Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: SICuF4AZ3Q8sjcJkfMzlvomk/DoBTB649YsMEpmTtAA=
Subject key identifier: BE:C2:6F:CA:39:44:B8:A2:55:02:66:11:B9:CB:3B:81:10:68:9C:46
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 23D9472327A314874868C275B5A2F1C752FD35B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0CB0
Signing time: Sat 18 Apr 2026 20:38:00 +0000
Manifest this update: Sat 18 Apr 2026 20:33:00 +0000
Manifest next update: Sun 19 Apr 2026 20:38:00 +0000
Files and hashes: 1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: IzjV9o7U92frGI98YHgv9ZRw32C7S6fWskOoCebBdF4=)
2: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: M1Aw8kDAtVwJe1cGpFIH+V7h/3Lczhi4fkp8J1zsqtU=)
3: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: 8Vc0u8kYndamsTgb94jy9WWB0R8UH7Ynmvyj27Rg0zo=)
4: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: 86BO5HBDaOlf6INaoxfvvESPVqk8O1NZfFaWzKEXX4A=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 20:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d9:47:23:27:a3:14:87:48:68:c2:75:b5:a2:f1:c7:52:fd:35:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Apr 18 20:33:00 2026 GMT
Not After : Apr 25 20:38:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:c4:e0:2e:a1:7d:a3:b3:ab:e3:1b:2a:fb:
c5:56:51:60:4e:14:99:c4:fd:5c:4e:0c:6f:28:06:
21:4f:94:35:46:90:4e:c3:77:94:2a:74:b3:03:44:
50:84:c0:9c:5f:02:49:a0:74:1e:46:83:a1:db:98:
72:5e:d7:3e:ce:94:4d:53:1d:59:85:2c:1c:cf:cc:
c9:c6:1d:c7:c5:e8:2d:9b:de:0e:a7:38:33:8d:68:
58:51:1b:4e:ab:42:6f:75:62:42:37:09:57:78:2b:
89:4e:e1:7f:1b:12:24:1e:42:65:4e:4d:f9:28:9f:
6c:94:68:c8:1b:41:59:4c:00:b1:9e:05:8f:f1:4d:
98:16:2a:f5:ea:be:8a:2c:48:21:9b:09:d0:04:10:
a0:5d:83:4e:cf:62:31:d1:38:78:bc:08:53:4c:6c:
47:da:7e:f9:03:18:bd:46:05:b8:51:e8:80:93:72:
78:72:a7:33:47:c8:5d:e3:fb:93:80:aa:a3:5b:f9:
e2:7a:ea:b5:9b:bf:48:a2:52:79:aa:22:0f:62:a2:
2f:72:10:44:cb:3a:cc:4d:7f:34:72:8c:fd:53:ca:
80:32:a8:0c:f4:62:a4:7f:1e:9c:9c:1e:b1:3d:b3:
ea:3e:b1:d1:62:f9:77:a8:57:f4:52:3e:f7:1c:5a:
77:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C2:6F:CA:39:44:B8:A2:55:02:66:11:B9:CB:3B:81:10:68:9C:46
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:06:33:eb:e9:50:6e:e6:24:47:fc:12:20:e6:d3:84:95:c0:
42:14:36:d9:98:7f:6d:a6:db:70:f2:0f:7a:77:e6:33:60:6b:
03:2b:de:92:40:ad:26:e3:a9:4d:00:9c:7a:79:5b:5f:7e:51:
28:46:32:7c:8b:f8:67:64:e4:4e:ab:1f:ae:af:64:90:75:b4:
bb:23:71:f8:c3:0a:7e:c5:39:bb:b2:e9:72:85:0f:39:46:0d:
90:c9:66:ee:28:a0:cd:d5:1c:ac:5f:a9:3b:bd:61:34:e3:41:
a8:18:fa:7e:58:5f:68:7a:e9:57:d1:15:8c:4d:4e:9d:1e:b7:
83:e6:b5:78:0c:5f:46:12:5d:21:65:2d:fc:4f:f9:c7:40:9f:
66:3c:63:e2:50:13:5e:85:1e:7c:84:91:90:5c:b4:77:bf:8d:
ce:71:fc:45:bd:9d:2d:04:1b:f2:8c:65:31:6e:27:d5:c8:62:
26:39:1a:ab:5b:56:36:58:cc:f8:53:0a:0f:9a:15:6c:60:e4:
49:cd:8c:09:67:1c:ec:36:d0:f7:ec:b6:2c:49:5e:96:eb:c1:
5f:9d:cc:d5:cc:48:c0:6c:a9:19:fe:85:59:b6:35:97:52:f9:
45:da:da:bf:0c:55:a3:f8:fb:55:c8:4a:a8:8f:8d:79:d2:de:
30:b4:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:41:25 2026 by rpki-client