$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft File: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json) Hash identifier: dAyx5I17uCMdN75NxY8U8YHC5UVU/yhICQOswV1t//E= Subject key identifier: 92:59:D3:23:E7:FD:9F:EE:02:E7:21:94:24:C1:C0:D4:E4:36:0B:29 Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 45A55D2610C977F8984D445A9AE1EC0FCC6ACD84 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft Manifest number: 0AC4 Signing time: Tue 04 Nov 2025 23:00:00 +0000 Manifest this update: Tue 04 Nov 2025 22:55:00 +0000 Manifest next update: Wed 05 Nov 2025 23:00:00 +0000 Files and hashes: 1: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: B1nBYxAs50zgsqErVLGUMzYZqOCYEKZEMw+J5SQOX4Y=) 2: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: BC754BBmLYtzW2DYjylW3Lxadf4mWhwcczkW75SRgsk=) 3: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: pQK9jxtNXa4vbFwT34ESWxnCP+0ul/B5K896H7Ww21M=) 4: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: PWbi1odhaoaRDlAALK8/ApDLf1Qesl8Vt8U8dLB5EBU=) 5: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: zRC2uGd1inhs6KfyF86XQrMjx/87ZSPG4ivJMGZPqXg=) 6: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 3HkSBkgK4LRC6JzSCbaaRRptvnynVy4LYa9iN1sN/qw=) 7: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 6pwOcY55h1w9q107rm235NhWJP++2dePf4iMO8ef3oE=) 8: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: zzjAa1375lugS7WLL910yr8v1ytd05ZjcRaTjIgwtpc=) 9: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: 7VaYFqCVJN4qiDKtapN6mOTcpIi092RN2CJOsZ69AKU=) 10: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: lQy3knNW2EhGHIy8oK5UYeMbNiPGa0t8op4cMQ9UJsM=) 11: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: eNE8EEhc1iG8sZv5FHajTlSX0SAornZSI0y9pXBOT6Y=) 12: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: xOdpTeWx1XKyNghJjlzJHpj1FXT5YgC3jmRekathLYU=) 13: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: kephFAfMBUWrp4aoQeSmcgT2sE6soRtS1tegFMCEkDE=) 14: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: /DgHrGsKZXfhHJDujJu1DCrT/bG0Lf+Gu/mfh7ooopc=) 15: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: Gt4FDhrN+28MeIEFQUXRXVybQ44ldI0QDu2JQIBZDW0=) 16: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: pDr5tsFplOJsMtQn4U8LproSrPLlhumdi85cJm6E0TY=) 17: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: Wi1qb5YR6hM+Rr/97FNmrDj9BmcRyeZjRET4hlt6MxM=) 18: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: cmEAybMqPuIfLlMXrSUEMt6Vuv/W/pq4j5d4IDZPeMI=) 19: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: H/OqXn1pbV8T/wjgjaAu0tZ0nsGa8M9kfs0xVMkzCT4=) Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a5:5d:26:10:c9:77:f8:98:4d:44:5a:9a:e1:ec:0f:cc:6a:cd:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Nov 4 22:55:00 2025 GMT Not After : Nov 11 23:00:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:12:39:52:0e:7a:a8:df:7a:d6:0c:eb:57:ed: f7:8e:42:24:d4:7b:51:c6:09:b9:18:4b:c9:6e:31: 30:87:6d:a2:0d:df:2a:4c:8d:86:92:27:5c:63:ba: 89:68:87:ca:ac:97:d6:0e:6f:e8:4a:c6:50:66:ad: e8:0d:e5:34:34:5f:19:eb:ec:4c:45:e3:8e:1d:53: df:ba:09:6e:d3:be:7c:de:40:3a:99:62:12:67:4b: 97:11:ad:87:1b:45:9e:3d:33:79:92:92:52:cc:bd: 39:bd:90:5a:64:92:13:31:49:1d:8d:5b:d2:87:9d: ec:7a:d3:fc:5e:a8:07:af:c5:6a:1a:3e:05:1e:82: f3:da:eb:cd:6b:4d:10:ea:f7:ae:ed:e2:61:8e:38: 