Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft
File:                     5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft (raw, json)
Hash identifier:          hBEXQaTEsxNAXwb5dNwwHbBrK6jShXcMDJR9yN+Sq+Q=
Subject key identifier:   78:99:A0:AB:67:EE:3B:DC:27:A2:3A:AB:33:67:E5:AE:64:92:55:FA
Authority key identifier: 5E:B6:AF:02:55:12:76:00:26:62:D6:C1:ED:9C:35:39:7E:EA:2D:CF
Certificate issuer:       /CN=5EB6AF02551276002662D6C1ED9C35397EEA2DCF
Certificate serial:       2D0284B1801B2DE557E58AEC7FF992A7A11CAFC3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft
Manifest number:          6A
Signing time:             Tue 28 Jul 2026 16:14:24 +0000
Manifest this update:     Tue 28 Jul 2026 16:09:24 +0000
Manifest next update:     Wed 29 Jul 2026 19:04:24 +0000
Files and hashes:         1: 5EB6AF02551276002662D6C1ED9C35397EEA2DCF.crl (hash: Neqj9YqX4jDx9t6Lr8WpbFyWp50Ng/lMOeif8yyppZI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.crl
                          rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:02:84:b1:80:1b:2d:e5:57:e5:8a:ec:7f:f9:92:a7:a1:1c:af:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EB6AF02551276002662D6C1ED9C35397EEA2DCF
        Validity
            Not Before: Jul 28 16:09:24 2026 GMT
            Not After : Jul 29 19:04:24 2026 GMT
        Subject: CN=7899A0AB67EE3BDC27A23AAB3367E5AE649255FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:9a:13:d7:fe:a7:03:e7:63:29:4f:82:4f:
                    53:d2:24:56:05:98:bb:01:2a:e6:5a:f4:65:93:17:
                    11:84:5a:13:83:f1:2e:c0:1c:d8:bc:1a:c8:ac:6d:
                    d3:89:9a:aa:be:10:ed:37:87:28:41:17:d8:5e:95:
                    46:c8:c1:12:00:1e:a4:3d:8a:d0:3c:9a:d0:ac:47:
                    63:70:a7:c4:4e:ed:a6:f8:b1:bc:74:43:9c:e2:35:
                    75:69:94:24:42:c1:97:20:f7:82:5f:42:0c:1c:d6:
                    1e:d0:91:8a:fb:dc:ce:0f:45:c2:95:25:ed:7d:24:
                    24:dd:cb:ea:b1:13:64:d1:4f:1a:ae:cd:55:d0:b8:
                    c0:d1:ac:1c:b6:1c:2b:e8:48:dd:eb:25:3d:2b:18:
                    fb:d5:bb:6e:1e:cf:8b:d5:35:d1:5b:b1:7b:02:c9:
                    8b:08:97:1e:44:98:c3:a1:e0:ec:3c:c6:a0:05:79:
                    76:1a:04:6c:bb:67:74:6a:79:31:66:22:5a:58:17:
                    58:b0:d4:c6:a9:75:8b:20:1e:05:30:96:bc:bf:53:
                    60:40:34:c0:2c:63:5e:ed:f1:57:7d:e5:9f:68:05:
                    e2:aa:b7:6d:0d:8d:ed:f1:6a:cf:7f:28:a5:c7:e2:
                    72:ac:e2:e4:88:1f:23:09:5e:7f:50:a8:c6:b9:d1:
                    20:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:99:A0:AB:67:EE:3B:DC:27:A2:3A:AB:33:67:E5:AE:64:92:55:FA
            X509v3 Authority Key Identifier:
                keyid:5E:B6:AF:02:55:12:76:00:26:62:D6:C1:ED:9C:35:39:7E:EA:2D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:35:8c:df:dd:d6:0a:ef:3d:d1:3e:3f:09:13:d9:da:5c:62:
         c6:00:0f:d5:6c:6b:37:47:68:e3:80:41:39:7f:96:7b:7a:3d:
         9f:78:97:fd:84:95:c6:7a:3c:f7:65:d0:45:9e:03:d0:21:0e:
         1e:af:70:06:34:53:21:be:d8:5c:18:a7:30:4f:7b:11:47:e4:
         76:33:69:60:16:ed:d2:5c:9b:75:fa:ce:53:59:4f:de:db:a6:
         ca:69:72:67:47:7d:fc:1a:95:01:47:bd:d0:43:03:64:88:5c:
         3d:f7:14:57:24:36:9b:97:64:63:3a:95:45:d7:fc:80:65:9a:
         be:3a:7d:3d:2d:10:fa:d6:dc:9d:56:0d:95:3a:a5:43:98:0c:
         ed:e5:b0:4f:1c:27:21:6a:ec:01:74:c7:50:3d:b8:6a:c3:c6:
         f7:98:31:f0:b2:0f:fa:c2:a1:98:3c:e6:48:e2:8c:f9:fd:fd:
         70:41:3c:0d:19:d1:64:cf:df:2b:0f:5c:5a:83:66:2e:84:3c:
         7e:13:83:6b:fd:2d:86:63:d7:d6:7d:5c:fb:f4:50:f2:45:23:
         c9:46:68:12:48:7b:a6:e6:e1:05:c8:84:7c:b5:18:2e:c8:98:
         ac:d4:91:e9:ee:c5:bf:3d:70:94:3f:68:dd:56:fa:e7:88:1f:
         6e:7d:cb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:27:29 2026 by rpki-client