$ rpki-client -vvvf rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft File: C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft (raw, json) Hash identifier: hmkwgvZoh6F61pKYlMWEqvtpMX7vLtobzyyz7n3FZWM= Subject key identifier: 4D:D4:7F:73:DA:8D:8F:71:65:4E:9E:A5:1D:4A:BF:36:FA:3A:D2:EA Authority key identifier: C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E Certificate issuer: /CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Certificate serial: 2C7CCABA371A235318A950C24CC9379324C6306A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft Manifest number: BC Signing time: Tue 06 Oct 2026 22:44:40 +0000 Manifest this update: Tue 06 Oct 2026 22:39:40 +0000 Manifest next update: Thu 08 Oct 2026 02:29:40 +0000 Files and hashes: 1: C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl (hash: hbCbdHMRPufqkQ+ZvuxLUG5G+pRtFgOfysntrRjhVuM=) 2: 3136322e342e3132302e302f32342d3234203d3e2037353338.roa (hash: +oL4eb5beCTbwHQv05IGNdDaYgTzY6FmysDdzyN7dbc=) 3: 3136322e342e3132302e302f32332d3234203d3e2037353338.roa (hash: Mi+0JEPMuVlJEXsdnA5LTDCvWWBkvP7mWCGahHVlu/o=) 4: 3136322e342e3132312e302f32342d3234203d3e2037353338.roa (hash: JjMarjg2Zc6hqoQZgUCo2VMeha5Gj5iiZIx9vvG1h9o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 20:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:7c:ca:ba:37:1a:23:53:18:a9:50:c2:4c:c9:37:93:24:c6:30:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Validity Not Before: Oct 6 22:39:40 2026 GMT Not After : Oct 8 02:29:40 2026 GMT Subject: CN=4DD47F73DA8D8F71654E9EA51D4ABF36FA3AD2EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:3c:95:ac:d0:33:4e:59:07:0e:a2:ba:aa: c0:99:d9:1e:3b:a7:d4:f1:91:1f:ef:a9:46:76:95: 4f:8a:e6:9b:28:d1:cf:2b:6a:c0:a9:9d:3d:75:b9: 66:3d:17:d7:cd:70:1e:b9:ee:5a:22:6c:da:23:59: 3b:a3:e5:bf:80:d0:30:de:74:7b:97:bf:53:a4:e3: c4:91:76:db:9e:69:2c:11:dd:f9:c3:39:37:5c:33: 7b:74:53:e3:fc:65:23:8c:c7:e2:0b:d6:b3:7c:23: ef:bb:e8:f7:f6:22:5b:72:2e:3f:62:04:88:9f:57: c8:e0:54:57:23:18:19:57:7d:f5:c6:0c:65:7c:a6: fd:dc:71:47:8b:f6:94:28:39:16:b1:a7:b1:5f:24: 36:27:ad:dc:63:2f:b0:4b:fa:f8:d9:b6:d4:9a:82: d2:40:b7:9a:07:35:1e:39:87:d5:f3:84:bc:dc:b3: df:33:fc:89:05:34:8c:98:dc:93:9e:ec:ea:d5:0a: 24:81:70:2b:6c:dc:e3:0d:d9:37:b6:df:2a:62:b7: 00:5f:91:4c:68:88:e8:97:90:35:88:91:08:58:da: f8:0f:d9:0f:dd:6e:1e:1a:b7:02:66:df:10:46:e9: c8:af:44:f1:53:b1:8f:1f:0b:b1:19:51:4b:1a:7f: d4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D4:7F:73:DA:8D:8F:71:65:4E:9E:A5:1D:4A:BF:36:FA:3A:D2:EA X509v3 Authority