Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: F95xhBZlFBH3wHeS3WR7pDfaomPdwUxNm/sxEjRm/Wk=
Subject key identifier: CB:11:EF:2B:EA:E1:3D:C8:7A:C1:1C:6D:D8:95:CE:9F:41:0E:44:27
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 4BFF7995D889EF7F8513FD9FD55B07EEAA45BA75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0CC7
Signing time: Mon 04 May 2026 05:06:00 +0000
Manifest this update: Mon 04 May 2026 05:01:00 +0000
Manifest next update: Tue 05 May 2026 05:06:00 +0000
Files and hashes: 1: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: M1Aw8kDAtVwJe1cGpFIH+V7h/3Lczhi4fkp8J1zsqtU=)
2: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: UHjvNtHYLRqDyyLo4zWk7sSe8/YAxEgr1dmNoEBVWio=)
3: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: IzjV9o7U92frGI98YHgv9ZRw32C7S6fWskOoCebBdF4=)
4: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: 86BO5HBDaOlf6INaoxfvvESPVqk8O1NZfFaWzKEXX4A=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 05:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ff:79:95:d8:89:ef:7f:85:13:fd:9f:d5:5b:07:ee:aa:45:ba:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: May 4 05:01:00 2026 GMT
Not After : May 11 05:06:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:50:7d:ff:30:77:7b:fb:79:82:eb:38:69:
ba:97:b6:d1:a0:aa:38:a7:f7:ab:1d:a3:24:a3:cd:
5f:0b:38:f9:75:72:77:a7:83:ce:ff:49:c4:76:43:
b7:fc:52:86:35:67:32:88:c4:50:f8:d2:63:db:9e:
8b:18:35:8b:4b:9e:28:3d:08:53:c8:9e:96:6a:6f:
af:dd:c6:f9:cd:c5:43:7b:5e:75:b7:f2:b0:9c:e8:
e3:7c:bf:b4:32:3c:7f:85:32:f9:f6:5e:71:fd:ee:
ba:79:b5:fc:3b:7d:c4:31:01:ac:87:84:61:d4:81:
35:35:46:fb:14:35:cb:51:78:82:6c:ff:92:54:ce:
30:df:5a:22:48:5c:ff:19:cd:8c:ce:f3:da:e0:fe:
d5:21:e2:c8:f7:48:32:71:14:4d:be:ec:06:d5:bc:
e3:55:f5:c3:c6:ff:8b:28:64:37:d2:e9:36:07:5a:
92:f8:1f:eb:1a:4d:ee:cd:ae:03:30:0d:c6:33:29:
1c:6b:49:9d:e1:d7:b2:2c:9f:a1:ef:d6:25:84:67:
c5:4a:4a:24:c5:14:49:4f:21:59:54:57:fe:48:95:
ef:31:1d:1b:b7:48:b2:de:fa:3b:20:b9:6f:9d:a9:
4c:33:93:83:cd:89:f1:e1:ea:a3:f3:b6:20:50:45:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:11:EF:2B:EA:E1:3D:C8:7A:C1:1C:6D:D8:95:CE:9F:41:0E:44:27
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4d:a7:7b:93:a1:b1:7c:32:42:4f:7c:30:83:63:2e:3d:c6:
74:a4:4f:5f:d7:35:d8:4e:48:87:32:78:50:c9:73:b2:0a:7a:
c3:11:12:9f:5c:ba:aa:b2:5e:d2:51:06:95:75:ed:4c:f1:fd:
3d:1e:35:dd:f3:c4:c9:fd:0c:1e:12:16:20:4f:0d:e1:be:0a:
b3:ee:da:0a:ce:11:69:59:8b:7d:62:dd:7b:5d:66:16:93:bf:
80:6c:a3:43:0c:bb:b9:2c:1c:d7:91:f6:58:f9:e5:01:27:74:
44:52:53:45:50:ed:59:16:bc:3b:79:e5:12:f5:fd:45:92:37:
e9:e8:d6:f4:df:72:95:c5:a2:65:6d:3b:8a:22:c5:8a:b5:e5:
ef:31:03:9a:aa:a1:4e:26:79:a2:60:93:6a:a9:6b:1f:5e:36:
78:d1:4d:84:86:64:97:f6:c1:53:ba:ca:a4:7d:d4:2f:4c:fa:
f8:a3:f2:48:3e:c3:ef:b5:77:71:3e:0e:5b:25:a2:b3:6c:b6:
2b:fb:52:a6:a3:e3:3f:04:5c:8f:b6:05:13:19:1b:4f:d2:90:
bc:a9:f4:93:5d:07:71:5c:84:66:50:80:fc:1b:bf:ef:6f:49:
95:3d:8f:b0:1e:6c:74:06:41:49:60:82:80:dc:d1:18:fb:77:
78:1f:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 08:30:02 2026 by rpki-client