This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File:                     5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier:          RwQAKHHy91Ye50Vu+Rkm0TlGIANIlS9Sp3uCtZeSoPQ=
Subject key identifier:   68:82:26:41:B8:E0:93:0C:AB:48:CF:2F:86:C2:B7:80:DF:54:AE:45
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer:       /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial:       42BEBB045DBACFB00FD3911A871129C60CEFA952
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access:      rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number:          0C37
Signing time:             Thu 29 Jan 2026 11:50:00 +0000
Manifest this update:     Thu 29 Jan 2026 11:45:00 +0000
Manifest next update:     Fri 30 Jan 2026 11:50:00 +0000
Files and hashes:         1: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
                          2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
                          3: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: PUNjuK04xSzQtKBaZnKun6tWhlW3EnyPMQ/BxtFBu3o=)
                          4: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
Validation:               OK
Signature path:           rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 11:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:be:bb:04:5d:ba:cf:b0:0f:d3:91:1a:87:11:29:c6:0c:ef:a9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
        Validity
            Not Before: Jan 29 11:45:00 2026 GMT
            Not After : Feb  5 11:50:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1e:75:96:bf:72:36:60:df:c8:4e:62:7f:42:
                    22:14:3a:5c:2d:32:30:72:5e:fc:13:a4:94:67:d8:
                    a8:c8:bf:78:0b:a0:fc:61:28:9c:ab:97:c9:6f:11:
                    10:38:18:47:71:10:67:94:80:cd:7f:99:df:c2:e7:
                    02:90:86:e0:69:dd:a7:ba:47:b5:20:6f:4a:25:09:
                    81:6b:a2:ac:1a:d9:20:02:c6:86:c1:c3:b5:57:61:
                    6c:ef:8d:76:e2:25:30:78:5c:93:b6:a5:e1:d5:a0:
                    a6:01:9d:4a:63:45:84:c8:27:42:b6:ac:ff:22:88:
                    2c:c4:26:db:71:93:40:af:80:6f:a6:f4:ba:0e:20:
                    e8:8c:83:6f:3a:e7:38:59:a1:6f:78:46:76:96:a2:
                    5d:f3:51:45:f1:f4:dd:74:43:84:70:ab:2b:fa:fb:
                    62:96:0b:e2:65:b4:1b:bb:21:4a:69:c1:95:6d:fa:
                    0b:f3:f6:d1:9b:d1:18:e8:6a:70:25:4c:ce:fb:91:
                    19:ab:e6:d8:5d:40:49:d8:78:00:cb:4d:b9:a9:f2:
                    42:51:89:cb:d9:e2:01:f3:d9:02:7e:e2:d3:7b:34:
                    bf:65:50:7b:af:08:57:f5:24:89:3a:5e:fa:d7:79:
                    2c:96:44:56:e1:4f:b2:ba:1b:32:00:89:ae:6e:28:
                    e5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:82:26:41:B8:E0:93:0C:AB:48:CF:2F:86:C2:B7:80:DF:54:AE:45
            X509v3 Authority Key Identifier:
                keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e2:da:fc:07:82:07:35:c6:e0:80:63:23:6a:05:8c:11:17:
         d6:af:f0:f7:66:67:12:08:96:9c:b0:95:ed:7d:cd:3d:75:5f:
         ee:e7:ed:9f:72:2c:df:35:05:92:2c:52:19:f6:2f:8c:c8:4c:
