$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft File: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json) Hash identifier: hY89e0+lu/JCSv6t0XO/Z5Aq8WStx5C6JWnmqZU+/GA= Subject key identifier: FE:33:59:0E:F4:46:C1:9A:99:75:5A:E4:8D:63:2A:4E:49:E1:0D:1D Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 47DB3B00D43E5934EBEFA50F0B017A83A2D6D62A Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft Manifest number: 0BD8 Signing time: Tue 12 May 2026 15:00:00 +0000 Manifest this update: Tue 12 May 2026 14:55:00 +0000 Manifest next update: Wed 13 May 2026 15:00:00 +0000 Files and hashes: 1: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: PBlellj4ewr+5Yi7IfzeFQB87Jb2lW/mh91ATEE+ypA=) 2: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: B1nBYxAs50zgsqErVLGUMzYZqOCYEKZEMw+J5SQOX4Y=) 3: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: T+jD0JhZMjE8i1nOFavU1KolcpDBIzceIHgb9yMEk0Q=) 4: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 46sPnRy9Irgb4rrQNU7knYnrFtf4t9kVC4FpUVVN5f4=) 5: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: SBHLbyLMe3Cd6T258Wh/Yr+hq19lrGB/i1+DLsvf6VA=) 6: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: keOiZDcjlwbciwToj1zQSKIg8xd1cvE8dyAYL8Y+rXA=) 7: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: vs3UoJMNYjlIDAR0rzYNrKRhsWaZ/ZxH/RwXj9Ifxa8=) 8: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: fb5NDZbCd/XUB12rINgdhjT9rwn3T/pzjFH1ldtPyco=) 9: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: /DgHrGsKZXfhHJDujJu1DCrT/bG0Lf+Gu/mfh7ooopc=) 10: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: 4pYjD3vVYnnT7Vd2BpC8zUqzpY7fBZl0qUmOCIvq+d0=) 11: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: xOdpTeWx1XKyNghJjlzJHpj1FXT5YgC3jmRekathLYU=) 12: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: Gt4FDhrN+28MeIEFQUXRXVybQ44ldI0QDu2JQIBZDW0=) 13: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: SAkfjvG8Y6WQWfQk0MGV0etVn0uiNoUlRJFQFNokniE=) 14: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: 4sSoF1JcehmdjTxqTvzaApfR9MJ1+DEyOYy8OsccMu8=) 15: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: Wi1qb5YR6hM+Rr/97FNmrDj9BmcRyeZjRET4hlt6MxM=) 16: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 6pwOcY55h1w9q107rm235NhWJP++2dePf4iMO8ef3oE=) 17: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: H/OqXn1pbV8T/wjgjaAu0tZ0nsGa8M9kfs0xVMkzCT4=) 18: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: V8HI3LeqhlDWaTNhOKrowUK3gcQBxuKNchpGfE7O8VY=) 19: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: F6Sb6C8r+kxQjBCkCG4vPtEDy5gC9s+/Ef15CAMZ1qE=) Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:db:3b:00:d4:3e:59:34:eb:ef:a5:0f:0b:01:7a:83:a2:d6:d6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: May 12 14:55:00 2026 GMT Not After : May 19 15:00:00 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d2:2d:61:37:b2:e8:b4:49:8c:57:c0:46:1b: 3f:e6:0a:c2:80:4c:63:75:a8:f1:0e:4a:80:8b:8e: 78:d1:d4:79:b0:3c:ff:d8:0d:fe:1a:31:0d:ca:21: c2:5b:04:25:b7:14:5a:8d:8f:4d:6c:fa:4c:1a:f6: 27:d6:cb:b4:14:ca:01:40:23:03:db:76:e7:6d:05: 5d:9d:ef:46:77:27:b9:cc:1c:9c:f6:40:cc:b7:92: 09:97:2a:eb:8f:59:9d:13:5c:4e:46:84:d4:8d:f2: 45:b9:b1:9a:38:fd:a8:3e:d9:e9:4c:32:c1:12:3a: 91:d7:87:5b:b0:7d:dc:77:70:27:64:e5:95:fc:fb: 93:b2:29:01:33:ad:58:5c:81:63:45:74:45:c4:2f: 