Manifest

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
File:                     FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json)
Hash identifier:          VGFnzIao9B7hOq/8WO0Aop4bnN42zIlVFM+AUkiaqAg=
Subject key identifier:   F8:02:0D:00:8D:34:9D:94:99:52:B3:1F:DF:E5:32:65:94:91:73:39
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       20CA7DF86531409A38062C2432C2EC9770D87B1C
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
Manifest number:          08CF
Signing time:             Mon 25 Nov 2024 04:00:00 +0000
Manifest this update:     Mon 25 Nov 2024 03:55:00 +0000
Manifest next update:     Tue 26 Nov 2024 04:00:00 +0000
Files and hashes:         1: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: NC46EeBAd+aePRB8f9CzQf6C6pep7n/solMPrbFb3xY=)
                          2: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: CfFGit4cz8Im152rFnV7muQ0Cl5ndiWxfPL70dNC/G0=)
                          3: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: PAib4q5gqzf83GH7LrPfkT4IMy/qivltx9b7ElD8vEQ=)
                          4: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: S+k6sDy/aBYq10vSWW6GxvvJJw/U5GaFZGHVZnCCZ68=)
                          5: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: bKuhSsT08wXLsVY3bSkTN42hvJWfGU1KsSCkFJ4Ojck=)
                          6: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: 0UUfSVfD70ODNfQQczqS73KrVntUNPr2YJ4FkC+VOXY=)
                          7: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: Tti3EMD5BHbLAWqxrbZLibfGyTreO0oncxFKF30Ot9M=)
                          8: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: MoZJKyTQ87kKxu2ejbfezItwOeIEAvhL/lZWPvUke70=)
                          9: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: MAbIUElpvFGTdzArltpZ/RudA4ffnwWPNRH58qLgk6U=)
                          10: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: 9GanKW9gn0En+pslc+DKssQUbTHIvGXwUDzW0GDMFxo=)
                          11: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: G+XcX1/8cBGg+LRrm3xDy7bx8agCbHKWzMeUncXRv2c=)
                          12: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: 60g2fcy/avHbWFQdy40t0kDg2FVvvAZEHy7kSgqVAV4=)
                          13: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: 8wZ0vJ61XrFhRDwRcjG53sUgW9srp3bLgyid9R66fAo=)
                          14: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: 9XCeQLluoR2uKtqbugdFvG6PNdEYhFaEYsf2M+QnJWo=)
                          15: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: 49L2LQW9c5IgH7Ybceennr8SuvgOI0+ebX5fXGXjg00=)
                          16: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 0hSv9ivds3VlkU3/ZNM/S+kNIqZZSn98rmTbqYgaB/4=)
                          17: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: qmtN8NiOPZWmtfFTQ+rmZl7tpBpeX9jfrIjAtoE93/g=)
                          18: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: e+q0bIN8ircxSQJpGQG1uOUqbNIONHabjSAyeFRt6FY=)
                          19: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: a9+ARHQ/QzMVMFB3yQdkNiEzcjvvjUyZ4XLFy42aElQ=)

Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 12:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ca:7d:f8:65:31:40:9a:38:06:2c:24:32:c2:ec:97:70:d8:7b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: Nov 25 03:55:00 2024 GMT
            Not After : Dec  2 04:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:91:13:d6:e4:f2:3e:2d:d5:69:1d:1e:78:aa:
                    0c:de:84:d6:e1:f1:d5:58:50:04:e9:ff:55:fc:59:
                    44:d1:94:fd:6d:36:f8:a8:c3:95:c2:9b:69:f8:f8:
                    6c:79:9b:d7:35:ca:e8:a3:60:bd:46:33:74:51:45:
                    21:6b:b8:cc:c5:7b:18:47:7a:7f:bb:28:b7:35:9d:
                    00:ed:6d:95:33:6b:34:3c:34:37:23:27:c9:39:42:
                    f8:33:8e:ea:d3:d7:63:72:bf:c7:80:23:f7:eb:fe:
                    d3:75:ab:87:19:55:9d:3e:b3:fd:e0:61:77:35:d7:
                    06:0b:f9:e1:49:2d:46:8f:6b:42:0f:17:e5:7c:d3:
                    22:91:ea:d6:90:dc:8d:a0:61:9e:ff:c3:3a:e3:1f:
                    db:60:28:65:f5:1e:02:0d:f8:c5:fe:51:1c:cf:cd:
                    c3:00:a2:b3:05:ce:56:d7:09:82:36:0e:41:41:03:
                    b0:11:2c:01:a2:0f:bd:a6:99:40:9f:44:0c:4b:3e:
                    3f:b3:00:62:ae:c2:02:ed:ff:20:cf:0c:f0:84:b3:
                    d1:15:10:36:62:1a:7c:46:58:2c:33:86:d5:13:ab:
                    81:21:f2:81:bd:66:5c:f7:17:83:16:ee:69:c1:78:
                    28:b5:1e:60:56:71:6d:c6:ba:0a:c1:89:42:d4:14:
                    82:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:02:0D:00:8D:34:9D:94:99:52:B3:1F:DF:E5:32:65:94:91:73:39
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ad:a5:20:12:26:31:ba:9d:0a:06:68:90:75:aa:d8:19:88:
         de:1d:7b:4c:cc:be:3a:5b:22:f3:3d:8b:b9:32:fd:fb:e0:af:
         0a:ca:3a:78:63:50:8d:2e:01:ae:11:d9:3d:bc:63:a3:ee:ef:
         fd:f0:41:fd:0b:a0:88:22:eb:33:c9:3d:41:c8:26:a5:1b:61:
         61:a7:79:2a:cb:00:71:28:f8:cd:ff:27:d6:31:11:b8:ec:19:
         07:cf:e3:f6:4f:86:ef:73:59:49:8f:79:bf:f4:80:a9:bb:fb:
         89:28:2e:7e:04:e3:f2:a7:a8:42:9a:2e:d1:01:b0:d8:75:7c:
         e5:87:10:c5:15:59:f5:3a:41:30:ca:2a:20:94:d7:a3:45:ee:
         08:dd:6b:f0:79:13:5d:cf:02:a6:7a:5e:42:86:88:8d:44:48:
         cb:bd:b9:0b:ea:31:47:61:da:14:0b:16:aa:76:11:41:a2:02:
         ea:64:00:f1:ff:72:b7:7d:5f:04:f2:92:fe:01:eb:1f:55:1f:
         85:fa:12:e7:6e:0e:e3:e8:5f:c1:f5:27:11:e7:f1:0b:67:c5:
         2f:f9:75:5b:eb:fd:f6:61:fb:a1:09:fd:0f:93:b2:9d:69:3d:
         ba:b2:c8:ae:29:f5:6f:74:a5:f7:da:7c:ff:c5:f7:98:52:01:
         07:74:2e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----