$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft File: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json) Hash identifier: tm1Wnv4bTZcb+53sBTeNotYGXaROkCqLVsobew1j0F4= Subject key identifier: 89:D4:6C:84:A7:B6:97:B9:6E:0B:F7:4E:87:AC:76:6B:2F:98:22:07 Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 44F913A31DA929428A8649D0D9EA70FDD572C9FF Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft Manifest number: 0B93 Signing time: Wed 25 Mar 2026 23:00:00 +0000 Manifest this update: Wed 25 Mar 2026 22:55:00 +0000 Manifest next update: Thu 26 Mar 2026 23:00:00 +0000 Files and hashes: 1: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 46sPnRy9Irgb4rrQNU7knYnrFtf4t9kVC4FpUVVN5f4=) 2: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: keOiZDcjlwbciwToj1zQSKIg8xd1cvE8dyAYL8Y+rXA=) 3: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: fb5NDZbCd/XUB12rINgdhjT9rwn3T/pzjFH1ldtPyco=) 4: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: /DgHrGsKZXfhHJDujJu1DCrT/bG0Lf+Gu/mfh7ooopc=) 5: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: Wi1qb5YR6hM+Rr/97FNmrDj9BmcRyeZjRET4hlt6MxM=) 6: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: kephFAfMBUWrp4aoQeSmcgT2sE6soRtS1tegFMCEkDE=) 7: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: SBHLbyLMe3Cd6T258Wh/Yr+hq19lrGB/i1+DLsvf6VA=) 8: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: EuncgaZrYevv0AP9wsT+kM+D+GkD3u+PXfCf5ZKM6rQ=) 9: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: F6Sb6C8r+kxQjBCkCG4vPtEDy5gC9s+/Ef15CAMZ1qE=) 10: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: SAkfjvG8Y6WQWfQk0MGV0etVn0uiNoUlRJFQFNokniE=) 11: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: 4pYjD3vVYnnT7Vd2BpC8zUqzpY7fBZl0qUmOCIvq+d0=) 12: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: B1nBYxAs50zgsqErVLGUMzYZqOCYEKZEMw+J5SQOX4Y=) 13: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: H/OqXn1pbV8T/wjgjaAu0tZ0nsGa8M9kfs0xVMkzCT4=) 14: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: V8HI3LeqhlDWaTNhOKrowUK3gcQBxuKNchpGfE7O8VY=) 15: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: Gt4FDhrN+28MeIEFQUXRXVybQ44ldI0QDu2JQIBZDW0=) 16: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: PBlellj4ewr+5Yi7IfzeFQB87Jb2lW/mh91ATEE+ypA=) 17: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: T+jD0JhZMjE8i1nOFavU1KolcpDBIzceIHgb9yMEk0Q=) 18: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: