Manifest

$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File:                     5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier:          wAP9cWPsAbcZye3iB/YwbNUOQ/+UvUhfkmkmD5v1Oq4=
Subject key identifier:   7F:75:4A:29:B5:CB:85:B7:F1:82:C6:17:54:2D:DC:4B:2B:5F:04:4E
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer:       /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial:       114560DBB4928EC65C5E460773AF8655E76E5556
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access:      rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number:          0CD3
Signing time:             Tue 12 May 2026 05:16:00 +0000
Manifest this update:     Tue 12 May 2026 05:11:00 +0000
Manifest next update:     Wed 13 May 2026 05:16:00 +0000
Files and hashes:         1: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: M1Aw8kDAtVwJe1cGpFIH+V7h/3Lczhi4fkp8J1zsqtU=)
                          2: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: 86BO5HBDaOlf6INaoxfvvESPVqk8O1NZfFaWzKEXX4A=)
                          3: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: IzjV9o7U92frGI98YHgv9ZRw32C7S6fWskOoCebBdF4=)
                          4: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: HN0r9l3/hqVw6ik/wlok80kHssY7lbz7iVlQe+Pf2H8=)
Validation:               OK
Signature path:           rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 05:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:45:60:db:b4:92:8e:c6:5c:5e:46:07:73:af:86:55:e7:6e:55:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
        Validity
            Not Before: May 12 05:11:00 2026 GMT
            Not After : May 19 05:16:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:32:41:8f:46:6c:24:03:c6:96:d6:56:3c:
                    c5:d9:10:92:06:16:00:0e:09:8e:c9:c0:0d:f3:be:
                    64:f2:81:fc:9b:eb:13:9d:54:ab:80:39:20:f5:99:
                    be:e1:fc:c1:25:73:6c:ed:e2:4c:88:a1:c5:19:1d:
                    2b:f7:46:84:0e:bd:c3:11:9c:54:e7:d2:ac:cf:5e:
                    fb:f9:09:3e:70:72:11:b5:7e:df:98:36:18:f2:57:
                    9b:f8:53:e1:a7:71:cc:a6:28:f7:73:01:6b:d9:fe:
                    6e:f8:4a:b3:54:e0:cf:25:d9:82:4a:88:16:f3:5b:
                    44:ae:c2:a2:33:e0:21:e4:a3:63:4c:9b:f3:00:65:
                    1f:5e:aa:05:3e:19:6c:50:27:3f:1c:28:aa:cd:e3:
                    a7:66:78:cf:bd:b3:f3:52:64:cf:5e:51:16:94:fc:
                    8e:5d:08:40:a0:16:e1:89:ac:5b:0d:47:37:5c:9d:
                    24:1a:b2:2e:b5:a9:08:b9:10:19:52:77:7f:7e:7d:
                    4b:c5:47:4e:1d:f7:bf:50:8a:00:0a:e7:f3:2a:0f:
                    cd:ff:45:ea:84:b9:29:fd:19:e7:1b:d7:4e:f9:c0:
                    7b:42:30:f6:e4:68:2a:4f:61:36:6b:57:07:99:df:
                    15:59:d1:2f:da:8d:e4:c1:20:0a:d8:e5:7a:62:ce:
                    40:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:75:4A:29:B5:CB:85:B7:F1:82:C6:17:54:2D:DC:4B:2B:5F:04:4E
            X509v3 Authority Key Identifier:
                keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:4f:c3:33:0b:a5:72:7b:7b:13:4f:cf:12:a8:d6:dc:03:ca:
         f8:d5:56:95:11:06:6c:f5:63:3a:dd:6d:64:1c:1a:25:ea:a4:
         84:b2:56:af:26:ab:f4:14:fa:0f:13:a5:be:75:90:72:42:9b:
         79:13:90:e6:98:67:e9:08:25:78:00:60:f1:60:58:c1:40:bb:
         69:bf:37:c9:ef:51:48:68:6c:5c:d2:bf:f7:eb:a7:dd:21:71:
         7f:35:9e:33:d6:fe:2b:e2:6b:dc:fb:8c:0c:37:18:ae:f1:6b:
         db:41:6c:8e:e1:8e:95:c1:fa:3a:6d:4e:f0:b1:eb:09:1c:f2:
         dc:d0:e0:47:2e:66:2e:c9:01:91:31:9a:a7:98:22:4c:5b:74:
         d1:ea:77:1b:9e:4c:3a:30:3b:21:b8:cd:ee:5f:fb:f1:73:c9:
         c7:a5:4f:53:46:45:a3:8a:dd:8b:12:02:34:f9:9a:98:ef:1f:
         aa:5a:6a:b2:44:3c:06:08:1c:4d:c8:18:67:5d:8a:9a:fc:71:
         70:9d:b5:39:f6:0f:af:b5:a8:9b:f0:7f:9f:c3:82:51:fb:ac:
         95:6f:50:28:23:2e:85:c7:b8:06:09:ea:b7:f7:f7:a4:39:d9:
         94:3d:00:12:e0:d6:bf:f9:55:a0:fc:66:55:5f:d9:dc:b5:05:
         7b:28:37:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:52:37 2026 by rpki-client