0f:27:30:7b:f9:f1:ea:5e:e5:dd:d3:3c:9f:c7:36: f6:d8:ad:2b:98:70:df:33:cb:7a:7e:49:01:3f:4f: f9:e7:44:48:b7:e0:81:c7:1e:94:a8:40:05:a8:85: 48:0b:ed:7f:04:c9:07:48:70:8b:36:0f:68:79:28: ae:96:73:00:e0:37:26:5f:72:e7:f5:ad:b8:02:2a: 16:ae:27:34:c9:30:7b:d1:46:51:6b:b1:24:96:e1: 12:2b:aa:35:b7:cd:66:6e:57:80:8a:6b:ca:09:70: be:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:59:D3:23:E7:FD:9F:EE:02:E7:21:94:24:C1:C0:D4:E4:36:0B:29 X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ba:75:d5:e6:13:2e:e5:b3:15:56:f9:af:63:fc:a8:9d:68: cb:df:62:39:59:9a:ba:c2:c5:c7:50:28:84:f4:84:91:79:77: 1e:d7:7b:f5:3d:5c:bc:86:36:8b:be:11:4a:d1:b2:a9:75:82: e8:b4:33:00:41:4f:e9:cf:c2:f7:0c:c0:ff:1a:f7:34:de:a5: 6d:76:19:17:9a:d5:37:6d:4b:f1:80:d5:99:81:2e:2b:fc:d7: ec:df:e0:c2:5c:e3:d1:a5:5c:9e:d8:35:e6:2a:32:4d:da:3d: bf:79:0a:a2:8e:cb:24:74:7e:91:90:15:72:f1:00:fd:f4:25: 5a:96:8d:6e:7e:38:78:42:72:a5:2c:52:04:d2:d0:b3:13:66: ff:09:6f:4b:20:fb:b0:9c:38:45:44:e2:74:5c:fc:4b:09:42: 13:8f:b3:1b:46:20:11:e6:6a:4c:5b:b5:3d:4a:92:64:85:b7: cd:8a:5e:f5:27:d1:4d:fd:54:80:4b:bd:94:24:d8:6c:64:a5: d1:52:f1:a6:f4:b1:d9:7c:d6:52:ef:9d:7f:b9:fc:3d:5b:e5: d8:91:c1:6a:6d:22:61:22:1b:2e:6c:53:8c:c0:b7:ab:1b:18: a4:fe:fd:d4:18:bf:81:f4:9d:53:f6:60:25:c0:bf:09:a7:eb: d2:e2:8d:b5 -----BEGIN CERTIFICATE----- MIIG4DCCBcigAwIBAgIURaVdJhDJd/iYTURamuHsD8xqzYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNTExMDQyMjU1MDBaFw0yNTExMTEyMzAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREQxMjM5NTIwRTdBQThERjdB RDYwQ0VCNTdFREY3OEU0MjI0RDQ3QjUxQzYwOUI5MTg0QkM5NkUzMTMwODc2REEy MERERjJBNEM4RDg2OTIyNzVDNjNCQTg5Njg4N0NBQUM5N0Q2MEU2RkU4NEFDNjUw NjZBREU4MERFNTM0MzQ1RjE5RUJFQzRDNDVFMzhFMUQ1M0RGQkEwOTZFRDNCRTdD REU0MDNBOTk2MjEyNjc0Qjk3MTFBRDg3MUI0NTlFM0QzMzc5OTI5MjUyQ0NCRDM5 QkQ5MDVBNjQ5MjEzMzE0OTFEOEQ1QkQyODc5REVDN0FEM0ZDNUVBODA3QUZDNTZB MUEzRTA1MUU4MkYzREFFQkNENkI0RDEwRUFGN0FFRURFMjYxOEUzODBGMjczMDdC RjlGMUVBNUVFNURERDMzQzlGQzczNkY2RDhBRDJCOTg3MERGMzNDQjdBN0U0OTAx M0Y0RkY5RTc0NDQ4QjdFMDgxQzcxRTk0QTg0MDA1QTg4NTQ4MEJFRDdGMDRDOTA3 NDg3MDhCMzYwRjY4NzkyOEFFOTY3MzAwRTAzNzI2NUY3MkU3RjVBREI4MDIyQTE2 QUUyNzM0QzkzMDdCRDE0NjUxNkJCMTI0OTZFMTEyMkJBQTM1QjdDRDY2NkU1Nzgw OEE2QkNBMDk3MEJFMzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA3RI5Ug56qN961gzrV+33jkIk1HtRxgm5GEvJbjEwh22iDd8qTI2G kidcY7qJaIfKrJfWDm/oSsZQZq3oDeU0NF8Z6+xMReOOHVPfuglu07583kA6mWIS Z0uXEa2HG0WePTN5kpJSzL05vZBaZJITMUkdjVvSh53setP8XqgHr8VqGj4FHoLz 2uvNa00Q6veu7eJhjjgPJzB7+fHqXuXd0zyfxzb22K0rmHDfM8t6fkkBP0/550RI t+CBxx6UqEAFqIVIC+1/BMkHSHCLNg9oeSiulnMA4DcmX3Ln9a24AioWric0yTB7 0UZRa7EkluESK6o1t81mbleAimvKCXC+NwIDAQABo4IB7jCCAeowHQYDVR0OBBYE FJJZ0yPn/Z/uAuchlCTBwNTkNgspMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjBvBggr BgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS5hcGVybmV0Lmlv L3JlcG8vQVBFUk5FVC8xL0ZDQjE4MDVGQTdBRTIyRDU2NUUwQTUwMkQwOEQzN0VC MkJEODM3QTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQCWunXV5hMu5bMVVvmvY/yonWjL32I5WZq6wsXH UCiE9ISReXce13v1PVy8hjaLvhFK0bKpdYLotDMAQU/pz8L3DMD/Gvc03qVtdhkX mtU3bUvxgNWZgS4r/Nfs3+DCXOPRpVye2DXmKjJN2j2/eQqijsskdH6RkBVy8QD9 9CValo1ufjh4QnKlLFIE0tCzE2b/CW9LIPuwnDhFROJ0XPxLCUITj7MbRiAR5mpM W7U9SpJkhbfNil71J9FN/VSAS72UJNhsZKXRUvGm9LHZfNZS751/ufw9W+XYkcFq bSJhIhsubFOMwLerGxik/v3UGL+B9J1T9mAlwL8Jp+vS4o21 -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:35 2025 by rpki-client