$ rpki-client -vvvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft File: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json) Hash identifier: nt+VcLwp63HNs0bX3yBgSjoqRmm7SmiOsT2FFoEMaQI= Subject key identifier: 3E:2A:5E:5E:37:06:EA:F9:31:A7:8C:21:3E:CC:6B:BB:8A:D8:1E:FF Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 2AC9DD1B070F43B82A2D97DAB21DB95DE4CAB8BE Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft Manifest number: 0C90 Signing time: Tue 22 Sep 2026 12:00:00 +0000 Manifest this update: Tue 22 Sep 2026 11:55:00 +0000 Manifest next update: Wed 23 Sep 2026 12:00:00 +0000 Files and hashes: 1: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: SBHLbyLMe3Cd6T258Wh/Yr+hq19lrGB/i1+DLsvf6VA=) 2: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 46sPnRy9Irgb4rrQNU7knYnrFtf4t9kVC4FpUVVN5f4=) 3: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: keOiZDcjlwbciwToj1zQSKIg8xd1cvE8dyAYL8Y+rXA=) 4: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: wzC3kyeBN9KvJecVq6d6FcuygV94ToIRjFDqG4nbtEo=) 5: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: F6Sb6C8r+kxQjBCkCG4vPtEDy5gC9s+/Ef15CAMZ1qE=) 6: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: 4pYjD3vVYnnT7Vd2BpC8zUqzpY7fBZl0qUmOCIvq+d0=) 7: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: vs3UoJMNYjlIDAR0rzYNrKRhsWaZ/ZxH/RwXj9Ifxa8=) 8: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: el74Nc+BKzl1vCB4RY2uLhCavyDZcO6GxBZAAa0cXW4=) 9: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: T+jD0JhZMjE8i1nOFavU1KolcpDBIzceIHgb9yMEk0Q=) 10: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: ZLSb2T9cPyJxY8E9tE/mZt7Dh+4FZqUiK+FdoIUFVOs=) 11: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: SAkfjvG8Y6WQWfQk0MGV0etVn0uiNoUlRJFQFNokniE=) 12: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: C2NTJFZsjvkYLsbps06kyeYngY6dBkneRjgRkUn300c=) 13: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: EKJ6hq723fVv86HUHUJIlgNnqFHrxqYBXcD+FPSrYfI=) 14: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: V8HI3LeqhlDWaTNhOKrowUK3gcQBxuKNchpGfE7O8VY=) 15: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: PBlellj4ewr+5Yi7IfzeFQB87Jb2lW/mh91ATEE+ypA=) 16: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: nR9hO4Qa985Z382iubs5QGrxVnV1ORcnEqkp/kAD8Kg=) 17: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: gwFPLXFFVFnikMpnSfqLiP6sjdFm9//azKgENIkTwEo=) 