This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File:                     5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier:          Ley6qKWN3dC+mDIhsXF8dKFWls8E6gH32gkToDKsFBc=
Subject key identifier:   79:AC:E0:88:4E:DB:6C:0E:0F:EA:C5:36:6A:CA:32:2B:55:EA:69:CA
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer:       /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial:       7900A9875A68472708467C40FF0C3A4A072FB450
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access:      rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number:          0BE7
Signing time:             Sun 07 Dec 2025 02:34:00 +0000
Manifest this update:     Sun 07 Dec 2025 02:29:00 +0000
Manifest next update:     Mon 08 Dec 2025 02:34:00 +0000
Files and hashes:         1: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: LyBsrjWgnUFqjpRJ0O+3JcAcRkREed8ln9a6SbzfRzk=)
                          2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
                          3: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
                          4: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
Validation:               OK
Signature path:           rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 02:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:00:a9:87:5a:68:47:27:08:46:7c:40:ff:0c:3a:4a:07:2f:b4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
        Validity
            Not Before: Dec  7 02:29:00 2025 GMT
            Not After : Dec 14 02:34:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:b3:8f:45:cb:c1:52:f7:2f:4a:d6:65:d2:
                    86:66:ac:8f:7b:0d:1c:85:74:07:5d:10:36:3e:64:
                    91:e3:6b:fa:4a:ea:cd:78:32:61:fc:12:ea:18:59:
                    09:b2:0f:d2:6e:49:f8:d1:b8:9f:28:dc:da:a3:62:
                    ce:0e:ab:14:e0:ab:66:e2:20:af:db:8f:5c:44:5a:
                    e4:ea:6b:83:7a:d3:88:fc:67:83:47:48:d3:e6:d6:
                    ea:ef:1a:f6:08:57:1e:0a:36:ee:0a:c8:cc:67:d3:
                    9d:a6:69:22:03:44:43:19:cf:a3:77:83:fa:9f:85:
                    d5:10:70:2d:bb:ff:e1:28:12:05:7e:5e:d1:ca:7b:
                    2d:e4:5b:7f:f0:eb:b0:d8:30:e9:62:50:62:d2:a2:
                    ba:4d:bd:a9:84:ed:5a:90:f6:54:d1:42:2b:4e:25:
                    24:b0:f7:18:62:58:be:5a:0b:55:12:ca:ce:9a:3f:
                    1c:29:91:e9:37:21:4d:05:b6:b3:3c:11:91:c9:22:
                    41:b2:ae:e8:41:14:90:c4:36:4c:b6:9c:39:4d:63:
                    50:8f:7d:12:d9:a9:ec:bf:18:37:df:d3:5c:7a:db:
                    25:02:4e:a8:d5:14:12:4f:ec:29:72:03:49:2c:b9:
                    7b:6a:bf:39:87:69:86:fd:fe:5e:52:c9:2c:77:91:
                    5e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AC:E0:88:4E:DB:6C:0E:0F:EA:C5:36:6A:CA:32:2B:55:EA:69:CA
            X509v3 Authority Key Identifier:
                keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ad:55:a8:11:49:4a:98:d2:c5:87:ca:c9:fe:32:2e:67:23:
         08:45:9d:d8:c2:31:52:df:11:04:05:46:b9:5b:02:9e:26:a6:
         5c:6a:df:d0:a5:36:6c:0f:8a:29:03:80:3d:a0:45:66:d0:c1:
         0b:a5:bd:39:9e:18:55:63:20:0f:8d:4b:c0:e5:85:75:5f:9a:
         8a:1e:bc:f1:1f:65:36:f8:a5:ee:eb:b9:25:44:88:79:f1:4d:
         30:89:b1:53:3b:15:ff:09:da:f3:3c:85:65:04:2a:34:c3:23:
         3e:74:da:e3:43:a0:b0:10:35:ad:b2:d3:3c:bb:d8:ae:63:46:
         c9:3a:90:d2:25:50:26:33:e8:12:8f:98:17:ad:b4:3e:df:eb:
         b9:2c:5c:d5:e0:1f:99:61:12:9c:ae:c5:8a:64:23:db:4a:7b:
         58:a1:19:7f:20:38:2e:64:d9:aa:7a:c6:ce:f1:e1:f7:33:5d:
         53:1f:d2:44:1d:c4:cb:d4:5f:eb:5d:81:3c:0d:d8:8a:c2:f0:
         51:87:c5:7d:c1:c5:fd:80:1f:94:44:f7:49:a2:62:da:17:99:
         44:c1:d5:c3:85:c2:b4:c7:95:4b:03:18:8b:d6:67:81:83:76:
         26:b7:eb:c0:37:2a:31:06:43:ee:5f:c4:0a:2b:ef:9f:f7:bc:
         10:d2:a5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----