04:e7:2a:3b:e2:91:6d:fc:98:16:e1:a7:61:93:29: ea:99:a3:cc:30:c6:e8:39:08:ca:5d:ad:a4:ec:6b: 58:5f:f6:15:50:78:ec:79:88:0e:37:16:f7:e1:9a: 5e:0f:c6:aa:ba:29:d3:fe:cf:9e:88:a0:55:7f:bb: f3:6f:38:ab:29:91:90:be:a6:a7:8a:0a:13:d5:0f: 16:c4:c4:6f:dd:8c:dc:02:f6:da:b9:e3:a6:63:f8: 67:0a:2d:0a:4a:91:68:d9:88:d0:8b:21:c9:c8:a9: a1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:33:59:0E:F4:46:C1:9A:99:75:5A:E4:8D:63:2A:4E:49:E1:0D:1D X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:84:4b:dd:e5:c0:33:f4:43:2a:ec:4a:25:f3:ff:e9:b6:4c: 0d:8a:45:52:57:f3:39:24:96:5c:ea:bd:f3:99:42:01:02:aa: c1:53:86:8c:09:db:68:3d:84:83:36:0a:91:c0:65:7c:c0:11: 6f:92:3d:8b:a8:72:62:f8:fe:f7:ae:6c:24:e3:99:44:ac:82: be:9d:3b:07:31:16:fd:7d:bd:dd:a1:cb:8c:a1:9b:c0:79:45: c3:12:44:11:3c:94:b4:76:b3:55:c1:df:81:13:8e:9a:4d:03: 90:13:b7:4d:59:0a:2d:15:ae:5f:f1:6b:90:21:94:09:f2:8a: 48:5c:49:70:d8:9e:2b:09:9e:e2:98:f9:2b:00:86:7b:9f:9b: 0b:f8:16:4b:10:89:4a:0b:6d:5d:3b:48:cd:11:7d:c3:3f:0c: 74:89:03:f1:0c:15:44:fb:d0:d7:3d:1c:6b:bb:a7:2b:a7:e7: b4:62:d7:b2:30:b9:78:97:5a:b2:52:8f:04:79:a9:21:7c:41: 92:c1:db:c1:d0:55:1f:d2:63:bc:a2:41:8d:4e:4b:16:56:ef: 7f:dc:e0:0b:29:ab:fc:b2:c5:45:e0:80:d9:15:80:29:bd:b1: c7:75:75:e0:06:ce:51:0a:cb:e0:67:d6:ca:7f:33:3a:06:a8: 89:91:2b:81 -----BEGIN CERTIFICATE----- MIIG4DCCBcigAwIBAgIUR9s7ANQ+WTTr76UPCwF6g6LW1iowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNjA1MTIxNDU1MDBaFw0yNjA1MTkxNTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREJEMjJENjEzN0IyRThCNDQ5 OEM1N0MwNDYxQjNGRTYwQUMyODA0QzYzNzVBOEYxMEU0QTgwOEI4RTc4RDFENDc5 QjAzQ0ZGRDgwREZFMUEzMTBEQ0EyMUMyNUIwNDI1QjcxNDVBOEQ4RjRENkNGQTRD MUFGNjI3RDZDQkI0MTRDQTAxNDAyMzAzREI3NkU3NkQwNTVEOURFRjQ2NzcyN0I5 Q0MxQzlDRjY0MENDQjc5MjA5OTcyQUVCOEY1OTlEMTM1QzRFNDY4NEQ0OERGMjQ1 QjlCMTlBMzhGREE4M0VEOUU5NEMzMkMxMTIzQTkxRDc4NzVCQjA3RERDNzc3MDI3 NjRFNTk1RkNGQjkzQjIyOTAxMzNBRDU4NUM4MTYzNDU3NDQ1QzQyRjA0RTcyQTNC RTI5MTZERkM5ODE2RTFBNzYxOTMyOUVBOTlBM0NDMzBDNkU4MzkwOENBNURBREE0 RUM2QjU4NUZGNjE1NTA3OEVDNzk4ODBFMzcxNkY3RTE5QTVFMEZDNkFBQkEyOUQz RkVDRjlFODhBMDU1N0ZCQkYzNkYzOEFCMjk5MTkwQkVBNkE3OEEwQTEzRDUwRjE2 QzRDNDZGREQ4Q0RDMDJGNkRBQjlFM0E2NjNGODY3MEEyRDBBNEE5MTY4RDk4OEQw OEIyMUM5QzhBOUExQjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA29ItYTey6LRJjFfARhs/5grCgExjdajxDkqAi4540dR5sDz/2A3+ GjENyiHCWwQltxRajY9NbPpMGvYn1su0FMoBQCMD23bnbQVdne9Gdye5zByc9kDM t5IJlyrrj1mdE1xORoTUjfJFubGaOP2oPtnpTDLBEjqR14dbsH3cd3AnZOWV/PuT sikBM61YXIFjRXRFxC8E5yo74pFt/JgW4adhkynqmaPMMMboOQjKXa2k7GtYX/YV UHjseYgONxb34ZpeD8aquinT/s+eiKBVf7vzbzirKZGQvqanigoT1Q8WxMRv3Yzc AvbaueOmY/hnCi0KSpFo2YjQiyHJyKmhtwIDAQABo4IB7jCCAeowHQYDVR0OBBYE FP4zWQ70RsGamXVa5I1jKk5J4Q0dMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjBvBggr BgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS5hcGVybmV0Lmlv L3JlcG8vQVBFUk5FVC8xL0ZDQjE4MDVGQTdBRTIyRDU2NUUwQTUwMkQwOEQzN0VC MkJEODM3QTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQAfhEvd5cAz9EMq7Eol8//ptkwNikVSV/M5JJZc 6r3zmUIBAqrBU4aMCdtoPYSDNgqRwGV8wBFvkj2LqHJi+P73rmwk45lErIK+nTsH MRb9fb3docuMoZvAeUXDEkQRPJS0drNVwd+BE46aTQOQE7dNWQotFa5f8WuQIZQJ 8opIXElw2J4rCZ7imPkrAIZ7n5sL+BZLEIlKC21dO0jNEX3DPwx0iQPxDBVE+9DX PRxru6crp+e0YteyMLl4l1qyUo8EeakhfEGSwdvB0FUf0mO8okGNTksWVu9/3OAL Kav8ssVF4IDZFYApvbHHdXXgBs5RCsvgZ9bKfzM6BqiJkSuB -----END CERTIFICATE-----Generated at Wed May 13 00:38:56 2026 by rpki-client