Manifest
$ rpki-client -vvvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: KvHDN0sQvlwBnkKoIYVjKKh8ivV/PuCufkqvQ3/udAQ=
Subject key identifier: 37:EA:9F:2D:BB:26:38:65:D6:B4:95:0B:81:64:48:A8:EF:8E:E4:30
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 5BEAB2E957444800841A3D47289FC8A9A145BA00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0DEA
Signing time: Thu 12 Nov 2026 05:38:00 +0000
Manifest this update: Thu 12 Nov 2026 05:33:00 +0000
Manifest next update: Fri 13 Nov 2026 05:38:00 +0000
Files and hashes: 1: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: 86BO5HBDaOlf6INaoxfvvESPVqk8O1NZfFaWzKEXX4A=)
2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: B9JNd2JEVLrX69QAHya7VMQxhkE1KOM4p8OQ/uKIX+k=)
3: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: O+umMN7bY3aSNKcYZGKfHT9JMB9UcoFwKxdxaUbcVsc=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Nov 2026 05:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ea:b2:e9:57:44:48:00:84:1a:3d:47:28:9f:c8:a9:a1:45:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Nov 12 05:33:00 2026 GMT
Not After : Nov 19 05:38:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:3d:2c:37:a2:6f:79:9e:97:24:06:58:bd:
ff:fa:ed:c6:e2:cf:8f:a3:00:60:0e:ae:48:7f:c0:
46:ff:f5:3b:2a:6a:45:5d:5a:9a:7d:39:55:c7:70:
bc:c8:cf:3c:0b:22:22:af:2c:e0:5c:72:db:27:c5:
dc:01:2b:09:19:19:45:9a:a6:c0:06:29:a6:af:13:
89:d6:77:29:af:4c:0b:bc:8f:66:79:f4:4d:09:23:
27:59:93:d2:bf:16:5b:6f:2e:7e:c2:60:18:16:07:
7d:a8:a8:f6:89:62:79:bd:0b:31:92:3e:f4:00:d6:
fd:f4:50:39:99:eb:db:6f:f1:9e:1b:5a:aa:fe:8a:
16:46:ae:96:66:71:d1:86:ed:08:11:d5:6f:84:08:
6a:6a:3a:c6:ca:bc:70:0a:b9:1e:6a:64:5f:36:f3:
dc:7a:b8:ac:10:6b:22:44:0b:20:6b:05:1d:49:30:
e8:e7:2b:15:81:33:dd:e6:93:35:17:10:da:9a:3d:
92:00:aa:b6:d7:79:e9:ed:3a:8a:1f:fc:56:2a:54:
bc:e5:6a:00:c1:86:f4:33:70:d7:81:d9:75:97:fd:
13:f5:d1:2d:37:09:c9:ca:5a:6b:d0:91:73:bd:fc:
04:2a:6c:82:02:48:81:ef:14:8f:ef:7d:5d:1a:7f:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EA:9F:2D:BB:26:38:65:D6:B4:95:0B:81:64:48:A8:EF:8E:E4:30
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:19:0c:1b:fa:53:31:01:f2:93:82:f8:62:ee:80:1e:7c:1e:
c0:09:a4:d4:27:52:28:c1:db:a6:ea:f8:85:91:88:9e:4a:69:
83:72:e2:f0:65:b8:66:c1:7f:64:64:38:9f:8a:ca:76:70:43:
56:d3:57:8e:da:3d:7a:2f:8d:73:a9:b5:e2:29:ed:63:6b:35:
2c:62:56:93:84:11:0f:19:6b:31:ac:9f:0c:48:11:7f:bf:9a:
07:f5:60:97:01:aa:f5:b8:04:a2:2d:eb:29:b0:35:0d:3e:5f:
ee:90:3c:03:42:4a:0e:4b:78:d8:76:fd:21:97:21:30:74:1a:
92:f6:0f:80:f4:12:b4:1c:81:2a:7c:60:1a:4d:9b:40:89:64:
8e:d8:24:3b:50:25:5d:ee:aa:32:aa:17:b7:48:89:39:65:59:
6a:7b:99:de:f5:cd:27:92:e4:59:47:64:cb:51:26:0a:1f:8a:
34:68:c7:a3:ec:1a:4e:f4:00:2d:58:50:e3:cc:e8:b9:77:2a:
ca:bf:b2:f0:3c:07:8c:12:14:0b:6e:21:96:ee:de:bd:f4:96:
5e:cb:73:d6:b1:3e:89:42:99:c3:f1:79:2e:b0:24:16:94:82:
54:a8:18:02:98:6b:c3:1f:09:fb:47:6d:a9:31:a9:da:5b:1c:
e0:b3:cd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 20:23:41 2026 by rpki-client