Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft
File:                     5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft (raw, json)
Hash identifier:          w8N9ax+9pDtZa6JgvKjYZIvYMdI9mtw1JruD0AnzEwY=
Subject key identifier:   DC:8D:C4:10:AE:66:56:E3:23:2B:32:76:B8:8A:27:4D:CF:C7:49:1F
Authority key identifier: 5E:B6:AF:02:55:12:76:00:26:62:D6:C1:ED:9C:35:39:7E:EA:2D:CF
Certificate issuer:       /CN=5EB6AF02551276002662D6C1ED9C35397EEA2DCF
Certificate serial:       5D7CA5FA251CA45C380D29C8A1DEF5F2C5BFC979
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft
Manifest number:          B7
Signing time:             Thu 24 Sep 2026 12:09:41 +0000
Manifest this update:     Thu 24 Sep 2026 12:04:41 +0000
Manifest next update:     Fri 25 Sep 2026 15:51:41 +0000
Files and hashes:         1: 5EB6AF02551276002662D6C1ED9C35397EEA2DCF.crl (hash: K3YBQyad87AOJU6kpt21cO5gwdqSEN0p1InFA3EGWGE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.crl
                          rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 02:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7c:a5:fa:25:1c:a4:5c:38:0d:29:c8:a1:de:f5:f2:c5:bf:c9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EB6AF02551276002662D6C1ED9C35397EEA2DCF
        Validity
            Not Before: Sep 24 12:04:41 2026 GMT
            Not After : Sep 25 15:51:41 2026 GMT
        Subject: CN=DC8DC410AE6656E3232B3276B88A274DCFC7491F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c1:ac:32:8a:d9:94:35:df:05:60:cc:30:12:
                    df:53:35:cf:77:15:9e:45:44:af:a6:16:a3:95:bd:
                    43:4a:32:17:0f:d5:96:4b:c2:60:90:ae:17:77:b1:
                    21:be:4b:aa:a3:ce:7e:6e:cc:c9:e3:43:c5:77:db:
                    31:18:c3:64:1c:63:04:67:53:26:9b:ff:08:9e:52:
                    9f:36:9f:ad:f6:fb:b8:4b:bb:1f:fd:98:65:60:b5:
                    fd:8f:f0:97:61:bc:82:dc:4d:95:ec:a4:05:41:73:
                    4c:8f:38:e1:40:0f:6a:ab:87:5c:50:ce:80:a8:11:
                    0f:d9:c0:70:a2:de:e1:e8:18:19:95:a1:ba:3a:8d:
                    7b:22:07:a6:c4:cf:b9:8f:e3:87:6a:2e:a3:85:f1:
                    16:71:73:58:a7:3a:d5:f0:2d:00:fa:79:18:46:c6:
                    f0:67:0d:28:04:21:71:cb:60:94:67:c9:95:0f:92:
                    05:d3:45:d1:94:8c:cc:6e:09:23:69:d1:54:42:92:
                    6a:4e:6f:5d:2d:e8:ae:20:35:8b:9c:6f:cd:49:21:
                    61:dc:b9:d4:a2:d6:eb:06:da:a4:2f:e6:b9:d1:a9:
                    2c:76:6c:c5:0c:95:cb:20:bf:3e:e2:87:bd:1e:73:
                    9a:71:27:7d:b2:da:0b:b6:ef:52:ad:5d:ff:3e:b4:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8D:C4:10:AE:66:56:E3:23:2B:32:76:B8:8A:27:4D:CF:C7:49:1F
            X509v3 Authority Key Identifier:
