Manifest

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
File:                     FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json)
Hash identifier:          EoMo276D6nWBdG6CNnl1iks/Z2e1faokPO/6dWj5uZg=
Subject key identifier:   0B:BE:F2:C5:51:FE:B9:D5:BB:BC:9A:EE:FC:5A:05:76:22:21:84:4A
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       4A8F3F0676FAE6B4ADFCAC9D5B0FF6D93D116F6C
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
Manifest number:          0B84
Signing time:             Mon 16 Mar 2026 12:00:00 +0000
Manifest this update:     Mon 16 Mar 2026 11:55:00 +0000
Manifest next update:     Tue 17 Mar 2026 12:00:00 +0000
Files and hashes:         1: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: Gt4FDhrN+28MeIEFQUXRXVybQ44ldI0QDu2JQIBZDW0=)
                          2: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: H/OqXn1pbV8T/wjgjaAu0tZ0nsGa8M9kfs0xVMkzCT4=)
                          3: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: crBsCZ3+3iyknS9Cd1Q8be5Fiw8cImIZYC5WJh6rJqc=)
                          4: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 6pwOcY55h1w9q107rm235NhWJP++2dePf4iMO8ef3oE=)
                          5: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: kephFAfMBUWrp4aoQeSmcgT2sE6soRtS1tegFMCEkDE=)
                          6: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: fb5NDZbCd/XUB12rINgdhjT9rwn3T/pzjFH1ldtPyco=)
                          7: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: keOiZDcjlwbciwToj1zQSKIg8xd1cvE8dyAYL8Y+rXA=)
                          8: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: V8HI3LeqhlDWaTNhOKrowUK3gcQBxuKNchpGfE7O8VY=)
                          9: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 3HkSBkgK4LRC6JzSCbaaRRptvnynVy4LYa9iN1sN/qw=)
                          10: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: Wi1qb5YR6hM+Rr/97FNmrDj9BmcRyeZjRET4hlt6MxM=)
                          11: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: T+jD0JhZMjE8i1nOFavU1KolcpDBIzceIHgb9yMEk0Q=)
                          12: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: xOdpTeWx1XKyNghJjlzJHpj1FXT5YgC3jmRekathLYU=)
                          13: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: 4pYjD3vVYnnT7Vd2BpC8zUqzpY7fBZl0qUmOCIvq+d0=)
                          14: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: SAkfjvG8Y6WQWfQk0MGV0etVn0uiNoUlRJFQFNokniE=)
                          15: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: /DgHrGsKZXfhHJDujJu1DCrT/bG0Lf+Gu/mfh7ooopc=)
                          16: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: B1nBYxAs50zgsqErVLGUMzYZqOCYEKZEMw+J5SQOX4Y=)
                          17: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: BC754BBmLYtzW2DYjylW3Lxadf4mWhwcczkW75SRgsk=)
                          18: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: F6Sb6C8r+kxQjBCkCG4vPtEDy5gC9s+/Ef15CAMZ1qE=)
                          19: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: SBHLbyLMe3Cd6T258Wh/Yr+hq19lrGB/i1+DLsvf6VA=)
Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 04:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8f:3f:06:76:fa:e6:b4:ad:fc:ac:9d:5b:0f:f6:d9:3d:11:6f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: Mar 16 11:55:00 2026 GMT
            Not After : Mar 23 12:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:90:e5:1b:53:b1:85:79:53:4e:54:f5:67:
                    d8:92:36:60:e7:a7:ed:6e:81:28:ff:a8:d1:05:37:
                    9d:74:54:a6:09:23:9e:95:08:c6:6c:82:8d:d8:27:
                    96:b6:bf:d2:fc:2f:dc:94:36:2b:03:ca:9c:50:e8:
                    e1:63:a6:d6:5e:45:6c:be:9f:61:61:88:9c:55:d5:
                    3c:73:db:ef:49:18:2c:c7:df:a7:8b:c4:c2:07:e4:
                    4a:00:c7:3c:7e:e4:b7:42:76:64:8b:e7:60:ba:86:
                    87:dc:1a:0a:96:16:ec:92:6a:19:ed:65:d4:66:0a:
                    dc:cf:d2:84:3a:b5:a8:5c:20:ee:a9:87:c4:a8:65:
                    bc:2f:41:5e:ae:84:d3:05:b2:cf:40:dd:82:94:01:
                    61:cf:5e:77:29:c0:03:23:4b:15:78:83:2c:10:51:
                    aa:27:14:5b:c9:3b:96:e4:49:02:ac:37:d6:0d:05:
                    8f:db:56:28:9e:7b:0a:cb:88:85:cf:84:3d:67:ff:
                    0c:36:62:f3:fd:09:3c:ee:37:0d:2d:d1:dc:0d:8e:
                    63:d5:1e:38:a0:06:8f:9d:4e:97:49:34:7b:d3:3a:
                    17:1c:f1:99:0d:31:b7:47:80:a4:f3:79:f3:b9:8c:
                    e4:13:89:f1:64:4f:3f:55:52:59:c5:26:6b:f6:c2:
                    66:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BE:F2:C5:51:FE:B9:D5:BB:BC:9A:EE:FC:5A:05:76:22:21:84:4A
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ea:39:22:81:7c:39:45:77:1b:3a:16:df:87:da:43:a3:f6:
         a1:04:29:bc:5b:3a:01:eb:7a:f1:ac:69:b6:cc:eb:9f:9b:c1:
         81:76:74:a6:e3:59:ca:45:8e:9d:14:19:07:3c:ac:30:28:e9:
         a5:56:c2:bf:42:b8:1b:5c:74:4c:0c:eb:e7:87:a8:f8:7c:70:
         08:75:c9:5f:92:92:26:b1:40:ec:12:da:34:60:b8:61:99:e6:
         1a:36:47:4d:fc:95:27:5f:ff:8d:85:5d:94:8b:62:13:d1:90:
         02:cc:74:7e:3e:7b:c3:d0:25:02:8f:c1:e3:2d:03:07:b6:b2:
         e5:9a:09:5d:4f:a8:98:7c:96:1b:66:92:97:a5:94:12:24:5c:
         f9:74:3a:60:52:44:58:f1:d0:82:dc:e5:08:07:65:ce:5c:e2:
         e5:9d:07:ae:83:bb:ea:99:c0:3c:bc:11:de:a2:db:52:e7:c9:
         6b:89:61:a8:5f:68:9c:54:c1:88:73:98:2c:a7:51:04:0f:ea:
         88:c9:be:ee:d6:26:7e:7f:25:5e:f3:98:5d:a8:4d:e1:88:64:
         a5:33:df:5e:be:38:f2:42:bc:69:58:2a:e0:72:64:09:04:a0:
         0a:3c:55:68:ad:46:af:90:1c:f2:62:a1:5b:ff:5d:e3:2d:45:
         24:11:18:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 19:09:42 2026 by rpki-client