$ rpki-client -vvf rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft File: C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft (raw, json) Hash identifier: an/JRAFploQ2hBMIm/9HmzhGJRmlgYcbYg8xXU4vSv8= Subject key identifier: 45:E0:EB:BA:D9:15:9C:25:3C:D8:49:9D:CF:EC:47:95:1F:0C:2F:55 Authority key identifier: C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E Certificate issuer: /CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Certificate serial: 3D95243B08C361E22D2583DC5A3AC8EAE11E7A53 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft Manifest number: 36 Signing time: Tue 30 Jun 2026 02:12:54 +0000 Manifest this update: Tue 30 Jun 2026 02:07:54 +0000 Manifest next update: Wed 01 Jul 2026 03:04:54 +0000 Files and hashes: 1: C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl (hash: aHKXo3pMHMwZE5jozg7CPQvsUlt81HELqG0sQN4oIho=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 19:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:95:24:3b:08:c3:61:e2:2d:25:83:dc:5a:3a:c8:ea:e1:1e:7a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Validity Not Before: Jun 30 02:07:54 2026 GMT Not After : Jul 1 03:04:54 2026 GMT Subject: CN=45E0EBBAD9159C253CD8499DCFEC47951F0C2F55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0b:c1:e2:60:23:ca:31:7b:c4:03:6b:31:69: 5d:87:65:0c:d9:5b:cd:9c:b8:78:8a:91:6f:6b:c4: 86:d4:07:4a:a1:8d:fd:4e:29:1a:b1:57:17:2d:70: 41:05:11:75:10:eb:5f:59:5a:20:2f:50:c6:b4:5a: 6e:a5:ce:ee:79:43:7a:6a:6a:41:a1:59:d9:6b:ab: 01:b3:98:77:08:b1:98:1c:e7:16:2e:c8:b1:cf:53: 2a:9e:4e:f2:f3:f3:38:cc:b2:c2:41:46:55:45:76: d8:8b:d4:a6:84:af:de:8f:ac:12:a8:7c:4c:2a:00: d6:a8:9b:76:68:17:c1:40:78:05:90:84:a9:18:40: 0c:e4:16:81:21:61:ac:5a:05:6e:71:9d:87:ff:1f: 02:4b:4c:eb:71:eb:66:c4:32:b8:9a:a7:41:51:7c: a1:16:2a:70:f6:24:f0:5c:f2:ee:61:fe:d9:8a:6f: 5b:0b:5b:61:eb:09:91:86:2c:32:a7:9a:9b:b6:a9: 2c:88:5c:45:13:2c:28:34:1b:50:df:45:c3:e8:41: 0d:13:ec:7f:5d:be:1f:7b:fa:ae:4c:67:9b:94:0f: bc:0f:34:15:c5:24:82:57:44:18:ec:0d:84:39:48: 44:e0:d9:13:cc:4d:44:f6:2f:11:e7:70:d3:d2:57: 63:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E0:EB:BA:D9:15:9C:25:3C:D8:49:9D:CF:EC:47:95:1F:0C:2F:55 X509v3 Authority Key Identifier: keyid:C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:4c:30:b0:29:d6:4c:9e:81:5c:cf:61:fd:ad:4e:c0:4f:53: b6:74:76:d4:11:d1:2c:91:b7:cc:dc:c2:c5:c3:d6:e4:1d:93: 61:e6:ba:d7:8b:c1:c2:9b:6c:2d:16:eb:91:8d:fc:26:43:fd: 43:81:ca:ee:aa:0e:ea:59:3c:0c:6c:46:59:87:e3:d6:ff:24: ef:bd:5c:fa:d1:d7:fe:b9:90:a7:34:05:5d:86:d4:56:e2:6a: 3a:03:19:66:88:03:8c:36:f9:3d:2a:7d:38:31:a4:3f:03:fb: ee:9c:28:ae:9a:1b:02:31:6d:4a:97:dc:c2:c8:52:0e:aa:8b: ff:3d:ef:1b:69:85:43:36:c2:70:3f:e8:36:02:8f:c1:48:42: 5b:3f:a3:6f:35:a8:f2:91:cf:0d:9b:40:f3:cd:4c:14:92:5c: f7:ac:16:30:e5:94:cd:0f:b4:db:ac:46:09:a0:6b:55:30:0c: b1:2b:08:95:4d:11:7a:96:52:3a:24:38:b1:67:7a:36:d9:1f: 46:0a:c9:1b:bd:d8:02:f0:4f:05:48:be:a7:f6:02:f8:e3:43: 50:62:6c:4d:75:3d:75:ed:94:95:b9:b2:fb:38:ed:fc:94:cb: a5:64:84:ac:c5:8e:a5:2f:6f:96:b4:64:46:a5:1b:4f:7d:99: e1:b4:77:f1 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUPZUkOwjDYeItJYPcWjrI6uEeelMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU4OUNDMEQyQ0YwRDYzNENCNEU5MDA2RUE3QTU1REQ3 N0UyQ0I5RTAeFw0yNjA2MzAwMjA3NTRaFw0yNjA3MDEwMzA0NTRaMDMxMTAvBgNV BAMTKDQ1RTBFQkJBRDkxNTlDMjUzQ0Q4NDk5RENGRUM0Nzk1MUYwQzJGNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkC8HiYCPKMXvEA2sxaV2HZQzZ W82cuHiKkW9rxIbUB0qhjf1OKRqxVxctcEEFEXUQ619ZWiAvUMa0Wm6lzu55Q3pq akGhWdlrqwGzmHcIsZgc5xYuyLHPUyqeTvLz8zjMssJBRlVFdtiL1KaEr96PrBKo fEwqANaom3ZoF8FAeAWQhKkYQAzkFoEhYaxaBW5xnYf/HwJLTOtx62bEMriap0FR fKEWKnD2JPBc8u5h/tmKb1sLW2HrCZGGLDKnmpu2qSyIXEUTLCg0G1DfRcPoQQ0T 7H9dvh97+q5MZ5uUD7wPNBXFJIJXRBjsDYQ5SETg2RPMTUT2LxHncNPSV2MVAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUReDrutkVnCU82Emdz+xHlR8ML1UwHwYDVR0j BBgwFoAUxYnMDSzw1jTLTpAG6npV3Xfiy54wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBXT04v MC9DNTg5Q0MwRDJDRjBENjM0Q0I0RTkwMDZFQTdBNTVERDc3RTJDQjlFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0M1ODlDQzBEMkNGMEQ2MzRDQjRFOTAwNkVBN0E1 NURENzdFMkNCOUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUFdPTi8wL0M1ODlDQzBEMkNGMEQ2 MzRDQjRFOTAwNkVBN0E1NURENzdFMkNCOUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC8TDCwKdZMnoFc z2H9rU7AT1O2dHbUEdEskbfM3MLFw9bkHZNh5rrXi8HCm2wtFuuRjfwmQ/1Dgcru qg7qWTwMbEZZh+PW/yTvvVz60df+uZCnNAVdhtRW4mo6AxlmiAOMNvk9Kn04MaQ/ A/vunCiumhsCMW1Kl9zCyFIOqov/Pe8baYVDNsJwP+g2Ao/BSEJbP6NvNajykc8N m0DzzUwUklz3rBYw5ZTND7TbrEYJoGtVMAyxKwiVTRF6llI6JDixZ3o22R9GCskb vdgC8E8FSL6n9gL440NQYmxNdT117ZSVubL7OO38lMulZISsxY6lL2+WtGRGpRtP fZnhtHfx -----END CERTIFICATE-----Generated at Tue Jun 30 13:05:59 2026 by rpki-client