Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ZENLAYERTW/0/A871DEB1956B99A007A90B9648C90D93B3C874C4.mft
File:                     A871DEB1956B99A007A90B9648C90D93B3C874C4.mft (raw, json)
Hash identifier:          OfAPPV8TSQ7N3qoOiK1l0TStoYXI5b5buoOaPdI2ymo=
Subject key identifier:   AA:39:3D:45:C9:75:0C:F5:9E:CE:27:97:22:10:AD:07:0A:E8:33:95
Authority key identifier: A8:71:DE:B1:95:6B:99:A0:07:A9:0B:96:48:C9:0D:93:B3:C8:74:C4
Certificate issuer:       /CN=A871DEB1956B99A007A90B9648C90D93B3C874C4
Certificate serial:       5CBBF9D0F5EABEE441BD0B708C02E5529DB99CFF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A871DEB1956B99A007A90B9648C90D93B3C874C4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ZENLAYERTW/0/A871DEB1956B99A007A90B9648C90D93B3C874C4.mft
Manifest number:          02
Signing time:             Tue 12 May 2026 08:59:49 +0000
Manifest this update:     Tue 12 May 2026 08:54:49 +0000
Manifest next update:     Wed 13 May 2026 12:29:49 +0000
Files and hashes:         1: A871DEB1956B99A007A90B9648C90D93B3C874C4.crl (hash: HZFUD6N20UG98sFNEIvJiLj1V8BQM7JfuUY+DBoz+2Y=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ZENLAYERTW/0/A871DEB1956B99A007A90B9648C90D93B3C874C4.crl
                          rsync://rpkica.twnic.tw/rpki/ZENLAYERTW/0/A871DEB1956B99A007A90B9648C90D93B3C874C4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A871DEB1956B99A007A90B9648C90D93B3C874C4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bb:f9:d0:f5:ea:be:e4:41:bd:0b:70:8c:02:e5:52:9d:b9:9c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A871DEB1956B99A007A90B9648C90D93B3C874C4
        Validity
            Not Before: May 12 08:54:49 2026 GMT
            Not After : May 13 12:29:49 2026 GMT
        Subject: CN=AA393D45C9750CF59ECE27972210AD070AE83395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:50:24:1e:c0:03:d6:80:2f:55:42:da:b6:fa:
                    69:be:b1:56:b7:77:93:74:c0:bf:ea:7a:09:1b:3c:
                    dd:98:7f:e2:fe:46:d1:89:6d:f9:3e:3b:e8:1e:91:
                    6b:0a:88:07:35:7c:3a:f1:00:01:89:fa:ed:15:44:
                    03:f6:73:95:56:f9:94:ad:76:a4:a3:c1:d7:a0:8b:
                    2b:6c:7e:7d:30:fa:3d:d7:32:40:19:aa:ef:71:96:
                    c2:a0:36:67:93:db:1a:23:27:db:56:12:aa:5b:e3:
                    5d:4d:71:1a:3d:ea:cb:9d:21:74:dd:80:c0:f7:54:
                    b0:3c:c0:8f:58:a5:5a:8b:f1:0b:b6:dd:c5:6a:b7:
                    a8:67:96:f3:ae:ec:4c:5e:8a:22:e4:c4:2a:80:1d:
                    22:96:b2:c1:91:a8:bf:c5:41:05:cc:3c:4c:0b:ca:
                    a5:0c:2b:3e:91:48:01:d9:11:14:b4:49:d6:9c:12:
                    65:65:c3:b7:47:76:aa:d6:6c:e1:ee:a3:02:a6:4f:
                    ad:6e:46:d0:a4:92:e9:f9:d6:cc:b4:65:38:4c:cc:
                    e0:6a:13:74:44:d2:de:a8:50:f3:07:19:58:85:d1:
                    16:29:f3:5c:be:db:c5:06:c3:aa:03:d9:18:56:84:
                    69:69:6f:69:7c:d7:c5:fb:67:01:56:c2:6f:ec:ea:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:39:3D:45:C9:75:0C:F5:9E:CE:27:97:22:10:AD:07:0A:E8:33:95
            X509v3 Authority Key Identifier:
                keyid:A8:71:DE:B1:95:6B:99:A0:07:A9:0B:96:48:C9:0D:93:B3:C8:74:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ZENLAYERTW/0/A871DEB1956B99A007A90B9648C90D93B3C874C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A871DEB1956B99A007A90B9648C90D93B3C874C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZENLAYERTW/0/A871DEB1956B99A007A90B9648C90D93B3C874C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:04:56:b8:2a:94:ec:2a:65:98:6c:f5:b4:ab:67:1a:7e:29:
         86:06:20:b2:98:b0:d7:46:66:9a:e8:a2:ba:9b:28:ed:34:af:
         b9:d3:33:a2:8a:52:e9:2d:35:69:df:1e:6e:fa:93:d0:74:1b:
         a8:db:7c:5c:3e:15:26:a4:56:d1:c4:d9:a3:6c:99:43:99:b5:
         51:13:26:8f:97:32:4d:f9:c7:04:a3:2f:ab:dc:04:a7:f2:c5:
         f6:71:2c:43:16:81:fd:fb:87:bd:8f:c4:97:81:d4:69:f0:15:
         62:af:29:dd:a9:7d:a0:27:c6:53:51:df:73:09:0e:de:63:24:
         e6:8d:57:a7:4b:6e:25:39:eb:01:98:ab:66:25:a8:ab:87:b4:
         86:2e:3b:f9:cf:fb:4b:02:a6:45:66:ef:f0:d5:70:72:fc:06:
         a6:27:76:9c:27:98:0d:98:0c:02:af:1d:50:3e:1c:c8:5e:99:
         47:f6:42:b4:75:bd:ed:fe:17:d5:9c:0c:2d:40:cd:bd:e0:e9:
         df:5f:c7:84:18:85:51:e4:35:10:37:40:bf:df:6f:be:1a:04:
         c5:b7:b6:bd:a8:57:61:c3:a9:d3:80:98:fc:b5:ca:1b:ce:3e:
         3f:b6:61:98:36:ad:31:c1:d3:da:04:7b:8e:2c:2c:de:90:47:
         0b:34:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:34 2026 by rpki-client