Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft
File:                     B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft (raw, json)
Hash identifier:          JTj0NNfoR/zUktzD6HlMSVYUlPY9rR/xKXWOu9bSTAw=
Subject key identifier:   07:78:07:2C:53:52:70:7A:B1:1B:B0:5C:0A:9A:48:E0:88:55:BA:99
Authority key identifier: B7:2C:12:A5:51:5B:F3:3E:A3:5A:CD:6C:99:11:C9:AC:6D:E9:EA:05
Certificate issuer:       /CN=B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05
Certificate serial:       7207A01A03C00A6B75173EBB2F3E494421FF3411
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft
Manifest number:          C3
Signing time:             Sat 03 Oct 2026 19:16:43 +0000
Manifest this update:     Sat 03 Oct 2026 19:11:43 +0000
Manifest next update:     Sun 04 Oct 2026 19:36:43 +0000
Files and hashes:         1: B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl (hash: AnYJI3bYO9qz7H/4w2ikTFgNFdwcgMAybLTCtLZ9ZHI=)
                          2: 3135372e31352e37302e302f32332d3233203d3e20313530373639.roa (hash: RIJKr3g2uIwf5iqGFGjqViDDGGsabsMlFTzqof1niUM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl
                          rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 19:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:07:a0:1a:03:c0:0a:6b:75:17:3e:bb:2f:3e:49:44:21:ff:34:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05
        Validity
            Not Before: Oct  3 19:11:43 2026 GMT
            Not After : Oct  4 19:36:43 2026 GMT
        Subject: CN=0778072C5352707AB11BB05C0A9A48E08855BA99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:e8:9c:c7:f3:b6:f9:49:ab:bd:1e:bb:c6:
                    84:5a:94:ae:46:31:1d:60:c0:3f:94:86:6d:6a:32:
                    9c:ad:6d:91:98:91:04:ff:9a:d8:b1:83:1d:3c:c6:
                    ef:83:f0:5d:ea:6b:13:3b:6e:57:4b:ec:e4:18:9b:
                    70:27:f1:1d:68:01:22:a5:73:09:da:12:06:98:5f:
                    7b:f9:b7:06:2f:26:6b:35:df:ce:66:43:58:1f:f1:
                    0b:81:19:31:38:d1:37:77:36:ef:c3:14:ff:df:05:
                    9f:f3:70:ea:2c:28:7c:68:c7:ac:5b:4a:25:2a:09:
                    a0:db:7b:de:d0:91:f6:5a:f6:9a:8e:dd:38:a6:97:
                    54:6b:69:a2:06:47:f6:05:18:e6:29:fb:8d:82:e4:
                    b9:81:d1:f4:ed:db:7b:6b:4c:ea:56:f7:b3:56:0a:
                    b9:c4:a8:91:c2:6b:c9:26:8f:67:73:80:b2:d6:a2:
                    75:9f:70:e6:e0:49:e8:61:b6:cd:46:f3:36:17:86:
                    a3:fa:ae:cc:db:ca:85:89:30:2b:37:b4:a4:43:25:
                    b8:26:28:fa:28:01:43:ed:0a:34:e1:cd:b3:27:fe:
                    52:9c:92:e8:3c:77:54:c2:ab:08:77:b9:f0:fe:79:
                    ed:97:fc:d7:c9:04:96:cf:72:7e:3c:dc:17:2e:84:
                    13:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:78:07:2C:53:52:70:7A:B1:1B:B0:5C:0A:9A:48:E0:88:55:BA:99
            X509v3 Authority Key Identifier:
                keyid:B7:2C:12:A5:51:5B:F3:3E:A3:5A:CD:6C:99:11:C9:AC:6D:E9:EA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:16:62:f1:7a:34:fa:10:de:50:90:62:9d:d3:cb:b9:3a:c8:
         97:22:8e:9a:67:1a:27:d8:99:6d:90:c6:82:17:5b:74:14:3f:
         d3:92:34:d1:6c:77:cb:de:c2:28:e1:b0:53:db:c4:d2:28:8b:
         9e:09:6d:d7:13:32:05:a7:10:55:b0:2e:fa:8c:cb:62:9e:96:
         4b:43:5a:c3:da:cb:3b:ac:79:10:c8:ad:4a:63:44:2a:91:f0:
         4c:3b:45:4c:51:be:c5:3d:62:2b:fb:a3:27:e2:c0:f3:0a:12:
         bb:7b:01:90:49:d4:81:71:68:26:66:91:7b:2b:8b:e1:fa:36:
         91:a0:4b:ec:04:d2:be:84:cc:f1:97:29:fd:05:36:97:64:2f:
         20:db:66:75:c8:14:38:cd:0b:92:c9:94:7c:77:2e:cd:c8:2c:
         3d:ce:72:cd:2f:71:6d:3d:a6:d7:5f:4e:93:d0:e7:6f:64:d1:
         59:88:17:09:94:db:99:82:8a:b0:28:07:21:48:17:13:e8:71:
         b3:7b:ec:af:70:9d:a6:fb:33:88:1b:75:cb:e2:30:37:54:c5:
         38:9e:24:04:bc:5a:8f:5d:1e:1f:f3:c5:70:cf:a4:89:02:de:
         f9:70:a4:5d:86:3b:02:3a:42:ce:e4:2a:a6:7d:88:db:9b:7f:
         71:aa:84:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:05:19 2026 by rpki-client