Manifest

$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File:                     5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier:          x8UpG6V6+S2eHmN6LviSaRk5hGdueQdQ7fd2giYDsaQ=
Subject key identifier:   44:5E:84:8C:D5:72:31:EA:E0:11:99:64:45:87:7F:2C:3E:55:61:B8
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer:       /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial:       7830342DEC5CBE5BDB08EDD68623B01F9AC8354B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access:      rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number:          0C66
Signing time:             Sun 01 Mar 2026 05:46:00 +0000
Manifest this update:     Sun 01 Mar 2026 05:41:00 +0000
Manifest next update:     Mon 02 Mar 2026 05:46:00 +0000
Files and hashes:         1: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: M1Aw8kDAtVwJe1cGpFIH+V7h/3Lczhi4fkp8J1zsqtU=)
                          2: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: 4gS/oAkZz0C2eMM0QhUZQfAB9W4tlDUe45GAIuIMSaY=)
                          3: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
                          4: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
Validation:               OK
Signature path:           rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 05:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:30:34:2d:ec:5c:be:5b:db:08:ed:d6:86:23:b0:1f:9a:c8:35:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
        Validity
            Not Before: Mar  1 05:41:00 2026 GMT
            Not After : Mar  8 05:46:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:d5:55:0f:c3:a5:da:1a:e8:e6:fd:00:75:
                    c9:6c:30:b5:49:66:3c:e2:ab:bf:b9:20:b3:f8:48:
                    af:06:fa:2d:d4:37:b2:59:1b:17:39:5f:80:5c:fb:
                    d9:3c:55:2f:75:6b:04:98:c7:7a:b8:7b:56:ed:d4:
                    7a:8e:4f:95:43:b7:dd:bc:69:d4:2b:6b:b9:48:df:
                    2c:26:7e:4f:1d:d6:a3:ed:9b:7b:9d:5e:f4:af:a1:
                    20:92:94:da:e8:c2:24:13:08:c7:cb:62:78:b4:09:
                    05:63:af:32:95:21:44:40:cf:da:83:ca:35:df:12:
                    c2:57:97:45:0a:8d:97:81:8a:23:7f:70:05:d1:bd:
                    30:38:fc:e9:09:23:c1:4c:e7:e1:56:1c:c1:84:48:
                    70:79:2d:bf:36:d1:61:11:cf:2f:47:23:a0:f2:dc:
                    a7:f3:78:82:29:e5:5c:63:19:25:f0:c4:fa:26:2b:
                    34:0c:2a:ea:e9:45:dc:3a:27:d7:c5:ab:61:94:62:
                    48:76:54:9c:bc:e9:17:e7:a7:59:51:30:f4:f8:d6:
                    77:3a:d0:54:51:ff:db:53:dd:e1:16:d4:26:c7:f6:
                    aa:3d:50:e3:f1:6a:9a:ce:47:d8:df:4f:3e:a9:d5:
                    76:1b:f4:5b:74:0f:c9:6a:8e:43:a1:30:a6:c5:38:
                    cc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5E:84:8C:D5:72:31:EA:E0:11:99:64:45:87:7F:2C:3E:55:61:B8
            X509v3 Authority Key Identifier:
                keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:3c:4e:ee:33:9b:87:08:7b:a0:3c:b4:c0:d3:98:d8:65:fc:
         9d:66:67:82:29:55:96:3b:9b:30:0b:29:80:8a:f3:b3:2c:b3:
         6f:44:76:80:e7:e6:2d:3e:69:d8:4a:94:a1:a1:8c:28:1d:08:
         46:f7:94:fa:19:72:58:57:e2:ba:e9:7c:16:ee:30:73:92:55:
         cb:c7:26:01:bb:2a:5e:8c:99:07:da:88:71:8e:95:cd:f4:26:
         4c:47:a3:a7:86:1d:31:eb:be:97:50:0e:a9:42:6d:d1:c4:1f:
         21:cb:04:fd:f1:51:5a:41:15:88:5a:b5:9d:14:a2:50:88:73:
         1f:19:fe:c9:2e:cb:27:fd:d5:91:58:ce:d9:2b:ce:e7:fd:d1:
         6c:1b:21:87:f1:8d:2a:b7:b7:84:d9:3e:a6:26:87:54:6d:3c:
         f4:3e:68:75:32:8c:b6:40:04:c5:7a:8d:1e:72:f7:e8:40:ec:
         df:8f:a7:8c:77:db:15:f9:31:d8:8f:a2:8d:fe:19:cc:3e:bc:
         1c:9d:ab:89:75:53:9e:78:6c:37:77:9b:90:96:5d:28:05:cb:
         d7:90:06:3f:b4:9b:17:82:84:5b:41:6c:fe:74:98:5d:7f:2a:
         0e:fb:d0:31:49:15:10:82:e6:7e:6c:82:e8:8b:a9:5e:23:79:
         09:3f:50:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:32 2026 by rpki-client