Manifest
$ rpki-client -vvvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: RvqgPFEhvFC8YBZp5phUuM31HzrVW3J/dWXP6p0+6vE=
Subject key identifier: 43:01:6D:23:AD:28:35:54:10:D7:74:9C:15:D2:F7:E4:15:55:28:41
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 440F8C4E83CA9BC0C4277A7ED2063846C141DBCA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0D9F
Signing time: Wed 23 Sep 2026 04:14:00 +0000
Manifest this update: Wed 23 Sep 2026 04:09:00 +0000
Manifest next update: Thu 24 Sep 2026 04:14:00 +0000
Files and hashes: 1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: B9JNd2JEVLrX69QAHya7VMQxhkE1KOM4p8OQ/uKIX+k=)
2: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: 86BO5HBDaOlf6INaoxfvvESPVqk8O1NZfFaWzKEXX4A=)
3: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: ovbwDsamNssIEDe7Z3hD8yeKmSIJ03y2yqSDV9iFBfc=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 04:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:0f:8c:4e:83:ca:9b:c0:c4:27:7a:7e:d2:06:38:46:c1:41:db:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Sep 23 04:09:00 2026 GMT
Not After : Sep 30 04:14:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:ca:6c:cf:02:17:24:df:3a:86:c6:01:d7:
69:16:ea:65:d9:81:16:78:96:1b:91:22:17:a9:4a:
d3:16:d4:65:1c:73:b9:40:dd:5d:4f:7a:9f:a6:b8:
17:7c:68:ac:ca:ba:5c:3f:09:c5:88:f2:e3:e2:2f:
29:e8:cf:7a:3c:fe:92:c1:78:ad:1e:d4:e5:b6:bf:
45:b7:6d:45:13:63:6b:af:52:0f:e4:3e:59:cb:b4:
5e:04:78:bb:c8:e5:20:f6:98:9b:50:77:96:59:9a:
10:6f:6f:42:0a:7f:c3:65:17:ee:af:40:0a:28:d3:
82:38:7e:cb:1b:26:fd:06:18:d8:b6:1a:8d:62:a4:
6e:37:f3:c7:3f:e2:fa:2c:93:56:ab:38:d3:36:23:
5a:20:aa:35:88:ee:22:3c:e7:40:81:a6:8b:67:d1:
87:d3:54:55:a8:94:6d:d4:25:bb:6e:4c:7a:b9:51:
91:9e:59:71:05:d4:cb:5e:83:3c:78:3d:9d:07:41:
01:17:a4:9d:82:de:f7:6a:a6:49:ff:51:c1:ee:ec:
a0:47:7c:66:f5:79:04:e5:40:d1:8a:cb:a8:4f:3a:
e1:a6:5f:5d:7c:93:41:d9:33:a1:a5:4f:48:87:df:
c9:ac:f0:6b:86:f0:3e:58:11:9a:98:28:f5:0b:c3:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:01:6D:23:AD:28:35:54:10:D7:74:9C:15:D2:F7:E4:15:55:28:41
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:15:3e:ab:a4:46:0b:c5:46:ed:51:81:73:76:9e:8e:86:93:
36:e5:dc:c3:e4:09:3d:80:4a:30:c5:77:ae:0f:79:87:76:a6:
4b:fd:8c:aa:ca:5f:43:af:2c:da:59:90:7c:e4:b8:4a:33:b0:
ad:aa:eb:e8:86:2b:e6:69:cc:5c:40:16:60:5d:64:5b:60:57:
ae:58:0a:ad:50:22:c2:f8:10:81:16:9b:c3:5b:1f:a1:60:f8:
1d:72:d2:92:58:89:7b:c8:59:6b:c7:76:52:34:e8:a9:e7:7d:
5d:ee:a6:ed:64:23:e1:e6:f6:e3:b3:cb:87:42:c7:f2:58:42:
a5:57:c5:03:64:c7:52:ea:15:ea:a8:ed:cd:32:8a:a0:ae:64:
13:8b:f9:48:1f:dc:bc:1a:38:6b:77:90:c3:76:0a:3b:b4:f5:
7b:08:1b:69:5b:af:38:5b:57:33:b9:50:81:a1:d7:79:c0:00:
53:45:98:b7:7b:a6:f1:20:33:90:5f:d7:e0:d5:71:4a:24:e9:
35:55:e8:6a:3c:11:ac:6a:41:34:61:c2:c6:3c:e2:ff:f2:f9:
40:57:97:af:40:c5:d6:87:2b:b6:40:c3:39:55:c2:c9:ea:db:
fd:1c:fd:8a:e6:d8:c7:f9:ee:5f:5d:1f:e6:17:69:df:84:74:
f4:0c:96:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:01:38 2026 by rpki-client