Manifest

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
File:                     FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json)
Hash identifier:          hqj5mHsg9gQOyYkTHCnKavioDuzN+bueeDztSkN9OZE=
Subject key identifier:   81:B9:B3:DE:5B:4F:CB:50:3D:C4:3D:1A:15:A5:2A:B5:E2:DE:D2:63
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       4DB1B8AA70EC61836FB18AB72CFC9D8253578CD9
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
Manifest number:          0A71
Signing time:             Wed 10 Sep 2025 18:00:00 +0000
Manifest this update:     Wed 10 Sep 2025 17:55:00 +0000
Manifest next update:     Thu 11 Sep 2025 18:00:00 +0000
Files and hashes:         1: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: 60g2fcy/avHbWFQdy40t0kDg2FVvvAZEHy7kSgqVAV4=)
                          2: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: lQy3knNW2EhGHIy8oK5UYeMbNiPGa0t8op4cMQ9UJsM=)
                          3: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: pQK9jxtNXa4vbFwT34ESWxnCP+0ul/B5K896H7Ww21M=)
                          4: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 0hSv9ivds3VlkU3/ZNM/S+kNIqZZSn98rmTbqYgaB/4=)
                          5: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: eNE8EEhc1iG8sZv5FHajTlSX0SAornZSI0y9pXBOT6Y=)
                          6: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: PAib4q5gqzf83GH7LrPfkT4IMy/qivltx9b7ElD8vEQ=)
                          7: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: kephFAfMBUWrp4aoQeSmcgT2sE6soRtS1tegFMCEkDE=)
                          8: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: BC754BBmLYtzW2DYjylW3Lxadf4mWhwcczkW75SRgsk=)
                          9: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: 0UUfSVfD70ODNfQQczqS73KrVntUNPr2YJ4FkC+VOXY=)
                          10: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: zRC2uGd1inhs6KfyF86XQrMjx/87ZSPG4ivJMGZPqXg=)
                          11: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: zzjAa1375lugS7WLL910yr8v1ytd05ZjcRaTjIgwtpc=)
                          12: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: PWbi1odhaoaRDlAALK8/ApDLf1Qesl8Vt8U8dLB5EBU=)
                          13: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: 8wZ0vJ61XrFhRDwRcjG53sUgW9srp3bLgyid9R66fAo=)
                          14: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: 9XCeQLluoR2uKtqbugdFvG6PNdEYhFaEYsf2M+QnJWo=)
                          15: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: e+q0bIN8ircxSQJpGQG1uOUqbNIONHabjSAyeFRt6FY=)
                          16: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: pDr5tsFplOJsMtQn4U8LproSrPLlhumdi85cJm6E0TY=)
                          17: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: qPHfMq4La8K4msQ9ZBxT/622UWD1ZzBLXzwmac1VTuI=)
                          18: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: cmEAybMqPuIfLlMXrSUEMt6Vuv/W/pq4j5d4IDZPeMI=)
                          19: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 3HkSBkgK4LRC6JzSCbaaRRptvnynVy4LYa9iN1sN/qw=)
Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 15:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b1:b8:aa:70:ec:61:83:6f:b1:8a:b7:2c:fc:9d:82:53:57:8c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: Sep 10 17:55:00 2025 GMT
            Not After : Sep 17 18:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7b:81:78:91:b4:ff:03:19:87:17:09:6e:c6:
                    23:96:b3:56:98:2c:fe:69:84:83:26:11:76:e6:d9:
                    4a:71:d2:e2:3b:b7:cc:ec:84:24:ec:ac:78:cd:b1:
                    c5:d6:31:70:88:60:a8:5c:28:c1:f8:c5:d2:37:93:
                    a6:eb:d2:0c:8a:b1:2b:32:fd:76:5a:a7:f8:89:b1:
                    c7:8e:99:37:25:c3:95:d6:bc:4e:07:9a:0d:d0:a5:
                    4c:bf:91:7d:9e:c0:40:89:9c:72:66:15:b3:78:82:
                    96:1d:9e:c2:54:5d:1a:4d:48:d4:1d:76:e2:69:f0:
                    8d:87:63:06:64:8f:32:ec:64:16:7a:ad:b2:9f:26:
                    dc:7e:23:d1:e7:09:e1:6d:6f:6c:a9:42:b2:78:16:
                    cb:c9:1a:1d:df:7a:81:b5:d4:6d:66:62:f1:5d:5f:
                    a7:5e:2b:87:e2:10:8a:2b:da:35:ec:64:ee:dc:c2:
                    9d:70:c1:94:42:ac:75:4f:1e:31:c3:9c:98:5f:f4:
                    25:e3:f7:04:81:56:b6:69:62:bf:07:82:a3:e9:6c:
                    35:6b:d9:57:59:2e:dd:f8:45:27:c3:16:03:98:87:
                    62:48:55:c0:5c:a3:ba:3c:e8:6d:b7:27:60:6e:60:
                    cd:e9:15:f1:cc:95:5d:c7:56:9e:ea:6b:a5:63:16:
                    67:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:B3:DE:5B:4F:CB:50:3D:C4:3D:1A:15:A5:2A:B5:E2:DE:D2:63
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b8:46:ea:38:df:39:70:47:70:a7:81:ff:e2:c9:6d:26:c6:
         58:5b:ea:e1:ec:ec:4d:8b:d9:7e:b2:05:24:1e:f2:73:50:16:
         56:68:e0:74:81:73:53:cf:a8:15:32:1f:54:ad:4e:20:30:e9:
         8c:b2:f7:aa:a2:74:9d:1a:77:5a:94:1b:62:da:52:b7:e4:09:
         44:17:a1:16:cf:c8:ed:0f:14:5c:ad:8c:4e:24:02:38:dd:42:
         10:89:93:4e:19:fd:05:6a:c7:78:c1:d8:53:cc:f7:ee:a4:23:
         7a:ab:99:19:21:d2:ce:bd:ee:d9:c2:47:e9:5c:9c:8b:6e:bd:
         ae:14:a2:9d:04:a0:a6:ce:52:33:c9:fb:15:de:32:4a:ce:35:
         c5:a7:f3:b9:0a:02:5d:ea:2a:87:c5:be:3b:08:b4:44:25:ed:
         0f:09:09:82:1f:7d:af:ff:b9:16:60:b7:68:e2:1f:2b:44:87:
         70:54:71:f0:41:88:68:54:be:94:5f:9e:b4:05:3a:3b:70:84:
         73:e4:8f:df:56:cd:2f:15:dc:7c:25:c9:53:f3:0c:92:8e:a1:
         1e:83:2a:75:63:cd:b8:28:5f:5f:34:53:31:6f:8f:f7:4d:a3:
         8b:3c:32:8a:d4:d9:14:88:93:25:c9:8c:7c:8f:27:ec:00:00:
         60:98:70:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:32:05 2025 by rpki-client