Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: SoQmt8cvxaPLJkM8kK886dirUNcSpHjS/57q09gFrrk=
Subject key identifier: AA:F7:B5:B2:08:C2:6C:FC:BB:F4:51:16:19:CF:2B:CF:48:13:34:5D
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 36D628F4DFA8F51A8C111DF4DEADDAC5628365DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0C7D
Signing time: Mon 16 Mar 2026 04:12:00 +0000
Manifest this update: Mon 16 Mar 2026 04:07:00 +0000
Manifest next update: Tue 17 Mar 2026 04:12:00 +0000
Files and hashes: 1: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: M1Aw8kDAtVwJe1cGpFIH+V7h/3Lczhi4fkp8J1zsqtU=)
2: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: 86BO5HBDaOlf6INaoxfvvESPVqk8O1NZfFaWzKEXX4A=)
3: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: 3M0tugybOTNK7dxB4eMALY0Zm1r26CZ4y5XXsMWn73I=)
4: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 04:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d6:28:f4:df:a8:f5:1a:8c:11:1d:f4:de:ad:da:c5:62:83:65:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Mar 16 04:07:00 2026 GMT
Not After : Mar 23 04:12:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:be:16:9d:08:65:a9:22:9c:b7:ee:de:f0:
41:e8:d5:e9:fc:41:15:2f:40:38:ce:8f:7f:92:f4:
b4:0d:2c:ce:b3:ce:05:42:78:a0:a2:d0:83:cc:43:
5b:c7:7f:91:b0:cd:fb:81:44:d6:e4:a9:b6:6b:69:
38:cc:8b:ee:25:8f:82:dc:d8:eb:fc:5f:01:a2:32:
27:fb:fa:89:16:b7:2f:91:12:ee:a0:28:b1:83:22:
93:0b:ba:d8:9a:28:39:93:7f:c6:e2:fc:42:fa:17:
ef:7d:05:1b:36:96:59:2e:47:74:f2:44:59:ec:51:
2a:bc:40:c1:b1:77:7d:ae:45:31:d3:09:90:09:54:
50:0a:5c:12:59:49:80:bd:d9:d1:10:3a:4e:7e:01:
6c:0f:25:0f:75:64:09:23:be:09:0a:1c:fb:dd:d4:
27:fc:3d:3d:d8:20:82:f2:b6:25:c9:31:4d:fd:a0:
7f:7b:e3:e6:91:ac:81:2e:15:b3:38:1d:f3:3a:e4:
0e:eb:a1:49:8f:a4:fe:2c:c3:1f:36:df:2d:df:27:
c0:45:c6:8c:e0:67:4c:f6:0a:a6:3b:01:0c:95:22:
87:9b:47:7f:b0:dc:1e:1a:99:ff:23:ec:4e:3d:56:
21:5c:44:20:22:c9:fc:87:6e:02:af:c9:4a:91:62:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F7:B5:B2:08:C2:6C:FC:BB:F4:51:16:19:CF:2B:CF:48:13:34:5D
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:68:44:f5:4d:cf:8d:99:da:8e:34:77:b8:0c:85:ae:d3:b2:
3a:db:d2:65:40:88:27:2e:c3:66:ca:70:11:ec:57:ea:12:3d:
db:13:81:cd:f2:f6:ee:6f:7d:a1:18:e2:f4:01:74:09:f9:63:
12:c1:07:53:d1:11:5c:4a:ad:43:86:c0:ad:a9:88:0a:62:7b:
e1:cc:e9:36:f5:66:e2:e3:81:6b:7a:ef:42:e3:4c:32:9c:d9:
82:48:b8:5f:ef:f5:36:0a:95:75:72:32:da:11:6f:85:03:ab:
89:07:5d:d2:a0:92:29:06:fa:29:70:d9:ca:9b:75:27:d3:8a:
05:ae:82:d9:81:9f:47:53:97:c9:49:c4:44:3b:8c:6a:32:39:
b3:d2:65:55:77:a4:0d:1d:b8:35:e2:14:1c:61:a2:88:9f:46:
4e:0e:64:52:b0:29:60:30:b3:51:6e:ea:90:41:ab:27:9b:17:
16:9e:24:ba:a8:75:ff:85:a0:9e:a7:56:f4:74:7b:a1:e2:ae:
ff:78:f0:4b:e1:98:a2:10:e6:f3:5a:d5:1d:a9:ca:05:72:1d:
97:4d:fb:58:c1:69:ff:8d:6d:c0:6c:d3:a4:55:88:4a:ce:e7:
a5:d4:cc:29:dd:55:4a:28:26:bf:39:53:29:fa:c1:37:69:b6:
08:da:76:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 20:38:29 2026 by rpki-client