This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File:                     5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier:          VatWWllQERjTq4Lm91493uf/X+MZ1MUyQRZ+CrUtm+0=
Subject key identifier:   7E:D7:21:AB:41:C1:52:F1:E1:CD:E5:9F:B4:51:F3:96:63:EE:F2:89
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer:       /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial:       0ED60761A84AD2E2356658CDA7CDC38C8EFF962C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access:      rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number:          0BFB
Signing time:             Sat 20 Dec 2025 10:54:00 +0000
Manifest this update:     Sat 20 Dec 2025 10:49:00 +0000
Manifest next update:     Sun 21 Dec 2025 10:54:00 +0000
Files and hashes:         1: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: H43Hwox7eABggYd4vdECM/7VMWa5kqKESHos3FTvI/w=)
                          2: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
                          3: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
                          4: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
Validation:               OK
Signature path:           rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 10:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d6:07:61:a8:4a:d2:e2:35:66:58:cd:a7:cd:c3:8c:8e:ff:96:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
        Validity
            Not Before: Dec 20 10:49:00 2025 GMT
            Not After : Dec 27 10:54:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:02:5e:b6:0c:ac:91:52:65:f8:da:7f:11:
                    fd:32:98:c4:f0:17:94:f3:07:bb:39:f1:f3:ab:e3:
                    4f:08:6f:77:7a:ba:fc:f0:f5:3d:09:ad:21:95:48:
                    8b:e4:4c:d8:54:3c:52:cd:e3:a7:a4:67:52:e5:2e:
                    0e:fb:43:ad:a5:8e:5a:d0:65:22:dc:a8:16:bd:d6:
                    97:bc:80:56:7c:a4:cb:ea:54:f9:74:e2:51:92:26:
                    98:5d:2f:5f:5c:5e:d9:a2:27:14:80:ac:9f:27:ea:
                    4f:18:46:5c:ee:22:07:56:d0:d8:0a:0d:68:8c:bd:
                    bf:37:4d:57:59:5d:3c:a6:4e:b6:c8:29:92:f0:dc:
                    ec:20:5b:bd:84:41:aa:f0:d7:0a:dd:8a:31:b4:a7:
                    94:c6:6c:f4:0c:52:dd:8e:e2:17:da:c7:94:b9:29:
                    81:51:f1:02:47:55:22:c2:b0:ae:98:93:64:67:64:
                    8b:de:1b:81:65:cc:f1:4b:d6:93:77:f4:43:3e:ad:
                    21:ca:40:9d:fa:42:5e:3d:b4:d3:6a:d7:0d:90:0e:
                    7d:31:d3:5c:ba:19:0f:e8:5c:9e:bf:49:98:56:95:
                    6e:02:3c:2c:c4:01:93:6f:63:39:9c:86:fa:0f:47:
                    b4:1d:e0:a5:ff:9f:7f:44:0c:02:a8:93:ed:89:7a:
                    98:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D7:21:AB:41:C1:52:F1:E1:CD:E5:9F:B4:51:F3:96:63:EE:F2:89
            X509v3 Authority Key Identifier:
                keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:a5:9b:e2:38:50:89:81:c1:9e:13:2e:df:54:07:0f:68:97:
         1e:71:47:db:73:98:9f:21:dc:a6:71:60:6a:98:d0:82:a5:bf:
         63:be:ed:ab:cb:70:25:fd:6a:30:6b:be:2e:f2:a3:ab:a1:8b:
         60:40:3a:27:f8:a9:e3:50:37:15:02:15:a3:53:2f:3d:12:98:
         f8:56:1d:b2:f0:4a:45:50:40:57:8c:ed:a6:86:1b:2a:b3:5a:
         2f:79:25:a7:96:10:f1:a7:22:0c:90:64:a1:30:d5:87:ac:cc:
         31:ff:cc:e8:6e:00:4f:b0:3f:b8:f0:15:04:b5:f6:1f:d4:48:
         7c:4a:21:37:92:76:d8:be:75:8c:9e:c7:6a:f7:6c:fe:10:6c:
         d5:45:c1:de:c5:7e:f7:dc:aa:b6:58:ec:aa:d4:52:0a:d6:62:
         d5:6e:a4:cc:a1:58:8b:82:c7:58:ef:ce:0b:aa:13:92:1a:e2:
         98:5d:e8:1b:ee:d9:50:8b:c0:87:3c:37:19:99:81:4e:51:36:
         f9:99:8f:dd:7c:81:4d:0d:b0:4d:8a:e1:34:3f:80:54:0c:3a:
         84:69:3d:5f:63:e6:b7:c3:2c:e2:be:83:57:ae:43:5e:4b:d7:
         e5:db:ab:60:e7:26:0e:83:0f:c2:f1:97:9f:11:bd:ca:78:3c:
         7c:ac:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----