$ rpki-client -vvvf rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft File: C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft (raw, json) Hash identifier: 4u54Z7PuVNvHKQEn+Z6LudbL6uUxsV4O/O394yxrcSk= Subject key identifier: 57:BB:90:99:BE:F1:49:03:AF:2B:2C:2A:91:21:A9:E7:26:A0:35:48 Authority key identifier: C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E Certificate issuer: /CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Certificate serial: 1E2C240D16C806CBCB4747221559BC1D742DDE77 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft Manifest number: A7 Signing time: Mon 21 Sep 2026 05:20:51 +0000 Manifest this update: Mon 21 Sep 2026 05:15:51 +0000 Manifest next update: Tue 22 Sep 2026 07:11:51 +0000 Files and hashes: 1: 3136322e342e3132312e302f32342d3234203d3e2037353338.roa (hash: JjMarjg2Zc6hqoQZgUCo2VMeha5Gj5iiZIx9vvG1h9o=) 2: C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl (hash: vOC3lpergic3rCbHiG/OptJIfqTCwS9U8BPZ1KG5T7U=) 3: 3136322e342e3132302e302f32342d3234203d3e2037353338.roa (hash: +oL4eb5beCTbwHQv05IGNdDaYgTzY6FmysDdzyN7dbc=) 4: 3136322e342e3132302e302f32332d3234203d3e2037353338.roa (hash: Mi+0JEPMuVlJEXsdnA5LTDCvWWBkvP7mWCGahHVlu/o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 07:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:2c:24:0d:16:c8:06:cb:cb:47:47:22:15:59:bc:1d:74:2d:de:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Validity Not Before: Sep 21 05:15:51 2026 GMT Not After : Sep 22 07:11:51 2026 GMT Subject: CN=57BB9099BEF14903AF2B2C2A9121A9E726A03548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:16:e4:4f:f1:a8:95:6d:a9:87:c9:7d:04:41: 13:9f:9a:8b:b7:19:3a:bc:58:df:34:e9:b5:75:90: e8:90:1f:fa:89:47:c6:93:7c:1c:cd:75:99:bf:7d: 72:61:55:bd:8a:a1:b2:ed:99:e7:4e:c8:01:25:47: 40:fe:67:bf:c6:35:3d:2d:0c:e1:38:a0:8a:ca:c6: eb:03:a0:df:10:a2:dd:f8:13:b8:a8:5c:27:77:b1: 86:c5:b3:a3:dd:00:5c:ab:80:21:ff:9f:59:fa:fb: 25:53:23:fd:04:f3:e0:b5:25:59:83:a2:d4:95:8e: 47:46:72:b9:51:bf:3d:fd:3e:bb:67:bf:e6:bf:42: 0e:04:27:70:de:c4:6d:8b:cc:9d:0f:31:43:26:b5: 2d:72:93:0e:40:21:30:bf:31:70:3e:36:61:67:9b: 27:ad:ca:03:e6:ee:9f:2b:2b:37:aa:64:d7:10:b4: 6f:91:6f:c7:b6:29:c7:82:96:08:b1:ae:99:8d:a2: 7c:83:ee:af:c2:5e:1d:62:eb:69:32:76:5b:20:35: 9f:e0:0f:57:eb:45:42:ca:a5:87:59:b0:27:0c:11: d7:eb:5e:df:b4:d4:0e:b7:31:78:e4:d0:98:e8:77: 27:04:ed:b9:ed:ec:46:ce:1b:4a:f2:6f:54:f0:13: d2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BB:90:99:BE:F1:49:03:AF:2B:2C:2A:91:21:A9:E7:26:A0:35:48 X509v3 