18: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: VC76BXlmDMGocgYfofyRtI3aWBdkKVb7OPouWf2rk/Y=) 19: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: fb5NDZbCd/XUB12rINgdhjT9rwn3T/pzjFH1ldtPyco=) Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c9:dd:1b:07:0f:43:b8:2a:2d:97:da:b2:1d:b9:5d:e4:ca:b8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Sep 22 11:55:00 2026 GMT Not After : Sep 29 12:00:00 2026 GMT Subject: CN=3082010A028201010098705349A0613E89EE127049C0E3B6F29511D5764C3BF51D106E02EA1A524A7E15DB274763E7EBB290240184F781523109B02B469D21349BBBA591CF5DA93C7C7120E19722A98A91177614E8E29E0CE38DB408E44C5C258D960EACA8AB54A3523DA8B22985E437C8EF4C61FD98A6E3ABCE20F5A0022ABCE669A56FDC83518B978086482412C943FD5B3358A4CBAFCD4283219E85E633FD78ACC8E6390AA7ED82A63BAC861195DAC7D0B5A0974EF3A52A10FC0028712430E7327B62EF73861C7C3469CDD2805709A25E1D69B8484FD2ED6365448F58C55CD0C208D6CF949FFEE8351CD9E36A8FD1F5D230980F35AF2CC26D32B88881BB0192E1DA4D8778E80F0B0203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:53:49:a0:61:3e:89:ee:12:70:49:c0:e3: b6:f2:95:11:d5:76:4c:3b:f5:1d:10:6e:02:ea:1a: 52:4a:7e:15:db:27:47:63:e7:eb:b2:90:24:01:84: f7:81:52:31:09:b0:2b:46:9d:21:34:9b:bb:a5:91: cf:5d:a9:3c:7c:71:20:e1:97:22:a9:8a:91:17:76: 14:e8:e2:9e:0c:e3:8d:b4:08:e4:4c:5c:25:8d:96: 0e:ac:a8:ab:54:a3:52:3d:a8:b2:29:85:e4:37:c8: ef:4c:61:fd:98:a6:e3:ab:ce:20:f5:a0:02:2a:bc: e6:69:a5:6f:dc:83:51:8b:97:80:86:48:24:12:c9: 43:fd:5b:33:58:a4:cb:af:cd:42:83:21:9e:85:e6: 33:fd:78:ac:c8:e6:39:0a:a7:ed:82:a6:3b:ac:86: 11:95:da:c7:d0:b5:a0:97:4e:f3:a5:2a:10:fc:00: 28:71:24:30:e7:32:7b:62:ef:73:86:1c:7c:34:69: cd:d2:80:57:09:a2:5e:1d:69:b8:48:4f:d2:ed:63: 65:44:8f:58:c5:5c:d0:c2:08:d6:cf:94:9f:fe:e8: 35:1c:d9:e3:6a:8f:d1:f5:d2:30:98:0f:35:af:2c: c2:6d:32:b8:88:81:bb:01:92:e1:da:4d:87:78:e8: 0f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2A:5E:5E:37:06:EA:F9:31:A7:8C:21:3E:CC:6B:BB:8A:D8:1E:FF X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cf:0b:fc:23:82:1e:7c:30:7d:75:cd:52:74:69:05:2b:55: 21:47:98:69:4e:3b:49:3a:db:78:7f:b6:c0:1b:e7:a5:71:2c: 94:23:cb:50:9a:f9:93:e9:bd:ce:f7:43:19:5e:fc:03:49:6d: eb:6f:5e:57:77:b3:ac:39:e0:f7:94:1d:8a:12:71:da:13:a3: be:fd:c2:e8:19:48:ad:20:d4:80:d3:f9:85:49:14:42:a6:73: 77:48:22:49:9e:9c:fd:a2:94:5b:9d:a7:62:fc:38:cc:31:53: c0:c2:a9:e0:e2:03:d2:b3:ec:17:8e:65:9e:ed:25:e3:8d:9b: c1:23:e5:22:32:53:14:de:c2:f6:6d:1b:5a:52:10:f2:1f:4d: 