Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: uQ+svFk2qkqCCpb5Uvtx1gl3FWTyxe1d2CK5IRdCGyI=
Subject key identifier: ED:A4:D9:22:D9:F4:53:20:AF:7D:23:96:F1:16:07:4D:0F:1C:0A:B8
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 6155D0871934C54731046AF902A8D5EB788D5F94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0D4A
Signing time: Tue 28 Jul 2026 10:58:00 +0000
Manifest this update: Tue 28 Jul 2026 10:53:00 +0000
Manifest next update: Wed 29 Jul 2026 10:58:00 +0000
Files and hashes: 1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: B9JNd2JEVLrX69QAHya7VMQxhkE1KOM4p8OQ/uKIX+k=)
2: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: 86BO5HBDaOlf6INaoxfvvESPVqk8O1NZfFaWzKEXX4A=)
3: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: 9zhiDgCD1C2+qSaqzV2fP9U/bT+NSoyHP4LHpVXUIEU=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 10:58:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:55:d0:87:19:34:c5:47:31:04:6a:f9:02:a8:d5:eb:78:8d:5f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Jul 28 10:53:00 2026 GMT
Not After : Aug 4 10:58:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:7f:26:df:eb:b6:58:c6:d0:ca:a3:90:54:
a1:93:76:e6:16:9b:c1:14:84:e1:2d:af:1f:0f:71:
0f:3b:d0:2c:a5:c1:04:83:8c:fd:04:b0:d5:8a:5e:
19:c1:c7:90:37:14:68:d6:b9:7f:18:a7:07:7a:de:
ee:9c:02:c3:67:ab:f8:84:46:81:59:ee:88:63:08:
4d:1e:44:63:bf:5c:3b:c9:e2:6f:a8:83:3c:62:4d:
5b:f3:9d:29:a0:8d:f6:b5:e6:1d:c2:45:ed:a4:4b:
ca:aa:8a:1d:43:fd:87:a9:23:94:5e:6c:9e:fd:2d:
c0:88:db:ee:e7:29:da:eb:bd:31:27:b4:f5:f8:96:
ba:99:79:65:43:c8:ef:da:c7:a6:16:3f:68:05:9a:
13:9f:4f:43:1a:0a:2c:8e:19:1a:5d:cc:73:87:59:
19:f1:5c:55:62:18:39:75:cf:d7:fe:c0:0b:22:fc:
c4:2a:25:b1:19:09:be:e7:7a:82:5d:55:e1:7c:47:
04:f7:dc:3c:82:4d:32:c9:d9:fb:c4:0b:a4:12:74:
54:d6:71:94:07:b8:f5:a4:c5:7e:3a:39:f9:9b:f9:
90:b3:59:bf:90:17:8f:a5:fb:b5:7c:f6:ce:91:34:
f9:7f:7f:94:23:45:34:8f:d1:4b:d0:d1:fc:fd:1f:
07:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A4:D9:22:D9:F4:53:20:AF:7D:23:96:F1:16:07:4D:0F:1C:0A:B8
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:31:9b:c6:15:42:70:be:48:f3:06:2e:4c:17:70:f5:cb:9e:
0a:9d:2d:ab:d3:7b:8a:70:3f:85:68:4e:82:23:c3:b5:62:80:
06:7d:13:89:a4:89:d0:7d:cc:4e:bf:c4:4b:61:5a:66:22:31:
57:98:35:e2:a1:f5:d7:4c:bb:e3:2b:58:3d:e5:1d:88:8a:27:
52:a9:3a:4b:47:ff:4d:5e:49:cd:76:ae:de:08:6f:d4:2b:5d:
d2:cc:42:6f:ef:b1:97:bc:f3:60:19:92:fd:70:c7:c8:5e:a4:
cb:6e:22:7c:2e:fd:2b:6f:95:c0:49:eb:71:2b:d3:dc:fd:93:
db:38:a4:b3:b2:eb:f6:df:90:a9:e9:a6:01:d3:07:8b:c5:7b:
4c:33:c2:8b:fe:31:f5:c4:7a:88:2f:de:06:a4:db:77:84:37:
14:92:f0:0e:b4:23:7b:a2:3f:6f:3d:c8:81:5d:fb:f2:71:d4:
f2:7e:04:ac:76:24:85:6e:49:3e:60:22:90:c0:57:db:96:25:
16:d9:f5:f7:d4:55:86:29:06:48:af:c2:2a:34:9f:80:1a:10:
b3:c1:25:c1:a4:04:e9:e5:33:13:ad:29:b3:cb:67:c9:98:5b:
a7:d8:18:6e:d8:1c:75:75:0f:98:f2:d7:ea:b7:e9:a7:20:ba:
58:1e:50:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:21:45 2026 by rpki-client