:2b:81:98:40:e0:31:6d:e8:ee:76:5b:7e:54:34:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7B:AC:4F:95:32:B4:01:8C:A3:DB:46:F6:78:AC:C8:72:60:A9:2A
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b9:aa:ca:70:65:d9:f8:1d:54:9c:90:8b:58:1b:75:c8:0d:
         50:dc:a8:30:7a:e1:80:c2:d5:32:19:b4:71:4e:26:ed:6f:48:
         dd:9a:57:99:dd:49:3d:fc:80:73:9a:4f:1d:5c:4a:d8:1c:c8:
         70:bb:51:e3:48:1f:78:78:52:53:2a:07:63:fa:b2:82:d9:fc:
         40:50:86:28:2b:3a:26:e9:b3:8f:37:4d:fb:81:05:b5:ef:79:
         2e:92:e6:be:85:ea:bd:c6:f8:0b:d3:81:9c:ac:02:37:82:1f:
         d0:13:50:02:f7:6f:3c:1e:25:6c:a6:83:67:5f:f8:5a:3a:5e:
         c1:50:75:d6:11:02:6d:23:68:00:e3:6c:b0:f1:64:de:4e:16:
         c3:88:fa:ce:1e:74:4e:04:b2:ce:49:1c:d5:a6:59:ae:09:71:
         bf:96:0b:e9:a3:c2:42:0d:53:56:4f:c4:34:17:a0:40:4e:12:
         a9:9a:ac:f2:fd:f2:84:b1:3d:34:5f:9c:d1:a4:91:d7:26:5d:
         8f:85:3b:fc:ae:28:2e:e7:1b:09:5f:92:69:98:fc:01:00:df:
         92:46:cc:73:e1:7d:9f:da:d9:92:bb:69:2a:52:35:ee:79:32:
         dd:52:6a:85:63:cc:5d:c4:cd:43:84:39:a1:0b:15:29:8d:b8:
         36:3f:8f:a8
-----BEGIN CERTIFICATE-----
MIIG4DCCBcigAwIBAgIUWO1jgDB9s3igloWKgdmSEeUrX2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy
QkQ4MzdBNzAeFw0yNjAxMjkwODU1MDBaFw0yNjAyMDUwOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUIzNUU0OUJGNjlGRkJDRDE5
NzM4NzAzMjg1MTA0REVFQjQ5MENFMUQzMzk2NjJCQTE0QzFGNUU2NzYwMEZFMzcy
MUVBOEQ5REUwRDlCRUJENTI4NkNGOTZEQTEzODY5MkQ5OTk3NzAwQkMxM0Q1MEE1
OUIzNjQ2QzczRDE1RUUxNDg3OTc0MjhGMzc3MjNEQUIxQUI5NzlCNjY3Q0FGQUQz
QTVFQTY4MkFEQTU3ODRCODVGNDExQjU5NkMzMzg0MjBBODRCNkE5QTFEN0E0Rjgw
NEQ4NEFFMzc3OUQ2NUUzRkE0Njk0NURDMzVDMTZCNkMxRjM5MkJBNUFFQzgyOTYz
QzYxRjdGRDI1MzhBRTk1RkM4NTFGNTg1N0IzODAyRDNCNzQ4NDdBRjQzMjU1ODQ1
MkYyRENDQTY1REFDNjc1Mzg3OTRGRTA4RjAyQTNERDlGM0EyOTUwQjdDMjk5MUZC
RUY5MjRFNkI0NjQxQTBERDk5NTVFRTk1QTEwMDhFNTcyMDYxNTdDOTlEQzNFODI1
Q0VBMDQ5MDA5NDExMEQ5Qjk1RDRBNzEyQTQxOTRCMjJGNDY3NzkxRkEwMjJDNEJC
REY3RUExRTZGMkY5RTRBMTQ3MUYwNjFGNEI5MUJDMkI4MTk4NDBFMDMxNkRFOEVF
NzY1QjdFNTQzNDEwRkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6zXkm/af+80Zc4cDKFEE3utJDOHTOWYroUwfXmdgD+NyHqjZ3g2b
69UobPltoThpLZmXcAvBPVClmzZGxz0V7hSHl0KPN3I9qxq5ebZnyvrTpepoKtpX
hLhfQRtZbDOEIKhLapodek+ATYSuN3nWXj+kaUXcNcFrbB85K6WuyCljxh9/0lOK
6V/IUfWFezgC07dIR69DJVhFLy3Mpl2sZ1OHlP4I8Co92fOilQt8KZH775JOa0ZB
oN2ZVe6VoQCOVyBhV8mdw+glzqBJAJQRDZuV1KcSpBlLIvRneR+gIsS7336h5vL5
5KFHHwYfS5G8K4GYQOAxbejudlt+VDQQ+wIDAQABo4IB7jCCAeowHQYDVR0OBBYE
FA17rE+VMrQBjKPbRvZ4rMhyYKkqMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN
N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov
L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1
NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI
KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G
Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjBvBggr
BgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS5hcGVybmV0Lmlv
L3JlcG8vQVBFUk5FVC8xL0ZDQjE4MDVGQTdBRTIyRDU2NUUwQTUwMkQwOEQzN0VC
MkJEODM3QTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQC5uarKcGXZ+B1UnJCLWBt1yA1Q3KgweuGAwtUy
GbRxTibtb0jdmleZ3Uk9/IBzmk8dXErYHMhwu1HjSB94eFJTKgdj+rKC2fxAUIYo
Kzom6bOPN037gQW173kukua+heq9xvgL04GcrAI3gh/QE1AC9288HiVspoNnX/ha
Ol7BUHXWEQJtI2gA42yw8WTeThbDiPrOHnROBLLOSRzVplmuCXG/lgvpo8JCDVNW
T8Q0F6BAThKpmqzy/fKEsT00X5zRpJHXJl2PhTv8rigu5xsJX5JpmPwBAN+SRsxz
4X2f2tmSu2kqUjXueTLdUmqFY8xdxM1DhDmhCxUpjbg2P4+o
-----END CERTIFICATE-----
Generated at Thu Jan 29 19:23:58 2026 by rpki-client