Key Identifier: keyid:C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:d1:a4:b6:99:ca:71:73:51:cb:8e:70:3b:86:8b:4a:33:36: e5:d6:fc:e5:4d:8b:fc:1d:e3:ff:6d:f8:c2:d0:18:00:a4:3d: 1a:99:a7:90:a4:71:ed:94:e7:6b:85:f4:e3:9f:58:03:eb:ec: 65:cc:b4:b9:a6:f6:f2:77:29:ac:5e:5d:96:44:83:69:d2:a4: 4a:e1:eb:8c:86:af:76:f5:02:42:a2:85:24:91:2b:f8:f4:b4: 4d:eb:a7:fc:33:94:1b:94:fa:24:81:d2:f5:79:a8:bc:d0:87: 38:c3:7d:ba:45:6c:ef:3e:43:e8:be:79:c3:cd:2a:ed:48:41: 4a:da:51:b4:82:23:c1:92:33:d4:40:0e:da:db:bb:6d:9f:c0: 30:e1:18:0f:82:1b:c5:e7:5b:2a:c4:0e:77:4d:58:2f:30:1b: 07:f4:45:e2:5f:85:ab:d0:c7:71:6c:1a:e0:a3:74:ea:4c:5b: aa:c6:84:ad:92:bb:3e:5d:8a:60:1a:c4:da:80:a2:03:ed:89: e5:53:15:68:26:16:68:7b:82:49:62:8d:30:69:f1:74:aa:30: dd:f2:4a:67:de:53:de:be:2c:80:5b:3d:75:60:59:51:22:8e: cc:0f:aa:c3:c2:cb:6f:fa:b8:bc:f4:04:e2:04:07:3c:26:ef: 33:b1:17:8f -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIULHzKujcaI1MYqVDCTMk3kyTGMGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU4OUNDMEQyQ0YwRDYzNENCNEU5MDA2RUE3QTU1REQ3 N0UyQ0I5RTAeFw0yNjEwMDYyMjM5NDBaFw0yNjEwMDgwMjI5NDBaMDMxMTAvBgNV BAMTKDRERDQ3RjczREE4RDhGNzE2NTRFOUVBNTFENEFCRjM2RkEzQUQyRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtCTyVrNAzTlkHDqK6qsCZ2R47 p9TxkR/vqUZ2lU+K5pso0c8rasCpnT11uWY9F9fNcB657loibNojWTuj5b+A0DDe dHuXv1Ok48SRdtueaSwR3fnDOTdcM3t0U+P8ZSOMx+IL1rN8I++76Pf2IltyLj9i BIifV8jgVFcjGBlXffXGDGV8pv3ccUeL9pQoORaxp7FfJDYnrdxjL7BL+vjZttSa gtJAt5oHNR45h9XzhLzcs98z/IkFNIyY3JOe7OrVCiSBcCts3OMN2Te23ypitwBf kUxoiOiXkDWIkQhY2vgP2Q/dbh4atwJm3xBG6civRPFTsY8fC7EZUUsaf9QnAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUTdR/c9qNj3FlTp6lHUq/Nvo60uowHwYDVR0j BBgwFoAUxYnMDSzw1jTLTpAG6npV3Xfiy54wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBXT04v MC9DNTg5Q0MwRDJDRjBENjM0Q0I0RTkwMDZFQTdBNTVERDc3RTJDQjlFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0M1ODlDQzBEMkNGMEQ2MzRDQjRFOTAwNkVBN0E1 NURENzdFMkNCOUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUFdPTi8wL0M1ODlDQzBEMkNGMEQ2 MzRDQjRFOTAwNkVBN0E1NURENzdFMkNCOUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDE0aS2mcpxc1HL jnA7hotKMzbl1vzlTYv8HeP/bfjC0BgApD0amaeQpHHtlOdrhfTjn1gD6+xlzLS5 pvbydymsXl2WRINp0qRK4euMhq929QJCooUkkSv49LRN66f8M5QblPokgdL1eai8 0Ic4w326RWzvPkPovnnDzSrtSEFK2lG0giPBkjPUQA7a27ttn8Aw4RgPghvF51sq xA53TVgvMBsH9EXiX4Wr0MdxbBrgo3TqTFuqxoStkrs+XYpgGsTagKID7YnlUxVo JhZoe4JJYo0wafF0qjDd8kpn3lPeviyAWz11YFlRIo7MD6rDwstv+ri89ATiBAc8 Ju8zsReP -----END CERTIFICATE-----Generated at Wed Oct 7 07:49:45 2026 by rpki-client