xOdpTeWx1XKyNghJjlzJHpj1FXT5YgC3jmRekathLYU=) 19: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 6pwOcY55h1w9q107rm235NhWJP++2dePf4iMO8ef3oE=) Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 20:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f9:13:a3:1d:a9:29:42:8a:86:49:d0:d9:ea:70:fd:d5:72:c9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Mar 25 22:55:00 2026 GMT Not After : Apr 1 23:00:00 2026 GMT Subject: CN=3082010A0282010100A2EFD171FAFF4552A8EAE43E0096C1747834AFDA771BF0C74E78BAD2171D569C18F55AC123CC74877D472A04B120B4F9AC7E1066F0887503AE52B1F590F845C0EFB5FD58328494EAB74F3266156D95E5393F6092CC295EDE650B1D6AEFD1D960A842669B43AA9E637DF1516D7264909A09C281E65892F318B2FE0CFD6EC6A723EE79D4B7511F452E89AF9DFB9057AD23A70428E2C4B4F535C66DBAFDDC7C6BAC4225C620C3E234C3A0BA1C5F463F6B06A136AF877482ACEBBA0EE005947094815D1372E8EE55810F4F74DF993F355FF87AB66B23DB6811E24BCE875E2A8F89F246F39F302B857EB663C6774BC883BFDE989341F3B35CCA77DE40BFE7E92DDC930203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ef:d1:71:fa:ff:45:52:a8:ea:e4:3e:00:96: c1:74:78:34:af:da:77:1b:f0:c7:4e:78:ba:d2:17: 1d:56:9c:18:f5:5a:c1:23:cc:74:87:7d:47:2a:04: b1:20:b4:f9:ac:7e:10:66:f0:88:75:03:ae:52:b1: f5:90:f8:45:c0:ef:b5:fd:58:32:84:94:ea:b7:4f: 32:66:15:6d:95:e5:39:3f:60:92:cc:29:5e:de:65: 0b:1d:6a:ef:d1:d9:60:a8:42:66:9b:43:aa:9e:63: 7d:f1:51:6d:72:64:90:9a:09:c2:81:e6:58:92:f3: 18:b2:fe:0c:fd:6e:c6:a7:23:ee:79:d4:b7:51:1f: 45:2e:89:af:9d:fb:90:57:ad:23:a7:04:28:e2:c4: b4:f5:35:c6:6d:ba:fd:dc:7c:6b:ac:42:25:c6:20: c3:e2:34:c3:a0:ba:1c:5f:46:3f:6b:06:a1:36:af: 87:74:82:ac:eb:ba:0e:e0:05:94:70:94:81:5d:13: 72:e8:ee:55:81:0f:4f:74:df:99:3f:35:5f:f8:7a: b6:6b:23:db:68:11:e2:4b:ce:87:5e:2a:8f:89:f2: 46:f3:9f:30:2b:85:7e:b6:63:c6:77:4b:c8:83:bf: de:98:93:41:f3:b3:5c:ca:77:de:40:bf:e7:e9:2d: dc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D4:6C:84:A7:B6:97:B9:6E:0B:F7:4E:87:AC:76:6B:2F:98:22:07 X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:83:33:65:c7:ec:c0:63:1e:a0:d9:ab:ff:95:92:2d:fa:61: 1f:6a:82:33:c7:f7:de:64:8b:2b:71:d0:42:93:42:20:25:43: b5:a3:c3:d4:de:b5:b7:7d:4b:47:65:b8:99:c5:f2:9d:2c:b3: 0a:86:c1:6f:42:49:61:2c:f0:b3:b7:c5:d4:ed:67:68:44:4a: b5:41:05:75:23:54:bc:12:10:cc:52:d8:a2:53:d1:04:ca:7a: 81:b9:e1:16:aa:ce:8e:c7:61:17:6e:8a:54:31:97:60:39:ee: 45:a4:7e:60:de:70:c5:92:d0:46:cc:e3:74:9a:44:37:2f:c4: 47:a2:d9:8a:91:ce:fb:13:05:a5:df:70:ad:93:ae:23:85:52: e1:ea:d0:cd:f5:c6:59:a6:bc:e6:f1:0d:f3:f2:72:97:9e:70: ec:30:f5:ca:38:b9:41:8e:f5:d1:16:3b:0b:9a:e6:b5:9e:d5: 22:4b:8a:c8:f0:f9:b0:14:5d:71:16:21:2d:75:52:dc:39:cd: ff:f7:fb:5e:be:5e:b6:88:5f:ea:a7:1d:be:3f:90:9f:70:80: a1:dc:8e:1e:7f:0e:c6:d9:b8:27:87:74:be:3d:c9:33:d2:35: 13:2d:c0:ff:21:45:74:ba:fc:47:fa:a8:15:3a:f6:69:98:99: 97:cc:1a:3c -----BEGIN CERTIFICATE----- MIIG4DCCBcigAwIBAgIURPkTox2pKUKKhknQ2epw/dVyyf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNjAzMjUyMjU1MDBaFw0yNjA0MDEyMzAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTJFRkQxNzFGQUZGNDU1MkE4 RUFFNDNFMDA5NkMxNzQ3ODM0QUZEQTc3MUJGMEM3NEU3OEJBRDIxNzFENTY5QzE4 RjU1QUMxMjNDQzc0ODc3RDQ3MkEwNEIxMjBCNEY5QUM3RTEwNjZGMDg4NzUwM0FF NTJCMUY1OTBGODQ1QzBFRkI1RkQ1ODMyODQ5NEVBQjc0RjMyNjYxNTZEOTVFNTM5 M0Y2MDkyQ0MyOTVFREU2NTBCMUQ2QUVGRDFEOTYwQTg0MjY2OUI0M0FBOUU2MzdE RjE1MTZENzI2NDkwOUEwOUMyODFFNjU4OTJGMzE4QjJGRTBDRkQ2RUM2QTcyM0VF NzlENEI3NTExRjQ1MkU4OUFGOURGQjkwNTdBRDIzQTcwNDI4RTJDNEI0RjUzNUM2 NkRCQUZEREM3QzZCQUM0MjI1QzYyMEMzRTIzNEMzQTBCQTFDNUY0NjNGNkIwNkEx MzZBRjg3NzQ4MkFDRUJCQTBFRTAwNTk0NzA5NDgxNUQxMzcyRThFRTU1ODEwRjRG NzRERjk5M0YzNTVGRjg3QUI2NkIyM0RCNjgxMUUyNEJDRTg3NUUyQThGODlGMjQ2 RjM5RjMwMkI4NTdFQjY2M0M2Nzc0QkM4ODNCRkRFOTg5MzQxRjNCMzVDQ0E3N0RF NDBCRkU3RTkyRERDOTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAou/Rcfr/RVKo6uQ+AJbBdHg0r9p3G/DHTni60hcdVpwY9VrBI8x0 h31HKgSxILT5rH4QZvCIdQOuUrH1kPhFwO+1/VgyhJTqt08yZhVtleU5P2CSzCle 3mULHWrv0dlgqEJmm0OqnmN98VFtcmSQmgnCgeZYkvMYsv4M/W7GpyPuedS3UR9F LomvnfuQV60jpwQo4sS09TXGbbr93HxrrEIlxiDD4jTDoLocX0Y/awahNq+HdIKs 67oO4AWUcJSBXRNy6O5VgQ9PdN+ZPzVf+Hq2ayPbaBHiS86HXiqPifJG858wK4V+ tmPGd0vIg7/emJNB87NcynfeQL/n6S3ckwIDAQABo4IB7jCCAeowHQYDVR0OBBYE FInUbISntpe5bgv3ToesdmsvmCIHMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjBvBggr BgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS5hcGVybmV0Lmlv L3JlcG8vQVBFUk5FVC8xL0ZDQjE4MDVGQTdBRTIyRDU2NUUwQTUwMkQwOEQzN0VC MkJEODM3QTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQAIgzNlx+zAYx6g2av/lZIt+mEfaoIzx/feZIsr cdBCk0IgJUO1o8PU3rW3fUtHZbiZxfKdLLMKhsFvQklhLPCzt8XU7WdoREq1QQV1 I1S8EhDMUtiiU9EEynqBueEWqs6Ox2EXbopUMZdgOe5FpH5g3nDFktBGzON0mkQ3 L8RHotmKkc77EwWl33Ctk64jhVLh6tDN9cZZprzm8Q3z8nKXnnDsMPXKOLlBjvXR FjsLmua1ntUiS4rI8PmwFF1xFiEtdVLcOc3/9/tevl62iF/qpx2+P5CfcICh3I4e fw7G2bgnh3S+Pckz0jUTLcD/IUV0uvxH+qgVOvZpmJmXzBo8 -----END CERTIFICATE-----Generated at Thu Mar 26 12:34:09 2026 by rpki-client