Manifest
$ rpki-client -vvvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: 1uhpzPG03nCE/t376UcoQKgCbg2LSLcbZFwjl3Oa3SA=
Subject key identifier: F1:7D:E5:13:D0:87:52:52:27:40:D2:4C:71:D2:B7:E1:3E:1D:8D:BA
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 62D08B50AFF9DDD76B55540765453AA5C050FFFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0DE0
Signing time: Thu 05 Nov 2026 13:26:00 +0000
Manifest this update: Thu 05 Nov 2026 13:21:00 +0000
Manifest next update: Fri 06 Nov 2026 13:26:00 +0000
Files and hashes: 1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: B9JNd2JEVLrX69QAHya7VMQxhkE1KOM4p8OQ/uKIX+k=)
2: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: 86BO5HBDaOlf6INaoxfvvESPVqk8O1NZfFaWzKEXX4A=)
3: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: h/VwbBN/+9MZv4wW1aOl/h/NrJ85lSGb8pDgNeo8NfM=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 13:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d0:8b:50:af:f9:dd:d7:6b:55:54:07:65:45:3a:a5:c0:50:ff:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Nov 5 13:21:00 2026 GMT
Not After : Nov 12 13:26:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:c4:0d:23:da:15:b5:6f:ab:57:81:20:03:
34:3e:50:91:1f:d3:f1:63:98:20:67:50:3b:d5:8d:
0b:06:5c:07:26:e1:d8:f6:6d:e2:8e:29:8b:96:e7:
ab:b3:d9:d0:59:a5:96:a7:52:dd:46:62:61:8a:60:
10:e9:18:16:a3:aa:a0:1d:44:13:90:83:66:bc:c0:
27:1e:d8:90:a9:36:ef:39:d4:bc:e2:42:2c:45:25:
b5:c5:69:a9:fe:9c:b8:63:ac:a2:f2:fb:ba:f1:49:
18:20:bf:ff:1d:fb:21:48:12:9e:89:a4:6f:7d:f8:
bb:b3:f9:cd:c8:a7:cf:ae:a7:89:c7:5e:3c:8d:d2:
b6:cd:f9:c3:e7:5c:13:aa:1c:a8:85:86:cf:5c:50:
1c:99:e2:cc:bd:e7:fa:43:20:fd:a0:b6:81:01:5e:
07:2c:f4:e6:92:be:61:8c:ed:bc:0d:84:6f:e3:71:
40:59:c8:75:f8:3c:31:c5:da:bc:c2:a4:da:41:a9:
c2:b1:15:af:58:37:df:5f:57:06:f4:1b:d5:39:85:
fc:33:75:55:6d:32:ae:6b:b3:7f:1b:46:1a:24:56:
0e:21:5a:f6:68:eb:13:11:81:fb:a9:4f:7d:bc:f6:
77:3b:f5:ef:fc:e5:0d:29:13:15:6e:e4:f9:38:61:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7D:E5:13:D0:87:52:52:27:40:D2:4C:71:D2:B7:E1:3E:1D:8D:BA
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e8:1c:72:2e:a4:01:9f:dc:a0:70:06:fe:6c:b9:5d:8e:2d:
a5:a5:7e:1e:f3:39:ec:83:14:a6:01:cc:75:a0:9b:66:53:c6:
f7:35:67:23:97:ba:de:99:e2:38:75:1d:c6:51:be:fd:45:9f:
0a:2c:c6:e4:bf:1c:e4:b0:01:65:4c:d6:01:f0:01:f2:ec:9d:
02:cb:24:86:e2:d6:d1:86:52:d2:44:10:a4:65:9d:9e:6b:6e:
26:a0:c3:3d:f6:a3:e2:a2:37:a1:5f:ac:58:17:f6:5b:7a:89:
8c:37:17:76:83:34:70:7b:8f:16:5f:c6:81:f9:d1:12:74:ee:
92:51:d7:b4:10:97:75:e6:fb:dd:5c:be:74:7b:dd:e2:10:76:
da:3f:af:a9:43:41:aa:a6:6d:eb:5f:cf:f2:a5:a6:37:bf:1e:
d3:81:47:a2:6b:0b:0b:bd:98:ce:2e:8b:30:58:82:cc:2f:b6:
