Manifest

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
File:                     FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json)
Hash identifier:          XKiSI9fpafJlZBNVj0TTHQxkhJKXeUBgfJtaA6YJ2TU=
Subject key identifier:   2D:16:A8:98:E7:FA:25:28:37:66:B1:3E:B9:CC:BD:EE:15:05:AD:2E
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       274544C07504A732B97E570BD4E2F4829A7255AF
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
Manifest number:          0C3F
Signing time:             Thu 23 Jul 2026 11:00:00 +0000
Manifest this update:     Thu 23 Jul 2026 10:55:00 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:00 +0000
Files and hashes:         1: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: H/OqXn1pbV8T/wjgjaAu0tZ0nsGa8M9kfs0xVMkzCT4=)
                          2: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 6pwOcY55h1w9q107rm235NhWJP++2dePf4iMO8ef3oE=)
                          3: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: F6Sb6C8r+kxQjBCkCG4vPtEDy5gC9s+/Ef15CAMZ1qE=)
                          4: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: 4pYjD3vVYnnT7Vd2BpC8zUqzpY7fBZl0qUmOCIvq+d0=)
                          5: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: B1nBYxAs50zgsqErVLGUMzYZqOCYEKZEMw+J5SQOX4Y=)
                          6: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: vs3UoJMNYjlIDAR0rzYNrKRhsWaZ/ZxH/RwXj9Ifxa8=)
                          7: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: Gt4FDhrN+28MeIEFQUXRXVybQ44ldI0QDu2JQIBZDW0=)
                          8: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: PBlellj4ewr+5Yi7IfzeFQB87Jb2lW/mh91ATEE+ypA=)
                          9: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: YbdKJqvO4p3T8FTTF3BPeOPx9Tr0KE/e7rBy4VSE3Q0=)
                          10: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: xOdpTeWx1XKyNghJjlzJHpj1FXT5YgC3jmRekathLYU=)
                          11: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: fb5NDZbCd/XUB12rINgdhjT9rwn3T/pzjFH1ldtPyco=)
                          12: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: V8HI3LeqhlDWaTNhOKrowUK3gcQBxuKNchpGfE7O8VY=)
                          13: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: T+jD0JhZMjE8i1nOFavU1KolcpDBIzceIHgb9yMEk0Q=)
                          14: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: /DgHrGsKZXfhHJDujJu1DCrT/bG0Lf+Gu/mfh7ooopc=)
                          15: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: Wi1qb5YR6hM+Rr/97FNmrDj9BmcRyeZjRET4hlt6MxM=)
                          16: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 46sPnRy9Irgb4rrQNU7knYnrFtf4t9kVC4FpUVVN5f4=)
                          17: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: keOiZDcjlwbciwToj1zQSKIg8xd1cvE8dyAYL8Y+rXA=)
                          18: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: SAkfjvG8Y6WQWfQk0MGV0etVn0uiNoUlRJFQFNokniE=)
                          19: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: SBHLbyLMe3Cd6T258Wh/Yr+hq19lrGB/i1+DLsvf6VA=)
Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:45:44:c0:75:04:a7:32:b9:7e:57:0b:d4:e2:f4:82:9a:72:55:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: Jul 23 10:55:00 2026 GMT
            Not After : Jul 30 11:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:c7:50:69:4c:04:c8:73:a5:6b:cc:8f:d6:
                    c0:df:0a:b4:e6:6f:92:2c:c6:1b:3f:ce:79:da:17:
                    e6:a6:52:b8:f1:e2:f2:63:dd:0d:17:0e:86:20:46:
                    31:44:0f:04:15:01:6b:1f:b7:81:a9:8d:bd:14:0d:
                    1b:4d:5e:46:62:4e:75:6c:20:aa:4d:86:33:fa:92:
                    8a:86:b9:f9:0b:47:eb:d3:ed:72:9b:26:fe:a0:3c:
                    00:65:5d:cd:29:f9:4e:35:b7:a5:f6:0f:f3:3e:d0:
                    de:0b:ee:70:b7:eb:7b:52:2c:a0:c0:b7:36:69:73:
                    a8:96:b6:54:5b:76:3b:68:08:1b:e4:e6:49:59:e6:
                    d2:c8:9c:26:bf:ba:2d:26:41:9f:ce:7c:cc:5c:b3:
                    32:63:c5:fb:c1:27:da:57:ab:c3:3f:cf:b4:18:1b:
                    3d:16:75:7f:5d:e7:c4:c3:c6:d8:3e:a5:94:9a:2b:
                    b6:f2:02:55:90:9d:24:aa:8c:0e:2f:6c:f6:9e:ac:
                    fc:28:cc:4d:5d:1b:51:09:9e:6f:5a:c1:63:a7:1a:
                    f4:5d:64:5f:0d:e5:44:ca:49:0b:fd:d5:b8:ed:2b:
                    c2:f7:45:98:50:dc:1c:3c:d8:8a:f8:d9:81:84:dd:
                    48:40:7f:18:fb:fb:a7:4e:76:cc:90:fd:89:89:a0:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:16:A8:98:E7:FA:25:28:37:66:B1:3E:B9:CC:BD:EE:15:05:AD:2E
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:bf:84:0e:de:0c:24:cb:fd:08:e6:02:41:42:e0:60:6f:b4:
         f5:03:99:c9:f5:78:64:7d:00:3e:f7:71:01:8e:a1:64:6f:6a:
         09:df:40:d0:a2:39:cb:f2:69:9d:db:2a:60:e9:de:e1:58:11:
         54:93:c3:9f:b3:ac:19:2c:47:97:da:e2:50:29:f4:a1:14:bf:
         d5:75:5d:8e:d6:b2:48:c2:6c:5e:7e:27:77:34:f0:52:77:f0:
         25:76:ae:23:64:7b:72:e4:df:c5:6f:ae:b5:07:6d:21:cb:e2:
         f7:b9:56:f6:00:0c:14:45:3d:23:be:f6:c2:36:99:bd:1b:90:
         09:f4:4c:59:bb:c4:57:03:09:37:ce:33:52:c7:14:12:5d:22:
         5d:e2:f2:1e:a9:02:43:69:f8:6c:b0:a9:60:ec:e1:02:8d:c9:
         5f:50:14:47:ff:16:23:f6:25:59:0b:9c:71:0d:36:8f:d3:d0:
         be:3f:bf:aa:03:b6:17:c6:f4:3d:b6:b2:07:4b:34:39:16:45:
         a4:10:c3:10:c1:c3:e5:1b:f8:6e:c5:33:1a:f9:15:e7:85:05:
         70:90:69:ab:c7:a4:9b:62:87:d8:a2:c7:f6:1d:72:ea:f0:da:
         2c:94:b4:ed:1e:2a:87:f8:2c:31:53:f2:c4:a3:e9:25:3f:73:
         96:01:02:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:24:52 2026 by rpki-client