Manifest

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
File:                     FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json)
Hash identifier:          liFlMso8z6rcavVwJ8Gdaj6iIdpUC5G3/Qvrv3JThm8=
Subject key identifier:   31:64:ED:6D:68:47:DF:55:A1:19:1C:CA:65:7A:52:38:D9:83:2A:26
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       1EAFD6FBB85659DBD645029A987F56D46A3CCFC8
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
Manifest number:          0A07
Signing time:             Sat 28 Jun 2025 15:00:00 +0000
Manifest this update:     Sat 28 Jun 2025 14:55:00 +0000
Manifest next update:     Sun 29 Jun 2025 15:00:00 +0000
Files and hashes:         1: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: cmEAybMqPuIfLlMXrSUEMt6Vuv/W/pq4j5d4IDZPeMI=)
                          2: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: eNE8EEhc1iG8sZv5FHajTlSX0SAornZSI0y9pXBOT6Y=)
                          3: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: 9XCeQLluoR2uKtqbugdFvG6PNdEYhFaEYsf2M+QnJWo=)
                          4: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: BC754BBmLYtzW2DYjylW3Lxadf4mWhwcczkW75SRgsk=)
                          5: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: zRC2uGd1inhs6KfyF86XQrMjx/87ZSPG4ivJMGZPqXg=)
                          6: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: pQK9jxtNXa4vbFwT34ESWxnCP+0ul/B5K896H7Ww21M=)
                          7: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: zzjAa1375lugS7WLL910yr8v1ytd05ZjcRaTjIgwtpc=)
                          8: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 0hSv9ivds3VlkU3/ZNM/S+kNIqZZSn98rmTbqYgaB/4=)
                          9: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: 0UUfSVfD70ODNfQQczqS73KrVntUNPr2YJ4FkC+VOXY=)
                          10: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: PWbi1odhaoaRDlAALK8/ApDLf1Qesl8Vt8U8dLB5EBU=)
                          11: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: 60g2fcy/avHbWFQdy40t0kDg2FVvvAZEHy7kSgqVAV4=)
                          12: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: lQy3knNW2EhGHIy8oK5UYeMbNiPGa0t8op4cMQ9UJsM=)
                          13: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: kephFAfMBUWrp4aoQeSmcgT2sE6soRtS1tegFMCEkDE=)
                          14: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 3HkSBkgK4LRC6JzSCbaaRRptvnynVy4LYa9iN1sN/qw=)
                          15: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: pDr5tsFplOJsMtQn4U8LproSrPLlhumdi85cJm6E0TY=)
                          16: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: e+q0bIN8ircxSQJpGQG1uOUqbNIONHabjSAyeFRt6FY=)
                          17: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: 8wZ0vJ61XrFhRDwRcjG53sUgW9srp3bLgyid9R66fAo=)
                          18: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: PAib4q5gqzf83GH7LrPfkT4IMy/qivltx9b7ElD8vEQ=)
                          19: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: k3YG3ZkwWXI2tForTzBP/t25KJO88bViDrkNnzt4n7s=)
Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Jun 2025 14:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:af:d6:fb:b8:56:59:db:d6:45:02:9a:98:7f:56:d4:6a:3c:cf:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: Jun 28 14:55:00 2025 GMT
            Not After : Jul  5 15:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:a1:bb:0e:04:c8:a1:f3:ca:a6:c0:23:ee:
                    02:b5:a6:7d:58:51:18:df:ba:18:dc:45:7f:ce:72:
                    e8:30:97:e4:01:0a:fb:84:85:f1:97:ef:ce:7c:cc:
                    e6:eb:51:40:9d:88:ef:f9:ae:28:d4:b0:87:d6:19:
                    79:ec:76:df:39:95:fb:6e:56:76:69:6c:be:a1:4c:
                    9e:8a:c4:f0:b3:af:dd:d6:9f:fd:fe:9a:ca:59:45:
                    f5:c1:f3:9f:08:a5:6c:05:1f:ef:8c:fb:25:27:40:
                    61:66:d3:e5:bb:cc:e8:ba:a7:7a:be:b2:45:64:af:
                    61:f4:26:0b:14:86:b1:92:e5:a3:d3:f5:c0:a6:e0:
                    a7:e5:21:58:e2:10:7d:d4:3b:fd:ba:ee:6b:fd:25:
                    b0:32:f9:03:3f:3b:f5:eb:33:b5:85:84:0f:70:2e:
                    4f:09:73:5b:90:70:60:e2:59:0b:09:1f:9f:bc:a7:
                    f0:30:93:c1:7a:08:73:5d:f1:50:eb:8e:99:9a:40:
                    cf:41:7c:35:0a:e3:de:76:bd:65:dc:47:81:ee:79:
                    a2:e2:2e:bf:31:70:0c:1d:19:26:7a:4d:1c:96:dd:
                    6d:25:69:74:2f:5a:94:6d:e6:d4:1e:39:60:52:4a:
                    06:f5:d2:bd:84:94:3d:3d:5a:2f:22:65:14:8a:87:
                    f0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:64:ED:6D:68:47:DF:55:A1:19:1C:CA:65:7A:52:38:D9:83:2A:26
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:03:4d:83:48:53:8f:e7:9e:ac:b1:e4:14:ad:ae:7e:e8:ff:
         c3:92:aa:91:e5:7d:38:be:cf:3d:eb:73:76:d6:ff:62:88:3c:
         0a:f3:b6:f0:7a:32:e6:d0:9d:2f:e7:80:72:de:3f:83:41:09:
         70:a5:63:5e:f2:a4:f8:47:ad:61:e6:3b:1c:9c:eb:37:06:01:
         4a:10:6a:5e:c3:27:2f:08:91:51:c9:55:f3:99:6e:bb:06:2e:
         ad:5b:16:d3:ba:8b:4f:f0:fb:14:3e:49:c2:bb:c3:ad:32:01:
         dd:9b:8e:d0:cf:ab:5e:b1:0d:c2:6d:8a:52:23:61:a8:db:54:
         64:ef:03:01:d0:a0:0c:25:6b:d9:f6:79:81:7e:66:76:25:97:
         ce:11:e6:31:a3:81:01:62:5a:6d:b5:5f:3a:e4:26:1e:4a:a8:
         53:ac:ed:a8:67:d1:11:65:a1:14:67:1d:6b:a1:9f:8f:d3:ee:
         17:af:cc:b5:86:80:0c:1b:0c:df:fa:58:b5:3b:6e:97:58:d5:
         c6:48:a4:c7:a7:39:db:6c:0b:dd:ca:bb:64:68:90:58:df:38:
         0c:1e:5f:0b:0c:3c:29:3c:25:f8:6f:c2:b2:90:77:62:9b:4c:
         c1:80:84:3c:74:f2:33:d3:a3:f4:13:06:d6:3e:70:6d:35:37:
         bb:aa:df:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:13:46 2025 by rpki-client