Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft
File:                     B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft (raw, json)
Hash identifier:          i0zA4Owm1mLMdz7gKYB+vGQrR7W4WsjzIyyMNP6Mj8o=
Subject key identifier:   6E:6C:A6:65:31:57:01:D8:8C:26:D3:F1:3F:DE:07:1C:47:76:01:1D
Authority key identifier: B7:2C:12:A5:51:5B:F3:3E:A3:5A:CD:6C:99:11:C9:AC:6D:E9:EA:05
Certificate issuer:       /CN=B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05
Certificate serial:       5D54551766ED946752E1A0DDB61BD306B33F3D6B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft
Manifest number:          CB
Signing time:             Fri 09 Oct 2026 15:47:41 +0000
Manifest this update:     Fri 09 Oct 2026 15:42:41 +0000
Manifest next update:     Sat 10 Oct 2026 19:23:41 +0000
Files and hashes:         1: B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl (hash: VAtVxi5WNaubnp3B+0tKXaAGJ5D9BqleKXKIeikYlu8=)
                          2: 3135372e31352e37302e302f32332d3233203d3e20313530373639.roa (hash: RIJKr3g2uIwf5iqGFGjqViDDGGsabsMlFTzqof1niUM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl
                          rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 19:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:54:55:17:66:ed:94:67:52:e1:a0:dd:b6:1b:d3:06:b3:3f:3d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05
        Validity
            Not Before: Oct  9 15:42:41 2026 GMT
            Not After : Oct 10 19:23:41 2026 GMT
        Subject: CN=6E6CA665315701D88C26D3F13FDE071C4776011D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:1d:f3:14:f9:07:c5:a6:8c:46:e8:8c:e9:
                    a8:58:b6:ec:33:a5:6e:05:9e:c1:c8:63:cd:71:0d:
                    c7:1c:8c:c8:1d:48:1b:8f:15:5b:c8:77:39:32:dd:
                    45:50:04:15:6a:e5:94:c6:6f:b1:d6:c6:38:5e:45:
                    96:ef:1e:2c:49:cf:5b:53:f0:7e:42:59:cc:8d:20:
                    56:69:a5:76:b6:f0:f3:79:94:b8:54:cd:0a:89:39:
                    37:aa:eb:aa:ce:48:98:d9:38:17:d7:6e:9e:de:e0:
                    c1:19:2d:0e:e9:0b:35:91:ef:a4:7f:e2:c2:4b:f6:
                    e3:7f:90:41:7b:87:89:ce:76:50:df:61:3b:cf:1a:
                    74:af:e9:e7:f6:33:eb:5d:3c:fb:e1:ba:b2:3d:ed:
                    53:44:f0:6a:48:f2:f5:ac:c2:01:35:56:84:55:16:
                    e5:f4:d2:3b:02:4b:de:57:37:fd:e0:64:b7:5a:a5:
                    6d:a5:ee:10:ff:4e:7d:25:f5:a6:e4:29:1d:18:dc:
                    48:24:4a:fb:66:7c:c9:33:3d:00:6c:f9:9e:2b:ad:
                    54:b2:df:81:86:42:47:56:fd:3a:3c:25:7d:1c:1b:
                    4f:38:d1:0a:e8:2c:02:8a:7f:4e:37:e5:74:55:2a:
                    4c:0e:11:78:e3:c5:e0:1c:16:12:79:83:ba:d7:4f:
                    a3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6C:A6:65:31:57:01:D8:8C:26:D3:F1:3F:DE:07:1C:47:76:01:1D
            X509v3 Authority Key Identifier:
                keyid:B7:2C:12:A5:51:5B:F3:3E:A3:5A:CD:6C:99:11:C9:AC:6D:E9:EA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b3:69:05:3a:c5:72:d0:9c:66:bd:e2:a6:9e:9c:88:32:64:
         1d:0c:92:47:a3:3c:55:d0:15:a0:b7:f0:06:03:cc:f9:0b:99:
         78:5a:f7:33:2a:c1:48:b0:08:a7:31:21:93:2e:ae:1a:0b:c6:
         81:ea:b0:40:43:11:09:e9:f5:73:21:f9:fe:3b:7d:97:55:d7:
         45:6e:cd:44:17:a7:4a:f6:1c:28:87:6c:88:fd:64:4a:87:42:
         91:28:c1:0c:6c:09:ca:e0:83:02:86:94:ec:bb:97:e1:b3:1b:
         f2:f1:70:ae:07:84:bd:12:4b:2d:11:5d:11:49:f0:6c:95:7c:
         91:90:93:6f:09:a6:24:5c:b5:1c:bb:38:6a:63:9e:e0:a6:9c:
         19:24:b7:f4:7c:82:b4:5f:2d:94:91:96:09:a4:2c:e9:bf:cf:
         a9:0e:d6:09:76:7e:91:bd:c6:45:49:39:69:ad:4b:7e:97:d9:
         82:d1:6b:ba:85:27:a6:f3:95:2f:ed:0d:79:18:81:89:96:96:
         11:3e:a9:16:1d:c0:ea:7a:ba:ab:e4:53:7a:6d:2d:b8:79:a2:
         ec:85:c9:fb:f7:22:61:7a:6a:3f:2c:db:41:69:da:ca:e9:02:
         15:c7:fe:3f:64:04:4f:e9:e8:c2:64:a9:81:2d:b1:99:30:8b:
         0f:ee:4e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:11:40 2026 by rpki-client