Manifest

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
File:                     FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json)
Hash identifier:          e2E/4svhxaiiwy+/sHy9VHtQfuldTIxAHY2Il95kjwA=
Subject key identifier:   9F:2D:73:29:84:17:B3:F2:CD:19:55:E1:65:31:1A:04:4D:5C:4B:E5
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       75B443C2C8CEF143414A6FF02B373953C90EA746
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
Manifest number:          09B9
Signing time:             Mon 05 May 2025 14:00:00 +0000
Manifest this update:     Mon 05 May 2025 13:55:00 +0000
Manifest next update:     Tue 06 May 2025 14:00:00 +0000
Files and hashes:         1: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: PAib4q5gqzf83GH7LrPfkT4IMy/qivltx9b7ElD8vEQ=)
                          2: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: 60g2fcy/avHbWFQdy40t0kDg2FVvvAZEHy7kSgqVAV4=)
                          3: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 3HkSBkgK4LRC6JzSCbaaRRptvnynVy4LYa9iN1sN/qw=)
                          4: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: 9XCeQLluoR2uKtqbugdFvG6PNdEYhFaEYsf2M+QnJWo=)
                          5: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: zzjAa1375lugS7WLL910yr8v1ytd05ZjcRaTjIgwtpc=)
                          6: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: ZLlIOs7k9ZZHNTV+0fpNxpdiqKUDSq0KMTXlNrkdLks=)
                          7: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: 8wZ0vJ61XrFhRDwRcjG53sUgW9srp3bLgyid9R66fAo=)
                          8: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: cmEAybMqPuIfLlMXrSUEMt6Vuv/W/pq4j5d4IDZPeMI=)
                          9: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: pQK9jxtNXa4vbFwT34ESWxnCP+0ul/B5K896H7Ww21M=)
                          10: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: zRC2uGd1inhs6KfyF86XQrMjx/87ZSPG4ivJMGZPqXg=)
                          11: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: eNE8EEhc1iG8sZv5FHajTlSX0SAornZSI0y9pXBOT6Y=)
                          12: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: Tti3EMD5BHbLAWqxrbZLibfGyTreO0oncxFKF30Ot9M=)
                          13: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: 0UUfSVfD70ODNfQQczqS73KrVntUNPr2YJ4FkC+VOXY=)
                          14: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: pDr5tsFplOJsMtQn4U8LproSrPLlhumdi85cJm6E0TY=)
                          15: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 0hSv9ivds3VlkU3/ZNM/S+kNIqZZSn98rmTbqYgaB/4=)
                          16: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: PWbi1odhaoaRDlAALK8/ApDLf1Qesl8Vt8U8dLB5EBU=)
                          17: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: e+q0bIN8ircxSQJpGQG1uOUqbNIONHabjSAyeFRt6FY=)
                          18: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: lQy3knNW2EhGHIy8oK5UYeMbNiPGa0t8op4cMQ9UJsM=)
                          19: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: BC754BBmLYtzW2DYjylW3Lxadf4mWhwcczkW75SRgsk=)
Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b4:43:c2:c8:ce:f1:43:41:4a:6f:f0:2b:37:39:53:c9:0e:a7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: May  5 13:55:00 2025 GMT
            Not After : May 12 14:00:00 2025 GMT
        Subject: CN=3082010A0282010100C7B196983BCE35E61A80F972095D13A47AA34DCAB7B4EB7E5BCE6562D16DD48886511A7BF2B14815536688AE09674804BDB4CE12DCE14400E1FBE369EAFC4B7ADF1F259F9F7A2A02AEEBDA6E53D36F96C4CDDC4FD20618866D4BF22DFA8BF1896AE172C506045DB7C833D47075F5FA806A79B68F70ED5A67AF6C70BD7C0863EF0C95B7129FE38B7AFF04BF7D3AA1126858A1D0EDFDFF95425560A8051D152311AE822742FCB662112329A3BAE752394269BC2E336DC7AC097A021CBCBCF6CFFB05B5F8CB3F18D6F1BF37A63B59B94D3595A6214572234C5669F34B9BF9C0873DF145D7E3D0C5E2C83F697E4367D480BEEE3223B318EBCD2B0AC9ED71F18987BB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:96:98:3b:ce:35:e6:1a:80:f9:72:09:5d:
                    13:a4:7a:a3:4d:ca:b7:b4:eb:7e:5b:ce:65:62:d1:
                    6d:d4:88:86:51:1a:7b:f2:b1:48:15:53:66:88:ae:
                    09:67:48:04:bd:b4:ce:12:dc:e1:44:00:e1:fb:e3:
                    69:ea:fc:4b:7a:df:1f:25:9f:9f:7a:2a:02:ae:eb:
                    da:6e:53:d3:6f:96:c4:cd:dc:4f:d2:06:18:86:6d:
                    4b:f2:2d:fa:8b:f1:89:6a:e1:72:c5:06:04:5d:b7:
                    c8:33:d4:70:75:f5:fa:80:6a:79:b6:8f:70:ed:5a:
                    67:af:6c:70:bd:7c:08:63:ef:0c:95:b7:12:9f:e3:
                    8b:7a:ff:04:bf:7d:3a:a1:12:68:58:a1:d0:ed:fd:
                    ff:95:42:55:60:a8:05:1d:15:23:11:ae:82:27:42:
                    fc:b6:62:11:23:29:a3:ba:e7:52:39:42:69:bc:2e:
                    33:6d:c7:ac:09:7a:02:1c:bc:bc:f6:cf:fb:05:b5:
                    f8:cb:3f:18:d6:f1:bf:37:a6:3b:59:b9:4d:35:95:
                    a6:21:45:72:23:4c:56:69:f3:4b:9b:f9:c0:87:3d:
                    f1:45:d7:e3:d0:c5:e2:c8:3f:69:7e:43:67:d4:80:
                    be:ee:32:23:b3:18:eb:cd:2b:0a:c9:ed:71:f1:89:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2D:73:29:84:17:B3:F2:CD:19:55:E1:65:31:1A:04:4D:5C:4B:E5
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:fe:60:aa:10:c0:a5:95:d7:05:42:eb:5e:c4:6b:af:67:04:
         dd:20:5f:66:6e:b5:18:4c:d6:17:2a:c4:04:af:7f:f0:ca:55:
         47:6a:11:1d:95:0a:62:14:f3:05:84:4a:95:f6:3e:cc:f7:56:
         cb:99:4a:85:0f:fc:39:5e:04:2f:ed:e8:fd:e6:00:5a:ab:14:
         59:87:cf:15:14:13:15:10:2c:1a:bb:68:13:e5:44:7e:26:40:
         07:4f:a1:14:56:9e:b0:12:a2:07:d7:59:ca:5f:f3:26:13:43:
         87:58:93:3e:64:fa:20:a3:6e:18:66:4d:ae:94:45:d0:c0:a0:
         38:c0:3c:3c:91:8d:2e:d1:eb:7a:84:2e:5e:ee:49:25:b9:91:
         79:0b:0f:66:fe:f2:79:28:39:a2:63:93:55:6f:39:35:90:c5:
         e1:bd:40:a6:3b:aa:83:53:10:24:be:77:4a:7f:e2:69:ba:a7:
         f3:50:74:85:2c:31:f9:58:b8:89:4d:50:fa:ee:76:cd:41:70:
         76:89:c0:9d:e5:be:e2:8f:47:8f:1f:2b:9f:cf:c7:55:f0:d2:
         1c:de:d5:fb:f5:55:52:bb:4b:8d:8e:ff:9d:eb:ef:e4:08:71:
         35:b9:00:e9:81:f3:4b:b9:c1:4d:96:11:2d:2b:c9:fd:2b:89:
         75:a0:93:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:11:15 2025 by rpki-client