Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: PlWEQ5R/3TEaWQ7P5RSrxIzPj1M+LBRV7vLSFpS38yI=
Subject key identifier: F6:FB:DD:55:03:D6:A7:3E:68:08:DE:9E:EA:18:E5:EE:93:EA:F9:BE
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 0D9B006C60968D7066E6EF238AD91C1ECA146D38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0D43
Signing time: Thu 23 Jul 2026 18:52:00 +0000
Manifest this update: Thu 23 Jul 2026 18:47:00 +0000
Manifest next update: Fri 24 Jul 2026 18:52:00 +0000
Files and hashes: 1: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: 86BO5HBDaOlf6INaoxfvvESPVqk8O1NZfFaWzKEXX4A=)
2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: B9JNd2JEVLrX69QAHya7VMQxhkE1KOM4p8OQ/uKIX+k=)
3: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: sPTOga9XubdvaC+pmI9K/ABhUr/KUNwJy6cHJQTtlxg=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:9b:00:6c:60:96:8d:70:66:e6:ef:23:8a:d9:1c:1e:ca:14:6d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Jul 23 18:47:00 2026 GMT
Not After : Jul 30 18:52:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:8e:4c:78:07:9b:7a:04:ed:34:34:78:9a:
ea:74:9b:63:32:86:86:fa:c8:6e:b3:77:c2:e5:b4:
5a:48:e8:f8:91:16:94:4d:f5:60:ff:11:71:76:d3:
f2:c3:e5:cd:52:f9:3b:a9:a5:fb:07:f8:7d:5d:8c:
f6:1f:9e:aa:18:88:4a:78:57:00:3c:0d:3c:95:22:
a7:49:02:58:dc:78:3a:28:00:e4:17:7d:a0:34:da:
5a:60:4b:d2:4d:5d:2a:8c:6f:2e:df:86:2f:8d:00:
ad:65:57:c1:c8:00:4c:cb:88:56:1f:d6:ba:3d:ff:
12:91:76:18:ee:b6:41:c1:49:db:75:d2:1a:f4:c0:
2b:d8:3e:8d:40:96:90:4c:06:3e:5d:8c:3a:5a:2e:
dd:99:52:a9:a8:35:63:83:0a:ff:74:14:9a:e4:b2:
df:88:9c:f4:b2:78:75:34:78:25:90:a7:90:a5:f1:
5a:cc:dd:d2:dc:b1:23:40:31:fa:6c:66:06:7c:4f:
88:97:a1:6c:ec:07:d5:82:bf:5f:9a:68:46:13:63:
3e:73:e5:5a:d0:7d:34:ca:2d:3f:bb:c8:39:33:5a:
37:c0:ca:39:2b:d6:cb:f1:72:84:b2:d5:31:7d:6d:
5e:1f:b7:14:10:74:f7:97:33:21:c6:53:de:7a:06:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FB:DD:55:03:D6:A7:3E:68:08:DE:9E:EA:18:E5:EE:93:EA:F9:BE
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7f:87:6c:ab:bb:e5:32:d3:21:4f:03:b8:e3:a1:73:50:3b:
54:61:dc:f9:16:21:a6:fc:4c:04:17:ae:48:e8:f2:13:43:e2:
2a:f9:b8:54:6a:8b:7b:c5:a1:e4:aa:06:89:ba:7a:49:81:6a:
09:7a:cc:e6:25:a7:13:1e:7f:b0:5d:bd:b2:f6:7c:b5:31:11:
b3:7a:93:cc:90:fc:c9:71:8e:f9:43:b8:7f:d0:4a:e6:68:b8:
f7:cd:f9:b8:c5:be:e2:31:6b:ec:16:22:57:35:82:50:16:65:
28:2c:86:ce:77:3a:e0:7e:81:82:bf:14:4f:85:61:9a:1c:7a:
6c:d9:d4:67:68:98:ce:ec:ef:1f:9d:8d:d2:47:35:4d:a3:95:
3e:9e:68:dc:1e:3b:30:fa:44:a2:ab:7b:51:d6:2a:50:47:ab:
4f:57:80:99:de:f9:34:92:e1:5d:cd:66:f2:c0:56:ba:4c:4b:
97:7d:f4:b1:6d:c0:8e:92:29:0a:9d:91:1a:2d:88:50:aa:94:
66:52:97:a4:8f:01:4b:da:0e:d6:e8:58:c3:6e:f8:12:67:22:
18:3b:5a:54:6b:5b:0f:1d:c0:15:82:5f:f7:34:cf:2e:6c:14:
11:bf:54:60:7f:27:fa:4e:87:7f:f7:47:fd:dd:39:19:51:c3:
54:b5:4f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:41:49 2026 by rpki-client