Manifest

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
File:                     FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json)
Hash identifier:          LE6mKIvDM4tJ6seTVGNrGwHCva3vDqwjqKghJbtK87s=
Subject key identifier:   1A:E4:17:82:DE:34:34:9D:24:F6:76:60:FD:EE:BF:65:12:47:28:49
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       030C0CBC997872D9DF03CA89D6F5FD63EFBE66F6
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
Manifest number:          0AAD
Signing time:             Sun 19 Oct 2025 20:00:00 +0000
Manifest this update:     Sun 19 Oct 2025 19:55:00 +0000
Manifest next update:     Mon 20 Oct 2025 20:00:00 +0000
Files and hashes:         1: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: BC754BBmLYtzW2DYjylW3Lxadf4mWhwcczkW75SRgsk=)
                          2: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 3HkSBkgK4LRC6JzSCbaaRRptvnynVy4LYa9iN1sN/qw=)
                          3: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: PWbi1odhaoaRDlAALK8/ApDLf1Qesl8Vt8U8dLB5EBU=)
                          4: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: /DgHrGsKZXfhHJDujJu1DCrT/bG0Lf+Gu/mfh7ooopc=)
                          5: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 6pwOcY55h1w9q107rm235NhWJP++2dePf4iMO8ef3oE=)
                          6: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: pDr5tsFplOJsMtQn4U8LproSrPLlhumdi85cJm6E0TY=)
                          7: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: eNE8EEhc1iG8sZv5FHajTlSX0SAornZSI0y9pXBOT6Y=)
                          8: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: kephFAfMBUWrp4aoQeSmcgT2sE6soRtS1tegFMCEkDE=)
                          9: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: H/OqXn1pbV8T/wjgjaAu0tZ0nsGa8M9kfs0xVMkzCT4=)
                          10: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: Wi1qb5YR6hM+Rr/97FNmrDj9BmcRyeZjRET4hlt6MxM=)
                          11: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: zzjAa1375lugS7WLL910yr8v1ytd05ZjcRaTjIgwtpc=)
                          12: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: cmEAybMqPuIfLlMXrSUEMt6Vuv/W/pq4j5d4IDZPeMI=)
                          13: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: Gt4FDhrN+28MeIEFQUXRXVybQ44ldI0QDu2JQIBZDW0=)
                          14: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: SPu8c69avfJ4D+JzLwT7ddmETfNIV6+HJX1YZaOokOo=)
                          15: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: xOdpTeWx1XKyNghJjlzJHpj1FXT5YgC3jmRekathLYU=)
                          16: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: pQK9jxtNXa4vbFwT34ESWxnCP+0ul/B5K896H7Ww21M=)
                          17: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: B1nBYxAs50zgsqErVLGUMzYZqOCYEKZEMw+J5SQOX4Y=)
                          18: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: lQy3knNW2EhGHIy8oK5UYeMbNiPGa0t8op4cMQ9UJsM=)
                          19: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: zRC2uGd1inhs6KfyF86XQrMjx/87ZSPG4ivJMGZPqXg=)
Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0c:0c:bc:99:78:72:d9:df:03:ca:89:d6:f5:fd:63:ef:be:66:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: Oct 19 19:55:00 2025 GMT
            Not After : Oct 26 20:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:71:46:e6:b2:ff:8e:96:90:b9:14:89:53:
                    c6:75:b8:d2:af:aa:be:e4:d9:a5:60:14:01:92:8e:
                    78:7c:28:2f:75:e2:2d:ca:8b:c4:3a:70:87:65:65:
                    19:08:2d:3b:30:30:ee:2e:87:d8:f1:47:a0:72:93:
                    2e:60:6a:c3:73:ac:b1:f5:a5:8f:9f:c4:f6:7a:a6:
                    d6:b8:dd:7d:94:5d:76:a6:f2:7d:95:ee:64:1e:93:
                    fd:37:74:2d:a0:bb:f1:7a:48:ef:58:1b:d5:7c:0e:
                    ae:0f:3c:00:71:a2:32:a4:72:b4:ae:b0:c2:14:5d:
                    42:65:7c:b2:3b:fb:72:94:a5:7f:c7:d9:82:62:ff:
                    52:17:1f:5d:cf:e4:52:00:4c:43:e1:3e:e8:2b:fe:
                    72:53:20:37:34:34:d1:66:58:d4:e2:7e:00:36:00:
                    f7:10:74:46:07:4d:61:63:f7:40:80:3a:70:f7:18:
                    50:9c:1f:40:c4:e3:c1:17:60:a4:73:23:64:d8:95:
                    07:99:ae:46:ee:a4:34:e6:14:79:b1:7d:af:05:54:
                    c7:e4:9f:45:a7:e8:51:12:17:91:36:d8:b5:11:58:
                    be:aa:b0:de:27:67:04:43:ab:c5:5c:e0:5a:d4:ab:
                    9d:90:70:bc:8b:2e:d0:80:26:b8:31:47:db:ac:c6:
                    0c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E4:17:82:DE:34:34:9D:24:F6:76:60:FD:EE:BF:65:12:47:28:49
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a1:a2:eb:df:cb:93:bc:bb:7e:1f:04:35:b5:26:50:6e:37:
         44:37:f1:87:a2:13:60:f7:b8:37:98:8a:ca:fa:e9:3c:8b:92:
         43:fb:6c:fd:15:22:10:75:fe:e3:a7:fd:1f:80:fe:26:a2:4c:
         ed:29:16:36:3b:b9:c9:70:94:c4:45:a6:68:26:12:b9:23:fd:
         fb:96:82:91:b3:ee:4f:af:4c:00:27:48:c0:94:20:77:12:ab:
         73:bc:ee:34:8f:0a:59:b6:68:ab:5b:d0:c4:3d:ab:87:5b:a6:
         de:5f:eb:96:0f:9f:88:b6:5b:3a:d6:15:49:38:ef:f3:ec:66:
         d8:5d:2a:26:ff:a5:9b:24:9d:0b:07:5d:f5:39:57:96:82:17:
         ce:45:b0:c7:5e:ce:0c:30:23:d7:c8:ca:84:e1:3d:5d:cb:5b:
         05:3d:3d:a0:72:61:66:9b:58:cc:e4:8b:28:0c:25:1a:8b:88:
         4f:2d:4c:aa:f2:7f:25:b1:cb:7b:f3:b3:f5:91:88:19:55:63:
         3e:dd:b7:03:88:91:95:a5:e3:07:2f:2a:2b:f1:f2:e1:9c:c2:
         ff:6c:50:76:54:36:27:aa:8a:34:83:ec:7f:fb:18:b2:2f:10:
         c5:77:0f:70:cf:71:ce:bf:82:38:c1:07:27:37:2b:c2:1c:da:
         13:63:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:57:33 2025 by rpki-client