Manifest
$ rpki-client -vvvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: jyxsDXhu1hHor9BWHe5nqd6OiGPc7y59hzFbTwuna+4=
Subject key identifier: 96:CB:3D:5D:11:01:AD:A0:EE:47:E0:EE:62:28:96:B8:7C:95:CC:68
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 0291E97A4989520E95B4E14DE9477F700D9F509B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0D9B
Signing time: Sun 20 Sep 2026 12:10:00 +0000
Manifest this update: Sun 20 Sep 2026 12:05:00 +0000
Manifest next update: Mon 21 Sep 2026 12:10:00 +0000
Files and hashes: 1: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: 86BO5HBDaOlf6INaoxfvvESPVqk8O1NZfFaWzKEXX4A=)
2: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: zinvyd1xZ0bYQQ2O0mm4qzG5f1y//XPbDVIFkLLo27I=)
3: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: B9JNd2JEVLrX69QAHya7VMQxhkE1KOM4p8OQ/uKIX+k=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 12:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:91:e9:7a:49:89:52:0e:95:b4:e1:4d:e9:47:7f:70:0d:9f:50:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Sep 20 12:05:00 2026 GMT
Not After : Sep 27 12:10:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:45:e5:5f:f0:6b:b4:30:c4:80:ed:3f:f3:
7a:48:8b:ba:79:5b:30:90:88:41:ca:0f:41:73:ed:
cb:51:ea:37:09:f4:c0:07:6e:24:85:49:52:a7:aa:
ef:5d:d4:71:64:71:63:cd:b3:ba:b8:77:e0:38:a5:
0f:0e:c7:b0:43:ab:5d:7b:6b:da:6e:55:a7:c6:5b:
f8:34:93:fd:27:d5:8c:02:36:a2:e0:11:ea:06:f2:
00:2c:13:0a:3f:c7:24:66:68:db:c3:5a:92:de:00:
63:5a:3c:a2:5a:d7:cc:cd:a6:50:33:ea:8a:cf:fe:
a3:d7:d7:d7:c7:f5:3c:7d:40:9d:f5:70:19:4d:aa:
bd:b4:65:d1:7c:63:30:30:d4:f6:71:8f:15:e2:ab:
a7:ae:b2:0e:48:e7:48:bd:6a:35:b7:d3:e6:94:ce:
1d:77:f7:e7:b5:91:6e:df:e4:9f:04:87:53:86:e2:
6f:f5:fe:f5:7e:3d:a6:dc:8f:65:0b:4a:73:8f:60:
92:94:02:65:75:a8:1b:b2:0e:86:aa:32:fe:fd:2c:
7a:fa:87:b5:1a:55:2e:48:25:7d:76:64:58:8c:80:
6f:f1:19:2a:60:38:b8:f0:66:06:4b:c6:78:6b:d7:
97:d6:78:1d:50:0d:d7:57:e7:39:3c:b9:a9:8a:aa:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CB:3D:5D:11:01:AD:A0:EE:47:E0:EE:62:28:96:B8:7C:95:CC:68
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:e7:d3:3f:80:d2:7f:84:9a:33:3a:e5:9e:00:82:21:cf:17:
8b:57:6f:fc:26:53:7f:3c:15:ae:65:c6:ae:cc:28:46:5b:53:
6f:99:26:18:55:20:3d:65:94:3a:38:e8:46:f8:fb:a3:0d:a9:
8f:5f:b6:28:ef:5e:10:69:3c:6e:4c:7f:aa:3f:d1:27:62:68:
64:ed:2a:96:45:be:f6:cd:86:e0:70:d1:51:5a:04:aa:b9:67:
1b:0f:78:72:fa:81:64:fe:16:ed:75:67:93:f8:6a:46:25:f6:
4c:8c:83:cb:46:2a:2a:e2:1b:26:be:7a:d0:f4:fa:bb:67:5f:
f5:14:bf:4d:84:a1:96:2a:5a:ce:19:f2:c3:3a:24:78:10:45:
5f:72:4c:dd:47:30:9c:39:14:ae:0e:26:df:34:0e:8c:8a:ac:
04:35:4d:dc:83:88:92:7a:a4:c5:d3:bf:13:7d:ad:8a:bf:76:
