
Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: uNNdOjhXjOpPDniS6Qohv84UJhiwmZIxpyG8Tyy8aAI=
Subject key identifier: F2:5A:0C:2C:5E:B1:E4:92:1D:73:98:04:42:9C:95:13:BC:81:B2:AF
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 21A05D7AEF564A162B4695198F9CAF3D9BBB2A9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0D55
Signing time: Tue 04 Aug 2026 19:10:00 +0000
Manifest this update: Tue 04 Aug 2026 19:05:00 +0000
Manifest next update: Wed 05 Aug 2026 19:10:00 +0000
Files and hashes: 1: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: 86BO5HBDaOlf6INaoxfvvESPVqk8O1NZfFaWzKEXX4A=)
2: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: 6KxZebflmZnsvpgNjku3tyzkGQ/A5+bM87aHa+B4DQ0=)
3: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: B9JNd2JEVLrX69QAHya7VMQxhkE1KOM4p8OQ/uKIX+k=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 19:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a0:5d:7a:ef:56:4a:16:2b:46:95:19:8f:9c:af:3d:9b:bb:2a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Aug 4 19:05:00 2026 GMT
Not After : Aug 11 19:10:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:3c:5c:d7:37:26:df:f6:01:1e:74:8e:93:
6b:6c:18:65:b1:f8:89:3d:c5:60:fb:b5:53:88:00:
ea:0d:8e:df:0e:d1:73:2b:ec:96:97:ff:1c:dd:67:
86:42:23:0c:29:2c:89:36:41:66:d9:c8:f7:97:6f:
d8:5d:9c:40:6f:37:9d:f7:5e:6d:13:16:5c:87:fe:
20:85:2e:0f:be:51:ea:ac:dd:47:54:02:8c:4c:20:
51:df:97:e2:d2:47:39:8f:2e:31:c8:da:2d:ee:99:
7a:43:98:af:88:b3:ef:aa:7b:76:cb:34:53:05:6c:
8a:c9:a9:01:21:82:e6:fb:68:36:2d:e6:07:a5:da:
9f:31:9a:17:ec:06:c3:59:7e:53:91:9d:cc:73:db:
59:63:df:35:ef:41:d7:fb:59:fd:46:d6:7c:64:b8:
15:0c:6d:75:b9:ac:3b:bd:3d:c5:30:c1:26:e9:c2:
00:7a:7c:40:d1:0f:43:9c:cc:58:f7:60:5d:eb:f4:
50:95:84:91:f8:bb:6e:d6:e6:7b:99:04:e4:67:7b:
33:a2:23:89:4a:e4:a7:76:bc:f0:af:fb:e8:36:aa:
4f:bc:7b:37:9e:ab:5e:70:fb:18:41:7b:29:8b:c4:
d2:be:d7:21:04:34:23:91:36:1a:25:55:a8:6f:0d:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5A:0C:2C:5E:B1:E4:92:1D:73:98:04:42:9C:95:13:BC:81:B2:AF
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:49:d7:ff:81:e4:d3:26:47:df:3f:07:34:59:33:1c:c9:85:
24:1a:ce:9e:13:7b:cf:37:71:2e:a7:92:57:8a:d8:77:de:26:
68:0e:10:b4:fe:b9:6a:5f:58:a8:d7:7a:ba:fa:5a:0d:4d:77:
fc:11:2e:81:24:15:65:1b:28:51:5f:02:e8:ba:50:72:14:06:
32:d2:70:42:ca:38:91:2f:0b:65:f4:52:10:d0:a9:92:0c:bf:
99:46:6c:86:a3:46:70:0a:fb:72:bf:31:67:fc:96:76:38:79:
03:ca:26:37:67:75:6b:89:03:6a:80:c1:49:97:27:29:b0:28:
df:12:da:0b:77:86:33:79:dd:09:9f:eb:55:2d:d9:7b:07:0a:
88:77:0d:e9:c6:74:3c:8f:1a:0a:3d:ba:9c:6f:38:45:68:ac:
eb:38:bb:d7:68:f8:96:0a:94:c9:11:f3:59:c3:fb:d4:df:43:
77:d4:13:1e:33:cd:e4:d6:49:18:0b:4d:8e:d5:a7:dc:a2:bf:
10:cf:bb:21:f7:e3:ee:b1:8c:87:03:dc:33:13:13:bb:50:ef:
d1:84:85:ab:cb:de:9a:56:3f:3e:4a:2f:41:bb:26:22:b5:df:
30:1c:32:5b:94:a6:37:b5:1d:ff:ad:6c:80:86:ec:36:a0:3a:
bb:5f:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 03:30:03 2026 by rpki-client