Authority Key Identifier: keyid:C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1b:57:93:54:f7:4c:e3:69:51:f5:74:e2:ab:cf:ad:5f:a5: 4d:8f:e7:03:99:d1:ee:5b:6b:5d:2e:23:a0:9e:15:64:49:7e: 1f:19:73:76:72:c6:46:0e:7f:5a:ca:ef:a7:0f:1f:f8:70:9f: 83:8f:c8:33:d2:9b:eb:80:98:91:c9:a1:c2:0a:e5:6e:06:ef: 12:5f:be:f0:c7:1c:8f:d7:09:50:ad:67:82:4c:59:75:8e:03: 62:74:76:84:4e:c3:42:9a:7b:07:90:04:ec:40:a0:a8:b1:dc: 59:0e:27:a5:d8:28:6e:36:45:bb:37:e1:0a:46:78:53:99:7d: c3:2a:19:9d:fa:f0:7b:08:66:f2:a3:c2:f3:48:d9:56:fd:28: cb:94:d8:c9:eb:8d:fe:93:93:91:eb:99:24:9c:a1:31:20:d5: 39:82:61:9c:1d:fa:95:59:cf:65:1f:78:11:6d:c5:98:3d:e6: 84:91:2e:ba:cd:f4:2b:9e:14:3a:59:a0:03:a4:2c:61:d9:0c: b9:be:de:0b:c8:9c:7c:67:d5:5d:44:5e:04:4b:df:07:fe:5f: 09:cc:18:af:c8:e4:85:05:8f:86:00:f3:fb:86:7b:f4:b8:4f: 7a:15:49:5b:b3:72:76:f3:aa:1a:01:f6:5d:2f:71:cf:88:49: 91:8f:cf:e8 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUHiwkDRbIBsvLR0ciFVm8HXQt3ncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU4OUNDMEQyQ0YwRDYzNENCNEU5MDA2RUE3QTU1REQ3 N0UyQ0I5RTAeFw0yNjA5MjEwNTE1NTFaFw0yNjA5MjIwNzExNTFaMDMxMTAvBgNV BAMTKDU3QkI5MDk5QkVGMTQ5MDNBRjJCMkMyQTkxMjFBOUU3MjZBMDM1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFuRP8aiVbamHyX0EQROfmou3 GTq8WN806bV1kOiQH/qJR8aTfBzNdZm/fXJhVb2KobLtmedOyAElR0D+Z7/GNT0t DOE4oIrKxusDoN8Qot34E7ioXCd3sYbFs6PdAFyrgCH/n1n6+yVTI/0E8+C1JVmD otSVjkdGcrlRvz39Prtnv+a/Qg4EJ3DexG2LzJ0PMUMmtS1ykw5AITC/MXA+NmFn myetygPm7p8rKzeqZNcQtG+Rb8e2KceClgixrpmNonyD7q/CXh1i62kydlsgNZ/g D1frRULKpYdZsCcMEdfrXt+01A63MXjk0JjodycE7bnt7EbOG0ryb1TwE9JLAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUV7uQmb7xSQOvKywqkSGp5yagNUgwHwYDVR0j BBgwFoAUxYnMDSzw1jTLTpAG6npV3Xfiy54wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBXT04v MC9DNTg5Q0MwRDJDRjBENjM0Q0I0RTkwMDZFQTdBNTVERDc3RTJDQjlFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0M1ODlDQzBEMkNGMEQ2MzRDQjRFOTAwNkVBN0E1 NURENzdFMkNCOUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUFdPTi8wL0M1ODlDQzBEMkNGMEQ2 MzRDQjRFOTAwNkVBN0E1NURENzdFMkNCOUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsG1eTVPdM42lR 9XTiq8+tX6VNj+cDmdHuW2tdLiOgnhVkSX4fGXN2csZGDn9ayu+nDx/4cJ+Dj8gz 0pvrgJiRyaHCCuVuBu8SX77wxxyP1wlQrWeCTFl1jgNidHaETsNCmnsHkATsQKCo sdxZDiel2ChuNkW7N+EKRnhTmX3DKhmd+vB7CGbyo8LzSNlW/SjLlNjJ643+k5OR 65kknKExINU5gmGcHfqVWc9lH3gRbcWYPeaEkS66zfQrnhQ6WaADpCxh2Qy5vt4L yJx8Z9VdRF4ES98H/l8JzBivyOSFBY+GAPP7hnv0uE96FUlbs3J286oaAfZdL3HP iEmRj8/o -----END CERTIFICATE-----Generated at Mon Sep 21 22:23:17 2026 by rpki-client