Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: aRAeupAEc0v0IWfFXd+wMgW1VqJoMCjOnxKM5w8rSDg=
Subject key identifier: 47:AE:99:77:C1:04:9C:8E:8C:42:99:7E:96:7B:FC:01:39:37:AE:4A
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 587DCC4873E8A7DCED1D96C80F44E8D91BB7131F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0C8F
Signing time: Fri 27 Mar 2026 20:08:00 +0000
Manifest this update: Fri 27 Mar 2026 20:03:00 +0000
Manifest next update: Sat 28 Mar 2026 20:08:00 +0000
Files and hashes: 1: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: M1Aw8kDAtVwJe1cGpFIH+V7h/3Lczhi4fkp8J1zsqtU=)
2: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: s6cZ6tKIqEutLKEHeopMTDZ8HDgYq25kBYcR+/wwj8c=)
3: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: 86BO5HBDaOlf6INaoxfvvESPVqk8O1NZfFaWzKEXX4A=)
4: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: IzjV9o7U92frGI98YHgv9ZRw32C7S6fWskOoCebBdF4=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 20:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7d:cc:48:73:e8:a7:dc:ed:1d:96:c8:0f:44:e8:d9:1b:b7:13:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Mar 27 20:03:00 2026 GMT
Not After : Apr 3 20:08:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:d1:1f:41:32:5f:5b:be:ba:ae:25:00:7b:
36:d1:db:6c:89:81:0e:90:12:7b:e8:19:82:a8:a6:
8f:b5:93:02:0a:2d:e3:1a:3b:d5:e9:76:05:3c:3f:
52:62:ae:02:83:a5:be:ed:10:f5:eb:21:02:2c:83:
75:57:4d:d0:43:1f:07:b5:57:61:b7:f2:65:05:b2:
94:9b:fe:64:dd:af:92:c4:25:87:f2:60:60:0a:a6:
69:72:86:3b:b1:73:52:08:94:00:3d:91:ae:21:29:
b3:1f:a3:9d:1e:3d:7f:40:91:a1:9c:29:d8:bf:56:
99:3e:42:69:e8:16:a0:04:e3:bc:cc:26:08:e8:93:
de:c0:4f:63:ad:3f:cf:60:e3:c4:2a:14:57:c5:d4:
af:c8:f9:9a:ee:0d:f3:66:ba:65:8d:54:d5:4a:90:
f7:c6:bd:4d:eb:12:4f:50:09:e6:2e:75:1a:98:bb:
8f:05:a3:59:a7:d1:51:6c:86:97:e4:ac:2f:10:de:
d0:c5:04:52:65:6b:27:88:a1:f4:58:ff:ba:b7:6a:
a7:87:7a:64:e1:51:d9:2a:5d:20:e3:d6:ba:5b:6b:
50:e6:b8:0e:f7:6b:74:31:50:cc:15:75:23:ee:f6:
9e:1d:45:4e:ef:3a:c2:3a:69:8d:46:96:67:e0:ac:
22:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AE:99:77:C1:04:9C:8E:8C:42:99:7E:96:7B:FC:01:39:37:AE:4A
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:53:a2:57:c0:c3:f2:35:51:56:5a:44:e4:62:bc:1d:fd:5b:
7c:b0:0a:91:ed:03:82:f9:3c:ed:d6:e7:fe:db:ef:78:e9:02:
c3:fa:fc:82:5b:b4:91:74:cf:e2:d3:83:ef:78:10:9e:33:ce:
50:52:83:b3:19:43:cc:6c:9c:43:3b:c1:94:5b:b1:4a:13:80:
c2:af:b2:78:55:5c:d2:32:5b:0f:2e:cf:ea:f4:02:f9:23:92:
de:e7:77:6e:25:bd:a0:0f:4d:13:b7:cb:64:b9:c9:c5:03:41:
48:1a:7c:f2:84:45:e4:6b:9b:62:a6:f1:32:c9:bd:9c:79:05:
e5:c8:3f:a0:11:86:9d:f8:77:f2:a6:13:fa:70:13:32:0b:6b:
e7:29:ad:c1:e5:1a:7f:c7:ca:4d:22:3b:65:0b:80:15:92:5e:
28:92:85:3d:ef:c4:0a:f2:25:27:a7:b2:5d:4b:97:ac:58:61:
a5:21:8f:af:01:c2:7e:04:e8:1b:75:f3:9e:68:30:b0:74:b9:
2a:85:a6:88:5f:5f:50:0c:bf:55:d6:4c:06:d3:2d:33:f7:e3:
c1:b7:ba:55:2f:78:fc:0e:c0:b1:6e:ba:84:41:5b:ae:7e:06:
27:51:45:0c:60:98:8c:2c:12:1b:a4:30:75:74:62:af:ac:d6:
eb:99:89:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:15:14 2026 by rpki-client