
$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
File: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json)
Hash identifier: kZfzAk75ju9niZxG49SzO5/82t5dYzeH7nzQnedsT24=
Subject key identifier: 45:92:B9:77:0E:D6:07:2B:B3:C3:F4:EA:91:D0:2D:1D:20:6E:F3:10
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial: 540F2EED8054F88962D128557F918EA2AB20B0B2
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
Manifest number: 0BB3
Signing time: Thu 16 Apr 2026 18:00:00 +0000
Manifest this update: Thu 16 Apr 2026 17:55:00 +0000
Manifest next update: Fri 17 Apr 2026 18:00:00 +0000
Files and hashes: 1: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: a0GV8wnHyHWeHHxT059whOzaBqFv+llYMalQY/LKv54=)
2: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: vs3UoJMNYjlIDAR0rzYNrKRhsWaZ/ZxH/RwXj9Ifxa8=)
3: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: H/OqXn1pbV8T/wjgjaAu0tZ0nsGa8M9kfs0xVMkzCT4=)
4: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: SAkfjvG8Y6WQWfQk0MGV0etVn0uiNoUlRJFQFNokniE=)
5: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: SBHLbyLMe3Cd6T258Wh/Yr+hq19lrGB/i1+DLsvf6VA=)
6: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: keOiZDcjlwbciwToj1zQSKIg8xd1cvE8dyAYL8Y+rXA=)
7: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: /DgHrGsKZXfhHJDujJu1DCrT/bG0Lf+Gu/mfh7ooopc=)
8: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: Gt4FDhrN+28MeIEFQUXRXVybQ44ldI0QDu2JQIBZDW0=)
9: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: xOdpTeWx1XKyNghJjlzJHpj1FXT5YgC3jmRekathLYU=)
10: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 6pwOcY55h1w9q107rm235NhWJP++2dePf4iMO8ef3oE=)
11: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: fb5NDZbCd/XUB12rINgdhjT9rwn3T/pzjFH1ldtPyco=)
12: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 46sPnRy9Irgb4rrQNU7knYnrFtf4t9kVC4FpUVVN5f4=)
13: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: PBlellj4ewr+5Yi7IfzeFQB87Jb2lW/mh91ATEE+ypA=)
14: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: V8HI3LeqhlDWaTNhOKrowUK3gcQBxuKNchpGfE7O8VY=)
15: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: B1nBYxAs50zgsqErVLGUMzYZqOCYEKZEMw+J5SQOX4Y=)
16: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: F6Sb6C8r+kxQjBCkCG4vPtEDy5gC9s+/Ef15CAMZ1qE=)
17: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: Wi1qb5YR6hM+Rr/97FNmrDj9BmcRyeZjRET4hlt6MxM=)
18: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: T+jD0JhZMjE8i1nOFavU1KolcpDBIzceIHgb9yMEk0Q=)
19: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: 4pYjD3vVYnnT7Vd2BpC8zUqzpY7fBZl0qUmOCIvq+d0=)
Validation: OK
Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:0f:2e:ed:80:54:f8:89:62:d1:28:55:7f:91:8e:a2:ab:20:b0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Validity
Not Before: Apr 16 17:55:00 2026 GMT
Not After : Apr 23 18:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:5f:f3:0e:ca:81:97:e6:df:74:f4:da:b7:
0c:e8:99:04:d6:ac:6a:42:72:f5:10:a9:c3:64:48:
30:ce:83:c0:79:9d:51:29:2f:cd:55:f7:02:c9:ea:
8a:95:6b:91:21:e9:2b:a0:19:3e:f4:5c:65:14:9a:
b7:a3:f3:83:c3:07:85:8c:83:02:cf:fa:1c:97:9e:
42:dd:2b:36:c5:5e:de:d8:57:79:3b:e1:e5:dc:8c:
92:68:85:8a:76:d2:20:c8:df:9c:14:9c:b4:a0:58:
96:2d:8e:d0:f6:64:54:de:08:db:67:75:3b:8d:6e:
b6:94:43:e9:0f:75:11:e4:63:18:93:2c:63:6b:bf:
a8:19:ef:fd:d2:ad:3e:28:b7:64:21:97:60:3b:4a:
0c:da:e9:87:e2:4b:f4:cc:bb:1f:2a:46:14:05:7d:
ba:fc:fa:24:5e:dc:92:3f:95:f3:8c:09:41:88:6c:
bb:76:94:48:83:bd:8b:14:b5:cb:70:00:a1:5c:98:
50:be:94:03:1c:be:f7:b1:54:bb:c4:c4:ce:12:1e:
5d:7d:fb:dc:0f:d5:c4:41:f8:bb:f8:aa:38:3c:80:
98:c8:58:db:ae:ac:80:f4:e2:9c:7f:e8:67:97:00:
e8:6c:92:07:21:90:73:4b:47:b0:aa:71:24:a2:1e:
18:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:92:B9:77:0E:D6:07:2B:B3:C3:F4:EA:91:D0:2D:1D:20:6E:F3:10
X509v3 Authority Key Identifier:
keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:98:68:eb:39:92:0f:e1:33:95:95:6f:29:4f:8b:f4:1b:7b:
f1:33:2e:2c:a1:d9:d5:ad:47:92:c9:a4:ac:34:51:89:9a:8b:
08:fc:b0:b4:71:82:e9:e7:75:a0:ef:b2:ad:a6:41:16:4f:08:
ee:b3:17:30:93:50:4a:21:a7:a9:10:9b:c5:64:65:4f:3e:d7:
58:3f:1b:82:49:c5:a8:0c:64:32:2a:72:0a:b2:21:a8:fa:0e:
d9:3c:a3:79:c6:90:df:a2:9c:42:25:f0:bc:2c:c5:7a:8a:58:
50:59:b9:4c:12:a8:07:97:b2:8d:67:3e:f2:e7:53:a5:2f:b3:
21:86:b7:ed:23:be:35:85:06:03:a4:e5:86:ee:8c:36:e4:d3:
21:01:22:dc:ad:d4:ea:1d:92:5f:23:c5:cb:ac:6e:47:7d:8d:
0b:6b:10:d9:e5:7a:eb:75:c2:8f:c3:5b:c4:41:43:17:78:a7:
0d:6e:ee:5c:31:5b:80:2c:ea:cb:6d:37:fe:9e:2a:a5:f9:85:
e1:b9:11:81:19:89:33:36:6b:e9:1b:61:ea:13:bf:c9:41:8e:
9b:88:c1:ff:67:a7:bc:73:45:2f:cd:85:dd:e5:ef:a3:2e:4d:
d3:e3:99:0f:3d:d3:d2:32:b9:d7:71:b0:13:de:37:b0:76:1c:
2c:f9:dd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:16:26 2026 by rpki-client