This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
File: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json)
Hash identifier: 7GUEODFIYPexn5sDOX/v4hOrhXmWFK6WFOU5n+ug0/c=
Subject key identifier: E2:B2:4E:8D:DC:45:F6:74:A1:63:64:9C:97:E1:48:FD:70:47:BA:D9
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial: 0643E456C8FC3EE210BF93E48EC68B1F5A9F5E1F
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
Manifest number: 0AF0
Signing time: Fri 05 Dec 2025 20:00:00 +0000
Manifest this update: Fri 05 Dec 2025 19:55:00 +0000
Manifest next update: Sat 06 Dec 2025 20:00:00 +0000
Files and hashes: 1: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: H/OqXn1pbV8T/wjgjaAu0tZ0nsGa8M9kfs0xVMkzCT4=)
2: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: Gt4FDhrN+28MeIEFQUXRXVybQ44ldI0QDu2JQIBZDW0=)
3: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: pQK9jxtNXa4vbFwT34ESWxnCP+0ul/B5K896H7Ww21M=)
4: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: PWbi1odhaoaRDlAALK8/ApDLf1Qesl8Vt8U8dLB5EBU=)
5: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: Wi1qb5YR6hM+Rr/97FNmrDj9BmcRyeZjRET4hlt6MxM=)
6: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: BC754BBmLYtzW2DYjylW3Lxadf4mWhwcczkW75SRgsk=)
7: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: 9lF1ChzKapbFQmRTQQx1+oThoFvH0HStOKiLSK0YzZU=)
8: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: pDr5tsFplOJsMtQn4U8LproSrPLlhumdi85cJm6E0TY=)
9: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: lQy3knNW2EhGHIy8oK5UYeMbNiPGa0t8op4cMQ9UJsM=)
10: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: kephFAfMBUWrp4aoQeSmcgT2sE6soRtS1tegFMCEkDE=)
11: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 3HkSBkgK4LRC6JzSCbaaRRptvnynVy4LYa9iN1sN/qw=)
12: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: xOdpTeWx1XKyNghJjlzJHpj1FXT5YgC3jmRekathLYU=)
13: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 6pwOcY55h1w9q107rm235NhWJP++2dePf4iMO8ef3oE=)
14: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: zRC2uGd1inhs6KfyF86XQrMjx/87ZSPG4ivJMGZPqXg=)
15: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: /DgHrGsKZXfhHJDujJu1DCrT/bG0Lf+Gu/mfh7ooopc=)
16: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: B1nBYxAs50zgsqErVLGUMzYZqOCYEKZEMw+J5SQOX4Y=)
17: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: cmEAybMqPuIfLlMXrSUEMt6Vuv/W/pq4j5d4IDZPeMI=)
18: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: zzjAa1375lugS7WLL910yr8v1ytd05ZjcRaTjIgwtpc=)
19: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: eNE8EEhc1iG8sZv5FHajTlSX0SAornZSI0y9pXBOT6Y=)
Validation: OK
Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:43:e4:56:c8:fc:3e:e2:10:bf:93:e4:8e:c6:8b:1f:5a:9f:5e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Validity
Not Before: Dec 5 19:55:00 2025 GMT
Not After : Dec 12 20:00:00 2025 GMT
Subject: CN=3082010A0282010100BC66302814B61BD89C9331105B0B4C93F8E6162DBD98AB85198AE0BEB699F966C4A2EE3E1A186C4C1FA61CB3A38965B647929B7237D0C368BD32B2496DA800C5F404FC828F01243DA619895DCEFAFF2B2A71E51E05EDCB33BBDD69A1483B5FD76733CB9416880D77F5937DB87F545DF6963D459A9A5B94BAB9E58EB9FE4B2C43577C55EF0333DB978D794B6D80F4004AA74E0A5DCF6BAFB411C7E07A4F74A37114A537454F2B4DAD07A58DDCF0F66761C1C8DD1AC92DB78BAFD132FB17D6E2433D3A3848CBE082BB124FB8FE0E7A7F2D710C6F40ADFE1E630DB827055B3ED88782C66E2130D8F1793C5D7A3F69C1FA63CB8D5F68211CFAC54A6028E2F12AB8710203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:30:28:14:b6:1b:d8:9c:93:31:10:5b:0b:
4c:93:f8:e6:16:2d:bd:98:ab:85:19:8a:e0:be:b6:
99:f9:66:c4:a2:ee:3e:1a:18:6c:4c:1f:a6:1c:b3:
a3:89:65:b6:47:92:9b:72:37:d0:c3:68:bd:32:b2:
49:6d:a8:00:c5:f4:04:fc:82:8f:01:24:3d:a6:19:
89:5d:ce:fa:ff:2b:2a:71:e5:1e:05:ed:cb:33:bb:
dd:69:a1:48:3b:5f:d7:67:33:cb:94:16:88:0d:77:
f5:93:7d:b8:7f:54:5d:f6:96:3d:45:9a:9a:5b:94:
ba:b9:e5:8e:b9:fe:4b:2c:43:57:7c:55:ef:03:33:
db:97:8d:79:4b:6d:80:f4:00:4a:a7:4e:0a:5d:cf:
6b:af:b4:11:c7:e0:7a:4f:74:a3:71:14:a5:37:45:
4f:2b:4d:ad:07:a5:8d:dc:f0:f6:67:61:c1:c8:dd:
1a:c9:2d:b7:8b:af:d1:32:fb:17:d6:e2:43:3d:3a:
38:48:cb:e0:82:bb:12:4f:b8:fe:0e:7a:7f:2d:71:
0c:6f:40:ad:fe:1e:63:0d:b8:27:05:5b:3e:d8:87:
82:c6:6e:21:30:d8:f1:79:3c:5d:7a:3f:69:c1:fa:
63:cb:8d:5f:68:21:1c:fa:c5:4a:60:28:e2:f1:2a:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B2:4E:8D:DC:45:F6:74:A1:63:64:9C:97:E1:48:FD:70:47:BA:D9
X509v3 Authority Key Identifier:
keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f3:7b:cb:0b:f9:db:89:42:07:2c:70:dc:44:b1:a1:5a:2b:
5c:f2:74:44:80:08:47:05:e6:12:8e:0b:25:8d:53:aa:6c:94:
df:f3:a2:1d:6b:60:6a:ad:2b:e4:0b:d7:0e:31:06:76:74:c1:
a0:6b:3f:d0:3c:ed:10:20:ad:0b:07:82:cb:f3:b0:0d:79:28:
ac:a7:49:06:f6:f4:14:d1:22:1b:5b:7c:6c:7b:29:d8:11:c1:
b8:b7:56:fb:0e:aa:13:a2:8c:86:23:8a:d7:f2:73:7d:82:4b:
34:69:57:ac:0b:ed:98:a6:d6:25:c0:52:40:6e:15:d7:a9:a1:
08:aa:ac:04:23:7c:0d:2f:9f:a4:6e:67:ab:11:4d:d4:1d:b7:
d6:95:69:f7:5b:f0:cb:ee:07:fe:65:25:7d:3c:7b:2b:f0:20:
8f:dc:17:5b:28:bd:67:4b:a6:4e:eb:85:32:8f:45:24:ef:c0:
02:58:b1:64:35:2d:f5:c4:c8:86:31:dd:a6:85:a8:da:5c:4c:
57:9b:09:76:f5:f6:7b:b8:e2:dc:c5:95:4f:96:86:fe:21:4d:
77:98:ce:77:3c:ad:27:ca:59:a6:43:5b:db:69:af:62:73:f5:
35:4f:2b:a5:e9:f4:9e:2c:ce:2f:2e:16:3e:0e:46:a5:07:20:
65:7d:73:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:30:48 2025 by rpki-client