                keyid:5E:B6:AF:02:55:12:76:00:26:62:D6:C1:ED:9C:35:39:7E:EA:2D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:32:fd:93:a6:2e:7d:4d:b3:c1:6b:d5:66:b7:c7:87:1a:99:
         9e:33:d2:93:eb:7f:bc:6f:9d:41:6f:bb:34:05:68:e9:13:70:
         f1:45:3a:7b:c1:4e:84:7f:26:66:cf:e5:b4:52:be:e1:8b:14:
         7e:21:4d:8a:1c:bd:e4:27:72:6a:d7:31:ef:6e:a4:92:f8:ad:
         75:5f:59:c6:e2:90:ac:52:a4:64:31:63:81:d4:d9:e4:3a:c9:
         42:c3:1a:36:da:76:3b:e3:77:33:be:26:5c:18:b9:6b:b5:41:
         d9:51:d3:7c:73:a0:8f:0c:e5:b8:37:6a:c9:2f:6b:15:5b:51:
         db:a2:4b:9a:67:38:06:25:aa:86:23:52:3c:be:77:e1:b3:c8:
         3c:de:1c:eb:86:bb:c4:6a:23:03:26:9b:9c:eb:be:ed:a9:7c:
         1b:07:7e:6b:92:34:b2:63:0f:8a:6f:ca:75:28:ab:55:31:e6:
         f6:95:8e:46:c9:c8:57:b8:76:47:34:56:9c:b8:6a:6b:9d:08:
         32:33:d9:6e:54:4b:4e:2e:db:7f:05:35:34:38:fe:72:21:34:
         58:18:3f:a5:cd:3a:93:cd:c3:4c:c5:2d:33:c6:2a:53:52:1b:
         d5:5a:fd:8e:28:9d:60:7a:5d:cb:55:39:bc:e3:91:c4:84:87:
         a8:cc:0e:12
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUXXyl+iUcpFw4DSnIod718sW/yXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVCNkFGMDI1NTEyNzYwMDI2NjJENkMxRUQ5QzM1Mzk3
RUVBMkRDRjAeFw0yNjA5MjQxMjA0NDFaFw0yNjA5MjUxNTUxNDFaMDMxMTAvBgNV
BAMTKERDOERDNDEwQUU2NjU2RTMyMzJCMzI3NkI4OEEyNzREQ0ZDNzQ5MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRwawyitmUNd8FYMwwEt9TNc93
FZ5FRK+mFqOVvUNKMhcP1ZZLwmCQrhd3sSG+S6qjzn5uzMnjQ8V32zEYw2QcYwRn
Uyab/wieUp82n632+7hLux/9mGVgtf2P8JdhvILcTZXspAVBc0yPOOFAD2qrh1xQ
zoCoEQ/ZwHCi3uHoGBmVobo6jXsiB6bEz7mP44dqLqOF8RZxc1inOtXwLQD6eRhG
xvBnDSgEIXHLYJRnyZUPkgXTRdGUjMxuCSNp0VRCkmpOb10t6K4gNYucb81JIWHc
udSi1usG2qQv5rnRqSx2bMUMlcsgvz7ih70ec5pxJ32y2gu271KtXf8+tP5FAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQU3I3EEK5mVuMjKzJ2uIonTc/HSR8wHwYDVR0j
BBgwFoAUXravAlUSdgAmYtbB7Zw1OX7qLc8wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNQSVJB
UFBTLzAvNUVCNkFGMDI1NTEyNzYwMDI2NjJENkMxRUQ5QzM1Mzk3RUVBMkRDRi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS81RUI2QUYwMjU1MTI3NjAwMjY2MkQ2QzFF
RDlDMzUzOTdFRUEyRENGLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG
VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNQSVJBUFBTLzAvNUVCNkFG
MDI1NTEyNzYwMDI2NjJENkMxRUQ5QzM1Mzk3RUVBMkRDRi5tZnQwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAM8y
/ZOmLn1Ns8Fr1Wa3x4camZ4z0pPrf7xvnUFvuzQFaOkTcPFFOnvBToR/JmbP5bRS
vuGLFH4hTYocveQncmrXMe9upJL4rXVfWcbikKxSpGQxY4HU2eQ6yULDGjbadjvj
dzO+JlwYuWu1QdlR03xzoI8M5bg3askvaxVbUduiS5pnOAYlqoYjUjy+d+GzyDze
HOuGu8RqIwMmm5zrvu2pfBsHfmuSNLJjD4pvynUoq1Ux5vaVjkbJyFe4dkc0Vpy4
amudCDIz2W5US04u238FNTQ4/nIhNFgYP6XNOpPNw0zFLTPGKlNSG9Va/Y4onWB6
XctVObzjkcSEh6jMDhI=
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:51:26 2026 by rpki-client