         07:82:10:58:e5:83:7b:26:10:9a:06:2c:ec:bc:df:af:17:92:
         34:b5:7e:dd:00:1c:f1:eb:1f:2b:17:42:a5:28:d7:ca:dc:10:
         db:07:f0:23:bd:15:f9:f7:80:83:22:44:9a:c4:f4:83:3a:89:
         43:17:a6:79:bb:7e:1f:36:a7:38:51:3c:06:0b:d1:08:cf:40:
         5a:ed:ee:57:1f:d2:67:0a:67:6e:6c:08:da:ac:df:d1:0f:1f:
         d5:50:4e:99:ae:7e:e7:09:26:68:72:bd:41:5d:22:3b:bf:8e:
         08:c3:e3:a2:7a:9d:14:29:13:7b:6e:fb:ae:ee:ef:a5:09:8e:
         00:6b:5d:68:ce:3e:86:be:b0:b3:db:44:d6:58:3a:a2:cb:eb:
         29:8b:25:a3:5b:03:86:9e:be:75:71:f0:e5:6a:17:03:d5:bd:
         aa:23:e2:02:e7:84:45:79:da:ae:4f:a4:af:77:c9:13:89:20:
         2e:54:7e:d0:a0:aa:3e:04:51:79:a6:70:80:78:77:5e:25:2c:
         83:e5:73:07
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUQr67BF26z7AP05EahxEpxgzvqVIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTRFNzUwMDAwMTEwLwYDVQQFEyg1QTE3OTY0OEIz
RUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGMB4XDTI2MDEyOTExNDUwMFoX
DTI2MDIwNTExNTAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFMzFFNzU5NkJGNzIzNjYwREZDODRFNjI3RjQyMjIxNDNBNUMyRDMyMzA3
MjVFRkMxM0E0OTQ2N0Q4QThDOEJGNzgwQkEwRkM2MTI4OUNBQjk3Qzk2RjExMTAz
ODE4NDc3MTEwNjc5NDgwQ0Q3Rjk5REZDMkU3MDI5MDg2RTA2OUREQTdCQTQ3QjUy
MDZGNEEyNTA5ODE2QkEyQUMxQUQ5MjAwMkM2ODZDMUMzQjU1NzYxNkNFRjhENzZF
MjI1MzA3ODVDOTNCNkE1RTFENUEwQTYwMTlENEE2MzQ1ODRDODI3NDJCNkFDRkYy
Mjg4MkNDNDI2REI3MTkzNDBBRjgwNkZBNkY0QkEwRTIwRTg4QzgzNkYzQUU3Mzg1
OUExNkY3ODQ2NzY5NkEyNURGMzUxNDVGMUY0REQ3NDQzODQ3MEFCMkJGQUZCNjI5
NjBCRTI2NUI0MUJCQjIxNEE2OUMxOTU2REZBMEJGM0Y2RDE5QkQxMThFODZBNzAy
NTRDQ0VGQjkxMTlBQkU2RDg1RDQwNDlEODc4MDBDQjREQjlBOUYyNDI1MTg5Q0JE
OUUyMDFGM0Q5MDI3RUUyRDM3QjM0QkY2NTUwN0JBRjA4NTdGNTI0ODkzQTVFRkFE
Nzc5MkM5NjQ0NTZFMTRGQjJCQTFCMzIwMDg5QUU2RTI4RTUxMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjHnWWv3I2YN/ITmJ/QiIU
OlwtMjByXvwTpJRn2KjIv3gLoPxhKJyrl8lvERA4GEdxEGeUgM1/md/C5wKQhuBp
3ae6R7Ugb0olCYFroqwa2SACxobBw7VXYWzvjXbiJTB4XJO2peHVoKYBnUpjRYTI
J0K2rP8iiCzEJttxk0CvgG+m9LoOIOiMg2865zhZoW94RnaWol3zUUXx9N10Q4Rw
qyv6+2KWC+JltBu7IUppwZVt+gvz9tGb0RjoanAlTM77kRmr5thdQEnYeADLTbmp
8kJRicvZ4gHz2QJ+4tN7NL9lUHuvCFf1JIk6XvrXeSyWRFbhT7K6GzIAia5uKOUT
AgMBAAGjggH7MIIB9zAdBgNVHQ4EFgQUaIImQbjgkwyrSM8vhsK3gN9UrkUwHwYD
VR0jBBgwFoAUWheWSLPvI2nc5721gUD/fccGCr8wDgYDVR0PAQH/BAQDAgeAMGIG
A1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRP
Q0EvMS81QTE3OTY0OEIzRUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGLmNy
bDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZG
Mi9XaGVXU0xQdkkybmM1NzIxZ1VEX2ZjY0dDcjguY2VyMG0GCCsGAQUFBwELBGEw
XzBdBggrBgEFBQcwC4ZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9yZXBvL05BVE9D
QS8xLzVBMTc5NjQ4QjNFRjIzNjlEQ0U3QkRCNTgxNDBGRjdEQzcwNjBBQkYubWZ0
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAb4tr8B4IHNcbggGMjagWMERfWr/D3ZmcSCJacsJXtfc09dV/u5+2f
cizfNQWSLFIZ9i+MyEwHghBY5YN7JhCaBizsvN+vF5I0tX7dABzx6x8rF0KlKNfK
3BDbB/AjvRX594CDIkSaxPSDOolDF6Z5u34fNqc4UTwGC9EIz0Ba7e5XH9JnCmdu
bAjarN/RDx/VUE6Zrn7nCSZocr1BXSI7v44Iw+Oiep0UKRN7bvuu7u+lCY4Aa11o
zj6GvrCz20TWWDqiy+spiyWjWwOGnr51cfDlahcD1b2qI+IC54RFedquT6Svd8kT
iSAuVH7QoKo+BFF5pnCAeHdeJSyD5XMH
-----END CERTIFICATE-----