31:41:a1:5b:de:56:e1:4d:a5:2f:e7:52:33:a8:f3:78:a3:62: c3:b5:06:2d:c5:5c:d6:bf:55:65:9e:7a:8d:05:86:46:19:d4: cf:89:d2:f2:38:00:65:e3:80:82:7c:28:93:51:4e:d1:70:2f: ec:4a:a3:94:2b:01:a6:90:f8:7c:60:35:2e:38:6d:98:42:38: d7:35:da:a3:ed:04:06:cb:0d:66:08:df:e9:2a:63:97:19:06: b0:e4:dc:82:a4:fa:4c:39:8b:dc:ab:24:6f:5b:a3:f4:9d:9d: 3e:a5:57:18 -----BEGIN CERTIFICATE----- MIIG4DCCBcigAwIBAgIUKsndGwcPQ7gqLZfash25XeTKuL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNjA5MjIxMTU1MDBaFw0yNjA5MjkxMjAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTg3MDUzNDlBMDYxM0U4OUVF MTI3MDQ5QzBFM0I2RjI5NTExRDU3NjRDM0JGNTFEMTA2RTAyRUExQTUyNEE3RTE1 REIyNzQ3NjNFN0VCQjI5MDI0MDE4NEY3ODE1MjMxMDlCMDJCNDY5RDIxMzQ5QkJC QTU5MUNGNURBOTNDN0M3MTIwRTE5NzIyQTk4QTkxMTc3NjE0RThFMjlFMENFMzhE QjQwOEU0NEM1QzI1OEQ5NjBFQUNBOEFCNTRBMzUyM0RBOEIyMjk4NUU0MzdDOEVG NEM2MUZEOThBNkUzQUJDRTIwRjVBMDAyMkFCQ0U2NjlBNTZGREM4MzUxOEI5Nzgw ODY0ODI0MTJDOTQzRkQ1QjMzNThBNENCQUZDRDQyODMyMTlFODVFNjMzRkQ3OEFD QzhFNjM5MEFBN0VEODJBNjNCQUM4NjExOTVEQUM3RDBCNUEwOTc0RUYzQTUyQTEw RkMwMDI4NzEyNDMwRTczMjdCNjJFRjczODYxQzdDMzQ2OUNERDI4MDU3MDlBMjVF MUQ2OUI4NDg0RkQyRUQ2MzY1NDQ4RjU4QzU1Q0QwQzIwOEQ2Q0Y5NDlGRkVFODM1 MUNEOUUzNkE4RkQxRjVEMjMwOTgwRjM1QUYyQ0MyNkQzMkI4ODg4MUJCMDE5MkUx REE0RDg3NzhFODBGMEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAmHBTSaBhPonuEnBJwOO28pUR1XZMO/UdEG4C6hpSSn4V2ydHY+fr spAkAYT3gVIxCbArRp0hNJu7pZHPXak8fHEg4ZciqYqRF3YU6OKeDOONtAjkTFwl jZYOrKirVKNSPaiyKYXkN8jvTGH9mKbjq84g9aACKrzmaaVv3INRi5eAhkgkEslD /VszWKTLr81CgyGeheYz/XisyOY5CqftgqY7rIYRldrH0LWgl07zpSoQ/AAocSQw 5zJ7Yu9zhhx8NGnN0oBXCaJeHWm4SE/S7WNlRI9YxVzQwgjWz5Sf/ug1HNnjao/R 9dIwmA81ryzCbTK4iIG7AZLh2k2HeOgPCwIDAQABo4IB7jCCAeowHQYDVR0OBBYE FD4qXl43Bur5MaeMIT7Ma7uK2B7/MB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjBvBggr BgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS5hcGVybmV0Lmlv L3JlcG8vQVBFUk5FVC8xL0ZDQjE4MDVGQTdBRTIyRDU2NUUwQTUwMkQwOEQzN0VC MkJEODM3QTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQAezwv8I4IefDB9dc1SdGkFK1UhR5hpTjtJOtt4 f7bAG+elcSyUI8tQmvmT6b3O90MZXvwDSW3rb15Xd7OsOeD3lB2KEnHaE6O+/cLo GUitINSA0/mFSRRCpnN3SCJJnpz9opRbnadi/DjMMVPAwqng4gPSs+wXjmWe7SXj jZvBI+UiMlMU3sL2bRtaUhDyH00xQaFb3lbhTaUv51IzqPN4o2LDtQYtxVzWv1Vl nnqNBYZGGdTPidLyOABl44CCfCiTUU7RcC/sSqOUKwGmkPh8YDUuOG2YQjjXNdqj 7QQGyw1mCN/pKmOXGQaw5NyCpPpMOYvcqyRvW6P0nZ0+pVcY -----END CERTIFICATE-----Generated at Wed Sep 23 06:55:36 2026 by rpki-client