Manifest
$ rpki-client -vvvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: LS39hSRl5mEhTi5SIsMuoXNCnlDtc4BhYwmt6Nm4gVM=
Subject key identifier: 5D:1F:8C:0A:95:AC:C5:9B:80:83:62:BF:90:B1:49:97:42:51:BB:DC
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 563F454A50524DB2E6B80D4668B5C9C5389ADE77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0D9E
Signing time: Tue 22 Sep 2026 12:12:00 +0000
Manifest this update: Tue 22 Sep 2026 12:07:00 +0000
Manifest next update: Wed 23 Sep 2026 12:12:00 +0000
Files and hashes: 1: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: 86BO5HBDaOlf6INaoxfvvESPVqk8O1NZfFaWzKEXX4A=)
2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: B9JNd2JEVLrX69QAHya7VMQxhkE1KOM4p8OQ/uKIX+k=)
3: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: NMGqI0BACWLSK0vZ+TT8tOUPGQBIpoDckgRuWWrEgDE=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 12:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:3f:45:4a:50:52:4d:b2:e6:b8:0d:46:68:b5:c9:c5:38:9a:de:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Sep 22 12:07:00 2026 GMT
Not After : Sep 29 12:12:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:d4:5f:ba:76:5f:d3:4c:fa:92:c4:2c:9e:
96:cf:4a:fc:47:d0:0a:46:a6:d5:f4:f0:6b:50:23:
4f:17:bf:53:cd:36:66:6d:13:77:ef:5a:28:cf:6d:
a9:3d:a8:98:36:af:fc:ae:09:7b:9c:3a:67:16:2b:
74:6c:c1:aa:e3:e8:19:54:3e:a3:4f:21:2a:70:90:
96:cc:84:de:b1:d2:6d:ad:c2:81:88:fc:cb:72:48:
03:d6:34:4f:06:62:22:14:50:0e:64:19:9b:6f:fb:
9c:ed:a2:d3:bc:93:62:88:c9:e7:e9:42:0f:f6:bb:
93:20:01:c4:ec:72:57:c6:e7:0f:ad:7c:70:94:cc:
2a:95:a5:e3:16:0d:9c:8e:b8:06:5a:25:7f:a4:c1:
d0:c3:de:2a:ac:07:42:22:ec:0c:8f:e1:11:3c:b3:
97:fd:ab:11:b6:2b:7f:55:a8:46:18:68:bf:6b:20:
dd:98:02:38:fd:b3:45:ab:56:54:36:7f:2c:cb:97:
6b:70:c9:1c:fe:e1:8a:dd:73:5d:25:fc:0d:7c:9d:
95:5c:0a:b1:6e:e0:29:e1:db:92:28:ad:58:46:ba:
03:38:56:ab:e0:ac:6b:6e:ab:ba:65:5b:38:51:e2:
cc:4a:f9:c2:d3:6f:74:3f:4c:50:3a:86:c1:fb:6f:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1F:8C:0A:95:AC:C5:9B:80:83:62:BF:90:B1:49:97:42:51:BB:DC
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5e:22:3b:12:fe:3d:cd:9f:e2:91:78:78:a2:5c:9d:14:fa:
9a:da:d4:46:bd:11:25:0e:1b:18:cf:63:c9:96:70:e4:29:9c:
49:1c:6a:44:af:03:55:75:83:bb:97:bb:ac:91:00:5b:60:5b:
7a:7e:c4:74:fa:c6:8a:99:54:a5:70:9e:a6:1f:9f:e6:8d:dc:
13:cf:3c:53:0b:70:5d:80:4f:73:b2:c7:27:cf:00:70:4f:01:
f0:3b:74:b1:cb:91:65:8b:3b:df:fd:7a:8c:6d:6f:da:0f:ad:
9d:e9:b5:03:49:26:1d:4d:61:5f:90:cb:d6:b9:8a:64:8f:d5:
72:58:8c:86:9c:84:69:ff:1f:39:98:80:8b:4e:fc:31:38:42:
df:78:6a:ca:6f:06:52:2a:94:28:1f:d5:80:0b:71:b8:9b:9f:
90:e7:e0:d2:a0:37:f3:25:ae:96:63:a3:65:bf:5c:c6:ad:ca:
31:f8:8d:8e:ee:32:a2:ce:fe:e3:4d:10:72:b6:6b:9c:89:7b:
23:90:af:04:61:ed:52:76:7f:93:a4:e3:91:35:49:64:f5:ce:
6a:af:1f:f3:e0:f3:8d:13:9f:c3:7f:2e:16:40:92:90:c4:74:
58:94:f0:7b:26:e1:b2:92:d9:18:e6:1c:22:41:4c:2d:ae:b7:
a5:c7:11:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:12:24 2026 by rpki-client