Manifest

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
File:                     FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json)
Hash identifier:          C2mef9rlvyF4CahKh/P7aY/licIY70W/1dVxMJwCNPo=
Subject key identifier:   EB:D4:55:13:E5:DF:8C:0B:43:65:83:B2:99:E6:04:2F:26:10:52:47
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       1CDD3984B7CF5B7CA12EC104BAF7F6EEE722AED4
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
Manifest number:          0C47
Signing time:             Wed 29 Jul 2026 00:00:00 +0000
Manifest this update:     Tue 28 Jul 2026 23:55:00 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:00 +0000
Files and hashes:         1: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: B1nBYxAs50zgsqErVLGUMzYZqOCYEKZEMw+J5SQOX4Y=)
                          2: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 46sPnRy9Irgb4rrQNU7knYnrFtf4t9kVC4FpUVVN5f4=)
                          3: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: 4pYjD3vVYnnT7Vd2BpC8zUqzpY7fBZl0qUmOCIvq+d0=)
                          4: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: T+jD0JhZMjE8i1nOFavU1KolcpDBIzceIHgb9yMEk0Q=)
                          5: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: Wi1qb5YR6hM+Rr/97FNmrDj9BmcRyeZjRET4hlt6MxM=)
                          6: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: fb5NDZbCd/XUB12rINgdhjT9rwn3T/pzjFH1ldtPyco=)
                          7: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: DP1TLZ/APLUvtL3Tqe5oBJpenkAwvGEm6lXpHWW/Auw=)
                          8: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: xOdpTeWx1XKyNghJjlzJHpj1FXT5YgC3jmRekathLYU=)
                          9: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: SBHLbyLMe3Cd6T258Wh/Yr+hq19lrGB/i1+DLsvf6VA=)
                          10: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: Gt4FDhrN+28MeIEFQUXRXVybQ44ldI0QDu2JQIBZDW0=)
                          11: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: PBlellj4ewr+5Yi7IfzeFQB87Jb2lW/mh91ATEE+ypA=)
                          12: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 6pwOcY55h1w9q107rm235NhWJP++2dePf4iMO8ef3oE=)
                          13: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: H/OqXn1pbV8T/wjgjaAu0tZ0nsGa8M9kfs0xVMkzCT4=)
                          14: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: SAkfjvG8Y6WQWfQk0MGV0etVn0uiNoUlRJFQFNokniE=)
                          15: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: F6Sb6C8r+kxQjBCkCG4vPtEDy5gC9s+/Ef15CAMZ1qE=)
                          16: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: /DgHrGsKZXfhHJDujJu1DCrT/bG0Lf+Gu/mfh7ooopc=)
                          17: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: keOiZDcjlwbciwToj1zQSKIg8xd1cvE8dyAYL8Y+rXA=)
                          18: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: vs3UoJMNYjlIDAR0rzYNrKRhsWaZ/ZxH/RwXj9Ifxa8=)
                          19: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: V8HI3LeqhlDWaTNhOKrowUK3gcQBxuKNchpGfE7O8VY=)
Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 10:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:dd:39:84:b7:cf:5b:7c:a1:2e:c1:04:ba:f7:f6:ee:e7:22:ae:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: Jul 28 23:55:00 2026 GMT
            Not After : Aug  5 00:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f3:8d:e2:99:5f:08:2a:bf:b0:5b:6c:79:14:
                    41:83:0a:b2:20:47:aa:7e:fb:24:39:d0:45:e5:fd:
                    9e:d8:20:dd:90:b8:1c:d3:e7:ff:fb:e6:eb:e4:97:
                    bc:ba:8a:f5:54:0c:06:41:ea:32:c6:1b:5d:1b:c9:
                    b5:5c:eb:ee:97:80:e2:11:7d:e5:c5:c4:d8:33:84:
                    eb:03:9e:5c:41:e5:95:22:3b:e6:34:9f:24:87:41:
                    02:4d:1b:ca:8e:65:ca:fd:88:cf:71:f4:77:8c:b5:
                    20:e3:26:b5:c0:32:0f:3c:61:a6:16:37:c1:62:f2:
                    28:94:32:ad:8b:20:15:f8:21:01:74:5a:34:0f:9b:
                    16:cc:1b:c9:ef:ba:1a:16:a5:88:f1:ed:52:13:67:
                    78:3f:cf:a5:bd:9e:31:d6:5f:02:db:fb:53:37:b8:
                    c1:5f:a3:ee:1d:5c:cc:a1:1c:19:ef:7a:21:0a:24:
                    f8:c7:41:aa:a5:64:ba:28:d4:01:91:e8:6c:00:00:
                    16:df:33:31:dc:6f:80:77:bc:b5:91:da:b4:61:8d:
                    60:d5:a8:43:93:18:4b:0b:61:9c:bb:0f:6a:03:a9:
                    16:ed:17:84:f3:47:3e:59:5f:76:11:3a:89:83:b0:
                    ea:f2:dc:50:fe:1c:e8:1b:83:6e:3a:1d:16:1b:8c:
                    30:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D4:55:13:E5:DF:8C:0B:43:65:83:B2:99:E6:04:2F:26:10:52:47
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:97:8c:e0:2b:01:f4:df:77:4e:80:27:5c:ee:59:10:66:06:
         b5:0f:6c:67:54:8d:0a:e7:07:fb:70:fd:a5:d8:9f:bf:4b:9e:
         77:04:17:a8:d6:57:47:17:fa:9c:29:2e:77:b0:4a:2b:e2:eb:
         bc:4b:99:2d:38:44:1f:81:ed:fc:62:b0:06:95:68:34:03:2e:
         48:7b:b3:1b:d6:eb:90:d4:44:b4:95:8d:19:77:c7:18:ab:e3:
         90:77:94:93:26:e6:ca:d1:5c:30:36:ce:71:97:41:ab:16:2c:
         30:8f:91:45:98:a9:57:7c:21:5a:de:be:cb:c8:42:1a:95:3d:
         ff:99:c0:16:c1:02:7a:48:58:c1:1e:d6:a7:8d:f8:1e:66:8b:
         2e:8b:0d:dc:e7:fd:7b:a4:ba:9b:5a:cb:38:07:49:0a:88:84:
         c2:eb:38:10:e7:8d:cc:8c:7f:c5:b9:c8:80:4a:bf:61:80:33:
         af:e3:6e:fb:d1:80:ea:75:41:84:d7:31:ca:04:54:58:9e:a1:
         f4:d5:16:9a:dd:b6:e5:27:d3:46:3b:c6:a5:38:0c:e3:65:92:
         dc:91:65:aa:4e:85:72:72:c6:6b:d7:e9:fc:ca:46:80:64:5d:
         7f:e3:3d:ba:02:8c:32:5b:27:d7:d1:40:82:fd:4d:0c:f3:d2:
         7c:56:c9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:22:36 2026 by rpki-client