Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MOBATW/0/AA46113BE991398466FCED33F3517720FBE1924C.mft
File:                     AA46113BE991398466FCED33F3517720FBE1924C.mft (raw, json)
Hash identifier:          v5JaXQ70kWVmfH4Abp2f0xMRjlbhy90uMJWD6iMBtQU=
Subject key identifier:   B1:C3:D1:0D:AC:AF:CF:B8:79:E6:30:C9:D0:BE:51:5F:38:2C:4D:B1
Authority key identifier: AA:46:11:3B:E9:91:39:84:66:FC:ED:33:F3:51:77:20:FB:E1:92:4C
Certificate issuer:       /CN=AA46113BE991398466FCED33F3517720FBE1924C
Certificate serial:       6F1EC89F5F05F7746A1DBFD865D703329A131207
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AA46113BE991398466FCED33F3517720FBE1924C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MOBATW/0/AA46113BE991398466FCED33F3517720FBE1924C.mft
Manifest number:          B5
Signing time:             Wed 23 Sep 2026 05:06:38 +0000
Manifest this update:     Wed 23 Sep 2026 05:01:38 +0000
Manifest next update:     Thu 24 Sep 2026 05:49:38 +0000
Files and hashes:         1: 3130332e3132372e3232382e302f32322d3234203d3e20313331363334.roa (hash: WwfRtxyQripWJlrZQW0UE6g9H5pm1iMYpnuZT9H9v2I=)
                          2: AA46113BE991398466FCED33F3517720FBE1924C.crl (hash: JAo186tFHSAVMCfUrP+wLS5yKrkP6n2XaPGt9or0hcA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MOBATW/0/AA46113BE991398466FCED33F3517720FBE1924C.crl
                          rsync://rpkica.twnic.tw/rpki/MOBATW/0/AA46113BE991398466FCED33F3517720FBE1924C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AA46113BE991398466FCED33F3517720FBE1924C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 05:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1e:c8:9f:5f:05:f7:74:6a:1d:bf:d8:65:d7:03:32:9a:13:12:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA46113BE991398466FCED33F3517720FBE1924C
        Validity
            Not Before: Sep 23 05:01:38 2026 GMT
            Not After : Sep 24 05:49:38 2026 GMT
        Subject: CN=B1C3D10DACAFCFB879E630C9D0BE515F382C4DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:b0:7d:9a:41:d2:56:e5:f9:fa:bb:e9:d8:
                    0e:a5:09:27:bc:e5:84:cb:39:c6:c3:03:59:7a:a5:
                    27:51:65:02:43:4e:5c:31:11:96:d4:9c:6d:f1:8e:
                    89:09:52:e2:ff:a6:0c:09:81:84:6d:4a:bb:68:c3:
                    f1:d6:12:17:45:0e:29:41:8f:c3:99:fd:c8:db:63:
                    0a:df:e3:f5:e0:4d:d3:e4:23:25:cf:fe:b0:2c:33:
                    71:85:24:62:7c:97:a0:58:04:da:9d:b0:5a:a9:60:
                    47:51:cb:14:46:a8:07:58:07:71:ac:d9:bb:9d:0a:
                    af:21:c4:d3:0e:55:fc:2d:e7:5e:67:a9:3b:34:f7:
                    4f:22:65:99:1f:d4:bb:19:e0:23:ad:49:66:6c:0f:
                    af:ef:a3:30:02:3e:62:10:b5:ce:a2:7f:56:12:be:
                    8f:a9:0b:06:30:e5:cb:66:ec:4c:da:2f:13:e1:f0:
                    cd:23:72:2d:2b:20:a7:4f:15:bc:a2:7c:c4:85:cf:
                    95:15:88:b6:0a:8f:b7:62:50:56:75:85:21:87:bb:
                    f8:5f:74:bc:56:58:3f:95:b2:55:4a:bf:17:00:9e:
                    a4:2a:19:66:9e:de:15:1f:06:df:4a:6a:ba:2f:f1:
                    d3:65:b1:7a:02:9a:77:1e:b1:ef:18:7a:54:a3:b8:
                    28:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C3:D1:0D:AC:AF:CF:B8:79:E6:30:C9:D0:BE:51:5F:38:2C:4D:B1
            X509v3 Authority Key Identifier:
                keyid:AA:46:11:3B:E9:91:39:84:66:FC:ED:33:F3:51:77:20:FB:E1:92:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MOBATW/0/AA46113BE991398466FCED33F3517720FBE1924C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AA46113BE991398466FCED33F3517720FBE1924C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MOBATW/0/AA46113BE991398466FCED33F3517720FBE1924C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:75:2d:df:00:5c:81:14:95:6e:74:9a:2d:a3:6b:a2:5c:78:
         1e:1a:a2:82:47:5c:e8:1c:60:13:c8:68:b3:64:14:15:3d:bd:
         9c:68:41:f8:c7:d2:ec:3f:1e:70:d5:2d:99:00:04:e7:15:fd:
         21:45:4c:73:90:78:94:fc:58:67:3a:6e:07:a8:dc:aa:cb:cf:
         45:15:06:b1:e7:8c:d6:89:4e:46:80:bc:bd:94:32:73:95:a1:
         a6:14:67:0a:25:4f:b1:f9:09:57:95:b6:8d:dd:45:81:90:24:
         6e:94:26:c9:a6:e2:69:0a:e6:76:ce:12:52:69:d5:4d:93:3c:
         56:08:dd:55:05:70:67:4b:0d:47:f5:3e:d3:29:2a:0d:ec:ee:
         d5:65:5f:ed:14:09:44:9e:08:50:72:59:48:44:0f:df:18:a0:
         76:16:34:2c:c7:ae:19:e4:8c:ca:89:34:11:9d:a7:33:39:d4:
         50:fc:ea:00:60:c2:53:04:26:6e:a9:bc:35:96:f4:5e:49:6c:
         71:95:3a:26:33:7c:10:76:db:9d:74:69:e8:13:e6:72:9d:41:
         89:52:e4:16:4a:e6:2c:b8:04:3b:de:bc:c1:85:03:85:de:ac:
         65:93:6e:a9:75:08:3b:01:50:8b:ac:ec:62:0a:29:aa:40:04:
         51:3f:06:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:26:34 2026 by rpki-client