
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft
File: B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft (raw, json)
Hash identifier: Mtytd9Gwal+s9vJzYqfq8y1Zr3SDAXi9gZoAKaop+kI=
Subject key identifier: 9F:D3:4D:E1:B7:E1:FA:D5:12:52:DA:CA:8C:A8:FA:69:24:23:10:C4
Authority key identifier: B7:2C:12:A5:51:5B:F3:3E:A3:5A:CD:6C:99:11:C9:AC:6D:E9:EA:05
Certificate issuer: /CN=B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05
Certificate serial: 560DDBCFAB982D66B123911EA1640022DD9CBD0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft
Manifest number: B8
Signing time: Fri 25 Sep 2026 14:18:19 +0000
Manifest this update: Fri 25 Sep 2026 14:13:19 +0000
Manifest next update: Sat 26 Sep 2026 17:06:19 +0000
Files and hashes: 1: B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl (hash: TCUfTAJ49yBJcXv73FO3g1cuIZyFtCJqSZKmHfTFDtA=)
2: 3135372e31352e37302e302f32332d3233203d3e20313530373639.roa (hash: RIJKr3g2uIwf5iqGFGjqViDDGGsabsMlFTzqof1niUM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl
rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 11:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:0d:db:cf:ab:98:2d:66:b1:23:91:1e:a1:64:00:22:dd:9c:bd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05
Validity
Not Before: Sep 25 14:13:19 2026 GMT
Not After : Sep 26 17:06:19 2026 GMT
Subject: CN=9FD34DE1B7E1FAD51252DACA8CA8FA69242310C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:dd:a1:79:ac:8c:e7:f0:a1:96:1e:cd:9b:
92:50:dd:21:75:6f:d5:a2:c3:6e:a7:8b:dd:3f:5a:
c9:0f:8b:30:69:e7:d4:3a:56:34:5b:1c:47:93:59:
ed:73:1f:9d:43:5f:12:de:90:a1:78:f7:f5:05:fa:
90:f8:93:ef:b7:c9:8d:15:68:31:68:d3:ff:8f:10:
e0:52:15:d6:2c:ca:95:8b:62:cb:ca:25:c1:c7:04:
1d:f4:03:79:90:b2:15:bf:23:87:ef:a3:58:34:d8:
41:a0:f2:1f:9f:95:be:02:21:f0:d1:a7:65:cd:55:
91:8f:46:36:c0:e8:df:45:41:da:e5:5d:9d:0b:e5:
c1:b3:74:3f:81:33:ed:0f:07:b5:2d:77:14:c7:3e:
9f:2d:8c:18:e4:1a:80:77:29:68:88:e1:6c:a9:30:
04:8d:e6:f9:63:b1:80:a2:8f:8d:b1:93:2b:dd:c1:
62:2a:b0:c2:59:c3:66:f5:76:03:07:e7:ad:3b:56:
f0:97:ea:5d:eb:7d:4d:02:6c:f0:28:8e:d0:c9:9c:
09:97:eb:fb:31:b7:e3:52:bd:82:63:53:9d:39:56:
8d:4a:94:3a:08:ec:e7:2d:64:08:21:61:5c:cd:a8:
72:1a:03:56:e6:cf:0d:d9:53:08:0e:04:f3:60:51:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D3:4D:E1:B7:E1:FA:D5:12:52:DA:CA:8C:A8:FA:69:24:23:10:C4
X509v3 Authority Key Identifier:
keyid:B7:2C:12:A5:51:5B:F3:3E:A3:5A:CD:6C:99:11:C9:AC:6D:E9:EA:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:93:8b:c8:81:ce:f8:48:ab:6a:6d:e4:ae:85:b6:1e:88:a6:
0f:ac:4f:cf:6d:43:59:1d:60:8f:37:c0:41:4b:3b:f2:1c:41:
f3:fb:15:77:2d:cf:a6:46:4d:96:64:eb:9e:4c:97:a5:a1:c8:
8e:73:0e:4b:12:01:a7:2b:0b:ec:e5:e6:e3:9a:05:b4:fd:3a:
fe:43:af:a2:d5:b5:45:6e:74:0a:97:38:7e:4d:a1:c2:f7:eb:
95:ae:d3:82:a7:73:aa:cf:67:e4:b6:d0:5b:02:62:b9:c0:7a:
a1:3a:65:fc:4c:5a:78:ea:86:86:9c:56:d7:6e:33:c6:2f:19:
01:c7:de:b8:40:bd:bd:f0:2d:31:9f:6c:cd:c7:f6:e2:76:15:
27:85:2c:66:2b:05:57:fa:15:71:18:4a:13:5c:c8:5f:0e:c8:
d7:70:46:4f:b0:4f:8f:3d:85:cf:fc:eb:2a:c4:87:26:67:27:
6f:d3:2d:63:2a:82:5a:39:fa:c4:18:09:2c:b6:5a:ed:96:c5:
a2:5f:7c:09:c6:32:54:3f:7d:e9:43:18:80:ad:f1:6d:6f:61:
8e:60:7e:ec:b3:cf:29:2a:07:1d:8d:71:c8:a1:cc:09:8a:b7:
ac:a9:a8:bb:3d:8a:9c:c6:78:ef:4e:7e:08:9f:4f:15:7c:2e:
62:57:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:32:11 2026 by rpki-client