$ rpki-client -vvf rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft File: C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft (raw, json) Hash identifier: ERT8IkUNkJNYmN/q1Alz0T3YMgSoZH0zZSqWOsTg+pk= Subject key identifier: D3:6A:85:B2:0D:2F:6D:E6:76:BE:40:30:E4:AC:B2:D1:83:8B:58:28 Authority key identifier: C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E Certificate issuer: /CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Certificate serial: 3062454F1AFF87EDF320D7D7794AD3D283368A1C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft Manifest number: 5C Signing time: Tue 28 Jul 2026 08:33:00 +0000 Manifest this update: Tue 28 Jul 2026 08:28:00 +0000 Manifest next update: Wed 29 Jul 2026 09:26:00 +0000 Files and hashes: 1: C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl (hash: VlsPH1RM99skviGoaWe7x+EpM+Lil0qCr6KVeU3J+lI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:62:45:4f:1a:ff:87:ed:f3:20:d7:d7:79:4a:d3:d2:83:36:8a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Validity Not Before: Jul 28 08:28:00 2026 GMT Not After : Jul 29 09:26:00 2026 GMT Subject: CN=D36A85B20D2F6DE676BE4030E4ACB2D1838B5828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:80:63:60:1a:70:e2:74:c1:86:f9:d8:5c:8b: 08:b6:f4:ce:5b:ae:c3:95:cf:27:15:b1:2c:79:fc: 74:3a:b5:ca:68:2b:2a:4a:f9:f8:20:c7:48:24:6a: 61:d7:05:6b:d7:3d:97:5a:78:98:c0:ca:93:ee:9f: a9:3e:52:55:b8:a1:8c:8c:a0:cf:ea:17:a8:51:6f: c2:e2:76:02:64:04:3b:69:b9:ac:dc:ec:f6:b7:13: d7:8d:52:f8:44:c0:44:23:9a:6a:cb:b3:5b:97:23: b9:21:e0:a8:62:7b:2a:ef:07:f3:df:d4:d3:35:9a: 55:3c:4a:e9:bc:ef:08:e5:e3:6c:7b:4f:6a:37:f0: de:49:8d:d0:15:5c:0e:03:54:04:5d:bf:1f:7b:5d: e7:5c:11:0b:3c:d3:ff:e6:46:fe:47:0b:98:a9:84: 12:d3:37:05:6a:ea:a5:e8:99:7b:dc:ad:cd:25:13: 63:40:38:f6:a7:30:db:f6:41:23:32:8d:b6:aa:d3: d5:6e:0a:25:5f:8e:64:0e:23:ea:3a:fb:85:b9:c9: 02:26:04:aa:20:e7:1b:32:41:a4:2f:f6:18:3c:2b: 8f:da:cb:43:a2:db:f9:be:c4:40:f2:aa:26:0c:ae: f2:e6:a4:29:9d:1b:b0:77:09:53:1b:c9:f8:29:1a: 06:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6A:85:B2:0D:2F:6D:E6:76:BE:40:30:E4:AC:B2:D1:83:8B:58:28 X509v3 Authority Key Identifier: keyid:C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:71:44:9d:db:2f:3f:0e:ed:4b:49:17:01:1c:4c:99:fc:f0: 20:60:cd:3d:18:fd:e1:c8:ee:5b:9c:10:1f:18:55:6e:70:ca: 9d:ca:28:bc:3c:8f:19:27:f6:c8:ba:d3:b3:97:59:65:fc:32: f7:3a:d0:0e:a7:16:9e:84:74:4d:02:9f:df:19:9d:cb:6c:81: 8a:2c:89:4e:fb:14:88:08:a9:84:7b:4a:a7:e7:69:07:06:dc: 3b:a1:94:91:f4:f8:4f:ba:15:ad:12:9d:f8:36:74:d6:3a:41: c4:0c:b5:66:66:f7:88:2c:20:96:dd:fe:71:8b:3c:d8:96:39: 80:9a:31:86:0c:70:85:85:e7:97:75:7c:17:5c:0a:fb:13:ee: d3:db:86:2e:fe:ad:fa:0d:17:cd:e4:85:80:17:b5:70:77:cb: 83:23:d6:c9:de:c8:7c:34:91:28:8d:e3:24:24:ac:b3:26:e2: 69:5d:3e:00:15:db:1b:94:dc:0a:cd:f6:f6:71:14:23:98:2a: 52:e5:b6:13:63:f3:1e:36:56:3c:fe:a9:fd:33:26:e7:20:c1: 60:a5:5f:d8:b4:cf:6d:e7:91:be:15:66:3d:f7:95:2c:0f:a4: a8:78:d0:d8:ea:d5:0e:ff:08:3f:13:7c:f3:58:4a:20:3a:f9: 8f:43:c6:0e -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUMGJFTxr/h+3zINfXeUrT0oM2ihwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU4OUNDMEQyQ0YwRDYzNENCNEU5MDA2RUE3QTU1REQ3 N0UyQ0I5RTAeFw0yNjA3MjgwODI4MDBaFw0yNjA3MjkwOTI2MDBaMDMxMTAvBgNV BAMTKEQzNkE4NUIyMEQyRjZERTY3NkJFNDAzMEU0QUNCMkQxODM4QjU4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDngGNgGnDidMGG+dhciwi29M5b rsOVzycVsSx5/HQ6tcpoKypK+fggx0gkamHXBWvXPZdaeJjAypPun6k+UlW4oYyM oM/qF6hRb8LidgJkBDtpuazc7Pa3E9eNUvhEwEQjmmrLs1uXI7kh4KhieyrvB/Pf 1NM1mlU8Sum87wjl42x7T2o38N5JjdAVXA4DVARdvx97XedcEQs80//mRv5HC5ip hBLTNwVq6qXomXvcrc0lE2NAOPanMNv2QSMyjbaq09VuCiVfjmQOI+o6+4W5yQIm BKog5xsyQaQv9hg8K4/ay0Oi2/m+xEDyqiYMrvLmpCmdG7B3CVMbyfgpGgbbAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU02qFsg0vbeZ2vkAw5Kyy0YOLWCgwHwYDVR0j BBgwFoAUxYnMDSzw1jTLTpAG6npV3Xfiy54wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBXT04v MC9DNTg5Q0MwRDJDRjBENjM0Q0I0RTkwMDZFQTdBNTVERDc3RTJDQjlFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0M1ODlDQzBEMkNGMEQ2MzRDQjRFOTAwNkVBN0E1 NURENzdFMkNCOUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUFdPTi8wL0M1ODlDQzBEMkNGMEQ2 MzRDQjRFOTAwNkVBN0E1NURENzdFMkNCOUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC8cUSd2y8/Du1L SRcBHEyZ/PAgYM09GP3hyO5bnBAfGFVucMqdyii8PI8ZJ/bIutOzl1ll/DL3OtAO pxaehHRNAp/fGZ3LbIGKLIlO+xSICKmEe0qn52kHBtw7oZSR9PhPuhWtEp34NnTW OkHEDLVmZveILCCW3f5xizzYljmAmjGGDHCFheeXdXwXXAr7E+7T24Yu/q36DRfN 5IWAF7Vwd8uDI9bJ3sh8NJEojeMkJKyzJuJpXT4AFdsblNwKzfb2cRQjmCpS5bYT Y/MeNlY8/qn9MybnIMFgpV/YtM9t55G+FWY995UsD6SoeNDY6tUO/wg/E3zzWEog OvmPQ8YO -----END CERTIFICATE-----Generated at Tue Jul 28 21:58:49 2026 by rpki-client