This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File:                     5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier:          sPtnNy54LLdY1tm4liZiaZzM6QaGFF8SwxLYUkVAOgo=
Subject key identifier:   29:BD:F3:07:21:3D:00:63:A6:81:82:18:27:82:33:56:A0:B5:5F:FD
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer:       /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial:       5415C8CACE2526030CE0FB2BBA9EFF81CA8D4DF3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access:      rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number:          0C30
Signing time:             Sat 24 Jan 2026 19:44:00 +0000
Manifest this update:     Sat 24 Jan 2026 19:39:00 +0000
Manifest next update:     Sun 25 Jan 2026 19:44:00 +0000
Files and hashes:         1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
                          2: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
                          3: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
                          4: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: YhHqGEKudV5xqewsDv9+KlGtHk0OEcBZ/9mlHhJCROQ=)
Validation:               OK
Signature path:           rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:15:c8:ca:ce:25:26:03:0c:e0:fb:2b:ba:9e:ff:81:ca:8d:4d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
        Validity
            Not Before: Jan 24 19:39:00 2026 GMT
            Not After : Jan 31 19:44:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c8:5c:3a:22:62:06:bc:e3:2f:39:23:38:d5:
                    85:33:be:49:6a:ec:c3:5b:dc:db:1e:f5:0e:e5:2e:
                    ce:47:9f:7b:d5:23:bb:e2:5f:18:28:72:67:0d:13:
                    86:33:35:5d:b0:d9:57:05:17:60:c2:6f:1a:26:b5:
                    4c:1e:2e:1f:04:c2:b2:66:35:28:cb:59:df:61:fe:
                    c4:3d:c3:59:97:b7:43:81:5e:ff:d2:97:71:63:8e:
                    45:82:c9:64:d2:29:7d:6e:39:35:b0:bf:da:24:a9:
                    97:c2:8a:8c:f5:f3:11:90:08:f3:3b:f0:87:2f:12:
                    6e:c2:a0:19:91:9e:83:94:2d:46:6b:2c:2c:65:f9:
                    44:84:16:1d:a8:c2:2c:0e:bf:e0:35:e4:a6:43:bc:
                    d7:c2:88:92:67:9b:5f:58:c9:2d:e6:39:bb:36:bd:
                    55:a4:c7:73:7f:6a:85:57:23:5f:e7:b0:ce:e8:c6:
                    27:52:a8:43:67:25:cd:f6:e1:76:b9:26:ec:70:eb:
                    0e:8d:20:e9:49:50:3d:4b:84:49:df:d6:48:c6:ce:
                    ba:c0:75:8c:6b:4e:3d:80:c8:10:02:4c:aa:42:60:
                    f3:ea:37:65:ea:83:4a:a3:51:74:15:41:6b:e8:72:
                    e0:18:b8:65:11:44:0b:8b:dd:05:ef:53:0f:e1:b9:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BD:F3:07:21:3D:00:63:A6:81:82:18:27:82:33:56:A0:B5:5F:FD
            X509v3 Authority Key Identifier:
                keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0d:59:f5:97:91:5e:f9:3c:c9:f5:66:47:31:f3:e7:cb:b1:
         d8:db:dd:ea:91:0c:ed:27:e3:94:10:3c:21:35:4b:de:52:1e:
         96:b4:7b:01:6a:ab:a3:33:14:bb:02:de:a4:7b:d6:84:04:6e:
         de:8e:f3:dd:4b:86:b2:d4:ac:61:63:7d:d3:30:6e:76:8e:4e:
         b8:6a:d6:b2:bd:d0:33:6d:dd:b2:15:d5:2a:57:51:8c:df:f0:
         3d:d1:56:5a:b5:69:d2:03:87:d4:03:fc:62:10:ce:2a:92:49:
         d0:e8:70:e3:66:8a:e8:36:5e:77:6b:3b:1c:89:47:3c:f3:cd:
         04:0f:c6:c0:18:a8:79:4b:f4:9a:eb:51:9b:6a:74:e3:08:93:
         2d:b9:e7:52:30:31:6e:43:41:61:fe:4e:01:c2:99:3b:fb:dd:
         eb:85:5a:68:8b:62:e3:1a:81:1b:a7:5c:1c:32:70:fa:c0:cb:
         3a:0d:4b:a6:af:9e:7d:54:88:47:76:4f:b2:a3:9d:3f:35:b4:
         9b:93:ca:8d:e1:ca:72:fa:93:b8:cb:bc:0b:7c:28:78:df:7e:
         4b:78:a5:53:51:b6:95:3f:a4:14:cd:9f:5a:ef:bb:72:d3:50:
         ee:b1:c0:e3:84:46:df:01:49:71:17:57:5a:d2:a4:94:85:b4:
         10:21:fe:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----