43:bf:a8:0b:b1:e9:8e:cb:44:e0:3f:dc:a0:4f:e6:f5:74:2c:
c2:d7:9d:4b:d0:a7:79:f3:24:8c:2b:cb:bb:04:e3:f6:3d:6e:
2e:c9:27:5e:ea:84:81:f4:d1:ad:84:cf:41:9f:a5:9b:ea:9a:
4e:85:9e:4f:2d:fb:03:c3:bb:57:be:42:e6:45:44:74:e3:63:
5c:cd:ec:ed
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUApHpekmJUg6VtOFN6Ud/cA2fUJswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTRFNzUwMDAwMTEwLwYDVQQFEyg1QTE3OTY0OEIz
RUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGMB4XDTI2MDkyMDEyMDUwMFoX
DTI2MDkyNzEyMTAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDRjAyNDVFNTVGRjA2QkI0MzBDNDgwRUQzRkYzN0E0ODhCQkE3OTVCMzA5
MDg4NDFDQTBGNDE3M0VEQ0I1MUVBMzcwOUY0QzAwNzZFMjQ4NTQ5NTJBN0FBRUY1
REQ0NzE2NDcxNjNDREIzQkFCODc3RTAzOEE1MEYwRUM3QjA0M0FCNUQ3QjZCREE2
RTU1QTdDNjVCRjgzNDkzRkQyN0Q1OEMwMjM2QTJFMDExRUEwNkYyMDAyQzEzMEEz
RkM3MjQ2NjY4REJDMzVBOTJERTAwNjM1QTNDQTI1QUQ3Q0NDREE2NTAzM0VBOEFD
RkZFQTNEN0Q3RDdDN0Y1M0M3RDQwOURGNTcwMTk0REFBQkRCNDY1RDE3QzYzMzAz
MEQ0RjY3MThGMTVFMkFCQTdBRUIyMEU0OEU3NDhCRDZBMzVCN0QzRTY5NENFMUQ3
N0Y3RTdCNTkxNkVERkU0OUYwNDg3NTM4NkUyNkZGNUZFRjU3RTNEQTZEQzhGNjUw
QjRBNzM4RjYwOTI5NDAyNjU3NUE4MUJCMjBFODZBQTMyRkVGRDJDN0FGQTg3QjUx
QTU1MkU0ODI1N0Q3NjY0NTg4QzgwNkZGMTE5MkE2MDM4QjhGMDY2MDY0QkM2Nzg2
QkQ3OTdENjc4MUQ1MDBERDc1N0U3MzkzQ0I5QTk4QUFBNzA2RDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPAkXlX/BrtDDEgO0/83pI
i7p5WzCQiEHKD0Fz7ctR6jcJ9MAHbiSFSVKnqu9d1HFkcWPNs7q4d+A4pQ8Ox7BD
q117a9puVafGW/g0k/0n1YwCNqLgEeoG8gAsEwo/xyRmaNvDWpLeAGNaPKJa18zN
plAz6orP/qPX19fH9Tx9QJ31cBlNqr20ZdF8YzAw1PZxjxXiq6eusg5I50i9ajW3
0+aUzh139+e1kW7f5J8Eh1OG4m/1/vV+Pabcj2ULSnOPYJKUAmV1qBuyDoaqMv79
LHr6h7UaVS5IJX12ZFiMgG/xGSpgOLjwZgZLxnhr15fWeB1QDddX5zk8uamKqnBt
AgMBAAGjggH7MIIB9zAdBgNVHQ4EFgQUlss9XREBraDuR+DuYiiWuHyVzGgwHwYD
VR0jBBgwFoAUWheWSLPvI2nc5721gUD/fccGCr8wDgYDVR0PAQH/BAQDAgeAMGIG
A1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRP
Q0EvMS81QTE3OTY0OEIzRUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGLmNy
bDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZG
Mi9XaGVXU0xQdkkybmM1NzIxZ1VEX2ZjY0dDcjguY2VyMG0GCCsGAQUFBwELBGEw
XzBdBggrBgEFBQcwC4ZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9yZXBvL05BVE9D
QS8xLzVBMTc5NjQ4QjNFRjIzNjlEQ0U3QkRCNTgxNDBGRjdEQzcwNjBBQkYubWZ0
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDI59M/gNJ/hJozOuWeAIIhzxeLV2/8JlN/PBWuZcauzChGW1NvmSYY
VSA9ZZQ6OOhG+PujDamPX7Yo714QaTxuTH+qP9EnYmhk7SqWRb72zYbgcNFRWgSq
uWcbD3hy+oFk/hbtdWeT+GpGJfZMjIPLRioq4hsmvnrQ9Pq7Z1/1FL9NhKGWKlrO
GfLDOiR4EEVfckzdRzCcORSuDibfNA6MiqwENU3cg4iSeqTF078Tfa2Kv3ZDv6gL
semOy0TgP9ygT+b1dCzC151L0Kd58ySMK8u7BOP2PW4uySde6oSB9NGthM9Bn6Wb
6ppOhZ5PLfsDw7tXvkLmRUR042Nczezt
-----END CERTIFICATE-----
Generated at Mon Sep 21 02:13:48 2026 by rpki-client