This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File:                     5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier:          8v8MR2eyDpIf0ZwjMDkE8IfvHl1s7kkgZyfrqyshsZo=
Subject key identifier:   58:9D:64:EE:19:45:D5:62:5C:58:14:EE:4A:7F:CF:BC:F7:E9:40:7A
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer:       /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial:       5BA5D2D379FF94E05673E4E36A4E1A39EFFA39E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access:      rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number:          0BEE
Signing time:             Thu 11 Dec 2025 18:40:00 +0000
Manifest this update:     Thu 11 Dec 2025 18:35:00 +0000
Manifest next update:     Fri 12 Dec 2025 18:40:00 +0000
Files and hashes:         1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
                          2: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
                          3: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
                          4: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: dHi94E3GYkh/nZJnPs2qKNqofobtX0VaBaC76raY3t4=)
Validation:               OK
Signature path:           rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a5:d2:d3:79:ff:94:e0:56:73:e4:e3:6a:4e:1a:39:ef:fa:39:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
        Validity
            Not Before: Dec 11 18:35:00 2025 GMT
            Not After : Dec 18 18:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:2e:ba:13:9b:fc:da:86:b5:79:4d:1e:21:
                    b1:64:4f:de:fc:80:4b:61:d4:87:ac:42:e3:18:77:
                    55:1c:ed:7b:1d:b3:d2:7a:95:de:22:07:51:64:bc:
                    38:4f:ac:9d:7c:04:7f:98:f9:9e:85:f0:2f:41:9b:
                    68:59:e1:f0:73:ce:f7:6a:8a:c2:d4:7a:bb:c2:3c:
                    12:5f:a7:be:34:c2:8a:80:44:06:82:ad:76:c4:4d:
                    1c:c6:f0:46:b8:df:d0:33:a8:c2:d2:f6:dc:bc:42:
                    e2:2c:b0:22:8e:b3:72:dd:92:6d:59:4f:44:56:8a:
                    f7:70:13:8f:b5:1b:97:d1:59:05:f8:ef:f7:a8:01:
                    8d:d7:39:84:1b:ff:1d:88:ad:df:a8:0f:d0:06:42:
                    e4:61:48:db:a9:4b:63:ca:6d:4d:4b:58:7b:f9:9d:
                    5f:8f:a2:51:59:c2:ad:ee:8c:de:0d:b0:22:f5:73:
                    02:40:a3:1b:ee:f3:4a:12:03:43:b2:10:b6:25:54:
                    11:b8:82:63:91:9f:b6:58:30:cf:07:57:3f:e7:d7:
                    1b:fe:86:f1:24:d0:94:d5:1d:9b:c0:dc:a0:e6:ea:
                    90:5a:b1:77:9b:f9:e6:30:b5:78:a1:dd:ad:dc:24:
                    9f:dd:85:5a:53:c1:09:02:c1:db:e8:87:f7:2e:c4:
                    13:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9D:64:EE:19:45:D5:62:5C:58:14:EE:4A:7F:CF:BC:F7:E9:40:7A
            X509v3 Authority Key Identifier:
                keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:33:76:06:c0:d7:f8:6b:d8:22:31:ea:87:d9:f7:db:c3:bb:
         6a:db:9e:89:f4:b4:f9:58:3a:31:b8:2f:59:e5:39:59:c9:00:
         4f:cc:1c:4d:3d:de:d6:46:fd:0f:53:37:d2:91:42:99:7c:8e:
         e0:7f:b8:16:58:c8:79:97:5f:9c:c5:4d:48:c5:45:76:bf:1f:
         73:6b:eb:9b:83:da:a2:56:0d:d8:46:5d:2a:ed:d6:a0:0c:09:
         a0:4e:05:21:1e:76:48:b8:1a:d8:b7:a9:d9:5c:f6:7a:dd:19:
         e6:3a:dc:5d:b3:f1:0c:fb:4d:cb:c4:64:05:13:b3:0f:c4:92:
         ad:40:75:6c:98:5c:37:7e:56:5e:42:b7:a0:d4:0a:2f:6e:cd:
         54:a8:a8:ef:09:dd:f2:75:ce:ea:47:c7:6d:b2:a8:20:18:3f:
         de:5c:fd:f4:94:fd:a6:68:e4:8d:39:b9:11:31:e6:25:42:9b:
         8a:49:3d:52:99:0c:65:e6:29:95:a1:82:c8:28:69:90:fe:90:
         33:5d:56:76:ac:26:1c:b3:99:8f:66:d9:31:66:51:57:fd:94:
         7f:e0:7a:3a:90:45:d6:16:a7:fe:fd:19:a2:1d:0d:42:1e:00:
         c4:2a:f2:95:1d:e3:e0:00:3f:3a:c2:ee:be:91:fb:a1:c1:00:
         71:a5:38:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----