90:72:02:35:59:66:df:05:d0:be:32:eb:cb:97:31:3f:ff:ab:
7b:f0:29:cd:93:a5:cd:6c:00:b2:79:e5:8a:9d:fd:83:3a:6a:
0a:6e:0a:cb:80:bb:5d:fd:67:65:cb:b3:28:bc:8c:14:f1:78:
45:b3:b7:ef:73:6f:3b:1b:37:a7:7f:24:c7:56:f7:16:ca:98:
3e:e3:f7:b0
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUYtCLUK/53ddrVVQHZUU6pcBQ//swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTRFNzUwMDAwMTEwLwYDVQQFEyg1QTE3OTY0OEIz
RUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGMB4XDTI2MTEwNTEzMjEwMFoX
DTI2MTExMjEzMjYwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCQkE4QzQwRDIzREExNUI1NkZBQjU3ODEyMDAzMzQzRTUwOTExRkQzRjE2
Mzk4MjA2NzUwM0JENThEMEIwNjVDMDcyNkUxRDhGNjZERTI4RTI5OEI5NkU3QUJC
M0Q5RDA1OUE1OTZBNzUyREQ0NjYyNjE4QTYwMTBFOTE4MTZBM0FBQTAxRDQ0MTM5
MDgzNjZCQ0MwMjcxRUQ4OTBBOTM2RUYzOUQ0QkNFMjQyMkM0NTI1QjVDNTY5QTlG
RTlDQjg2M0FDQTJGMkZCQkFGMTQ5MTgyMEJGRkYxREZCMjE0ODEyOUU4OUE0NkY3
REY4QkJCM0Y5Q0RDOEE3Q0ZBRUE3ODlDNzVFM0M4REQyQjZDREY5QzNFNzVDMTNB
QTFDQTg4NTg2Q0Y1QzUwMUM5OUUyQ0NCREU3RkE0MzIwRkRBMEI2ODEwMTVFMDcy
Q0Y0RTY5MkJFNjE4Q0VEQkMwRDg0NkZFMzcxNDA1OUM4NzVGODNDMzFDNURBQkND
MkE0REE0MUE5QzJCMTE1QUY1ODM3REY1RjU3MDZGNDFCRDUzOTg1RkMzMzc1NTU2
RDMyQUU2QkIzN0YxQjQ2MUEyNDU2MEUyMTVBRjY2OEVCMTMxMTgxRkJBOTRGN0RC
Q0Y2NzczQkY1RUZGQ0U1MEQyOTEzMTU2RUU0RjkzODYxQTIxRjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7qMQNI9oVtW+rV4EgAzQ+
UJEf0/FjmCBnUDvVjQsGXAcm4dj2beKOKYuW56uz2dBZpZanUt1GYmGKYBDpGBaj
qqAdRBOQg2a8wCce2JCpNu851LziQixFJbXFaan+nLhjrKLy+7rxSRggv/8d+yFI
Ep6JpG99+Luz+c3Ip8+up4nHXjyN0rbN+cPnXBOqHKiFhs9cUByZ4sy95/pDIP2g
toEBXgcs9OaSvmGM7bwNhG/jcUBZyHX4PDHF2rzCpNpBqcKxFa9YN99fVwb0G9U5
hfwzdVVtMq5rs38bRhokVg4hWvZo6xMRgfupT3289nc79e/85Q0pExVu5Pk4YaIf
AgMBAAGjggH7MIIB9zAdBgNVHQ4EFgQU8X3lE9CHUlInQNJMcdK34T4djbowHwYD
VR0jBBgwFoAUWheWSLPvI2nc5721gUD/fccGCr8wDgYDVR0PAQH/BAQDAgeAMGIG
A1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRP
Q0EvMS81QTE3OTY0OEIzRUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGLmNy
bDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZG
Mi9XaGVXU0xQdkkybmM1NzIxZ1VEX2ZjY0dDcjguY2VyMG0GCCsGAQUFBwELBGEw
XzBdBggrBgEFBQcwC4ZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9yZXBvL05BVE9D
QS8xLzVBMTc5NjQ4QjNFRjIzNjlEQ0U3QkRCNTgxNDBGRjdEQzcwNjBBQkYubWZ0
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAp6BxyLqQBn9ygcAb+bLldji2lpX4e8znsgxSmAcx1oJtmU8b3NWcj
l7remeI4dR3GUb79RZ8KLMbkvxzksAFlTNYB8AHy7J0CyySG4tbRhlLSRBCkZZ2e
a24moMM99qPiojehX6xYF/ZbeomMNxd2gzRwe48WX8aB+dESdO6SUde0EJd15vvd
XL50e93iEHbaP6+pQ0Gqpm3rX8/ypaY3vx7TgUeiawsLvZjOLoswWILML7aQcgI1
WWbfBdC+MuvLlzE//6t78CnNk6XNbACyeeWKnf2DOmoKbgrLgLtd/Wdly7MovIwU
8XhFs7fvc287GzenfyTHVvcWypg+4/ew
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:51:10 2026 by rpki-client