Manifest

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
File:                     FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft (raw, json)
Hash identifier:          o//v2MjuGjtmQmm/vnJVJX74dNGOf6yTcsAgV2ls0VY=
Subject key identifier:   61:07:F5:10:07:FB:62:D0:47:8E:1B:41:C7:B3:BB:63:19:51:A9:1B
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       24A9DBFD369450E62C2806FF00AE674204288FEF
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
Manifest number:          09AA
Signing time:             Fri 25 Apr 2025 02:00:00 +0000
Manifest this update:     Fri 25 Apr 2025 01:55:00 +0000
Manifest next update:     Sat 26 Apr 2025 02:00:00 +0000
Files and hashes:         1: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (hash: Tti3EMD5BHbLAWqxrbZLibfGyTreO0oncxFKF30Ot9M=)
                          2: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl (hash: gqfcn/cV2F9ohO/4bgcWdhvPgcxe7IRgFSKedrD3e4w=)
                          3: 323430363a343434303a3a2f34342d3438203d3e203338303038.roa (hash: pQK9jxtNXa4vbFwT34ESWxnCP+0ul/B5K896H7Ww21M=)
                          4: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (hash: PAib4q5gqzf83GH7LrPfkT4IMy/qivltx9b7ElD8vEQ=)
                          5: 3130332e3135322e33342e302f32332d3233203d3e203332353139.roa (hash: zRC2uGd1inhs6KfyF86XQrMjx/87ZSPG4ivJMGZPqXg=)
                          6: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (hash: pDr5tsFplOJsMtQn4U8LproSrPLlhumdi85cJm6E0TY=)
                          7: 323430363a343434303a3a2f34342d3438203d3e203136353039.roa (hash: lQy3knNW2EhGHIy8oK5UYeMbNiPGa0t8op4cMQ9UJsM=)
                          8: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (hash: 0UUfSVfD70ODNfQQczqS73KrVntUNPr2YJ4FkC+VOXY=)
                          9: 323430363a343434303a3a2f34342d3438203d3e203134363138.roa (hash: zzjAa1375lugS7WLL910yr8v1ytd05ZjcRaTjIgwtpc=)
                          10: 323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (hash: eNE8EEhc1iG8sZv5FHajTlSX0SAornZSI0y9pXBOT6Y=)
                          11: 3130332e3135322e33342e302f32342d3234203d3e203338303038.roa (hash: BC754BBmLYtzW2DYjylW3Lxadf4mWhwcczkW75SRgsk=)
                          12: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (hash: cmEAybMqPuIfLlMXrSUEMt6Vuv/W/pq4j5d4IDZPeMI=)
                          13: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (hash: PWbi1odhaoaRDlAALK8/ApDLf1Qesl8Vt8U8dLB5EBU=)
                          14: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (hash: 0hSv9ivds3VlkU3/ZNM/S+kNIqZZSn98rmTbqYgaB/4=)
                          15: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (hash: 3HkSBkgK4LRC6JzSCbaaRRptvnynVy4LYa9iN1sN/qw=)
                          16: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (hash: 9XCeQLluoR2uKtqbugdFvG6PNdEYhFaEYsf2M+QnJWo=)
                          17: 3130332e3135322e33342e302f32332d3233203d3e203338303038.roa (hash: e+q0bIN8ircxSQJpGQG1uOUqbNIONHabjSAyeFRt6FY=)
                          18: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (hash: 60g2fcy/avHbWFQdy40t0kDg2FVvvAZEHy7kSgqVAV4=)
                          19: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (hash: 8wZ0vJ61XrFhRDwRcjG53sUgW9srp3bLgyid9R66fAo=)

Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Apr 2025 21:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a9:db:fd:36:94:50:e6:2c:28:06:ff:00:ae:67:42:04:28:8f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: Apr 25 01:55:00 2025 GMT
            Not After : May  2 02:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:7c:ca:4f:d3:eb:4f:b6:e4:78:6b:77:57:
                    89:f7:23:86:14:7b:65:e7:ed:7c:19:12:32:26:3d:
                    56:df:5a:fa:a3:41:0f:ff:91:4f:24:9c:ed:e4:e4:
                    df:7d:77:8b:2c:81:fd:8a:03:2b:e5:a4:34:55:78:
                    ce:70:7b:a5:b0:d1:6d:05:7a:81:82:cf:d6:9b:d8:
                    6e:d9:18:99:48:9b:58:94:3c:2b:39:1b:b3:20:0f:
                    70:60:a2:f5:ef:2e:6e:93:58:07:35:be:c1:12:e1:
                    1d:1e:df:fb:77:57:19:92:7f:8c:d5:98:dc:e1:7d:
                    ae:3e:38:a1:b8:e9:ad:df:9e:89:45:2c:55:74:78:
                    44:ee:d6:dc:ce:36:c7:93:b6:00:a5:ee:5f:26:89:
                    10:09:ea:22:24:9c:5c:48:40:2a:e1:00:24:2b:38:
                    f3:e3:34:69:06:c5:ca:d1:41:3d:9f:7c:da:cc:d2:
                    a3:1c:42:c1:31:68:76:80:2e:4c:8f:63:ca:65:7d:
                    36:c9:26:d0:1f:44:58:2c:6f:d0:e1:cd:b7:3f:43:
                    76:d1:06:06:1d:3c:ae:6a:fe:be:c0:54:e8:90:e1:
                    28:25:7d:f4:a5:89:75:8f:17:22:52:3a:2a:a6:0b:
                    6c:07:e0:fc:d1:01:81:17:12:5d:79:0c:96:92:03:
                    ce:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:07:F5:10:07:FB:62:D0:47:8E:1B:41:C7:B3:BB:63:19:51:A9:1B
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d1:8e:6a:bb:34:1e:6b:34:4c:9c:97:e5:ac:9b:e7:40:a5:
         0f:55:e5:ff:10:61:0d:4e:f9:fc:7c:ca:38:63:dd:7f:59:2e:
         e3:00:66:45:e8:40:b4:f6:4f:2c:3f:b4:9e:91:b4:55:07:28:
         7f:f7:83:cf:6f:f6:b6:ae:22:a4:b8:4d:4d:58:fb:31:d2:25:
         97:e3:17:ae:e6:59:b9:9c:53:be:3c:96:d9:1f:1d:b5:57:63:
         1a:7a:e4:51:1e:cc:97:29:c5:18:a3:c2:01:da:05:0e:e0:d9:
         76:33:d7:18:2c:5f:cc:f4:d1:2f:37:64:f1:71:8d:1f:3a:be:
         64:f9:62:0a:0c:7d:09:4a:45:19:43:4f:56:7a:8a:20:62:8c:
         8c:45:7c:f9:0e:26:cd:8a:1b:fb:fa:9c:90:91:7c:28:21:01:
         9b:f1:c2:52:05:ba:2d:e7:b2:71:66:03:3c:86:b6:82:6a:27:
         8b:c9:c5:f8:c5:f7:a2:8b:b2:b9:85:c0:59:e5:45:ea:c6:31:
         a4:8f:a9:57:4c:6a:3a:58:2c:29:b2:a7:cd:e8:43:66:77:ff:
         ee:3c:05:c5:c1:9f:c7:fc:dd:82:9c:99:da:9b:1f:ca:27:0f:
         41:04:49:7e:74:7d:46:95:03:fd:93:a8:0f:99:02:2f:f4:da:
         96:39:2a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----