Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: l1Sbh3/kDMWwtdWRJ1F72Km5aguSbrp3p18ls5lnID8=
Subject key identifier: B6:24:C0:6A:14:AD:99:2B:FD:81:DF:4A:08:D4:3F:DC:43:DE:AB:EC
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 0C2312503F15374E87BCCCD82F05213A8F822F41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0D03
Signing time: Fri 12 Jun 2026 17:26:00 +0000
Manifest this update: Fri 12 Jun 2026 17:21:00 +0000
Manifest next update: Sat 13 Jun 2026 17:26:00 +0000
Files and hashes: 1: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: +qnxoaETJIa1ndmTnRRAIwhO1m3jp69/yy/7hXjYG10=)
2: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: 86BO5HBDaOlf6INaoxfvvESPVqk8O1NZfFaWzKEXX4A=)
3: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: IzjV9o7U92frGI98YHgv9ZRw32C7S6fWskOoCebBdF4=)
4: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: RMAAsb1z2EHoCXUAjKpThug3xMHZNf+mlc84hTr1PdU=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 17:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:23:12:50:3f:15:37:4e:87:bc:cc:d8:2f:05:21:3a:8f:82:2f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Jun 12 17:21:00 2026 GMT
Not After : Jun 19 17:26:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:ee:9c:6e:5b:99:6a:b3:7a:f4:b0:4d:5d:
ea:91:09:06:1d:9f:6c:3a:fe:6f:08:fa:76:f7:77:
ee:ae:ec:d1:d5:ef:53:61:5f:72:de:9a:17:80:c5:
32:db:ca:c7:0c:9a:48:41:55:31:15:1d:16:1d:94:
7d:5a:ec:34:e3:cb:6b:89:72:8a:f5:7f:07:42:77:
6e:42:26:40:89:f7:70:1a:02:4e:0d:ee:f6:cf:7b:
6b:1f:01:8c:3a:28:ea:2b:0e:c0:85:23:f8:b5:42:
0e:f0:5a:a9:6b:33:ba:07:4a:8a:34:a7:91:e2:ff:
1d:cc:89:d7:dc:2a:84:fa:64:36:b8:bf:5e:5f:91:
87:50:a5:1e:69:ca:1e:e4:ad:68:63:8f:ee:97:09:
b2:9c:41:0f:df:1c:57:98:b9:77:2c:4b:b1:2e:23:
71:98:06:33:1b:28:88:66:7a:ec:65:92:ae:b7:07:
18:67:bf:83:01:00:8c:20:17:e2:68:85:58:66:f8:
08:5e:87:5d:27:6f:18:a8:d4:c7:48:a5:6f:f2:ad:
3e:4d:de:c0:fb:5a:a6:87:0a:4c:a2:46:4d:df:7e:
25:3c:51:e0:d8:98:c9:4d:e1:cd:1d:60:ee:e8:6f:
e6:62:3a:75:36:72:98:a8:78:11:50:33:ff:00:d2:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:24:C0:6A:14:AD:99:2B:FD:81:DF:4A:08:D4:3F:DC:43:DE:AB:EC
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:22:6d:e0:b2:78:18:2a:ce:54:4e:13:5c:b3:a6:7a:c9:62:
aa:b8:58:58:80:61:ce:fe:6d:66:02:85:f3:63:64:24:53:98:
dd:d1:96:72:38:b7:2a:cb:d7:6c:b0:25:cf:15:1a:9c:b5:fd:
c4:ac:80:47:04:36:12:19:56:1a:78:9a:b9:62:9b:c1:51:38:
af:a7:73:43:ab:9e:fb:ba:84:87:78:2f:e6:d8:10:a1:a3:9e:
d6:90:2f:95:9a:45:17:bb:0f:c3:4b:86:40:17:66:d6:7b:1b:
8f:64:84:14:c0:ac:93:ed:9d:79:2f:b5:d3:b8:26:a5:bf:52:
dc:30:35:a2:be:3b:a6:13:61:7d:49:e3:13:31:55:a3:a8:f3:
5c:be:b3:20:72:d0:02:46:76:67:66:50:6e:00:3b:ed:7c:f7:
79:0b:01:8d:16:29:d1:65:8c:aa:42:cb:00:dc:7b:82:38:5b:
c6:48:f4:ce:df:36:3f:12:2f:a0:7c:b3:12:ce:74:35:2a:be:
68:d6:64:27:92:4f:07:6c:df:32:b3:8c:9d:d3:6e:be:49:c3:
7e:47:a9:c9:f8:e2:06:98:3d:f5:e2:c6:19:db:df:04:13:a2:
07:21:2a:c8:23:54:99:e1:f9:53:4c:b6:f6:8b:37:d3:20:46:
83:14:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:25:58 2026 by rpki-client