$ rpki-client -vvvf rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft File: C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft (raw, json) Hash identifier: DrH1xtDNfV3mzZfqI/HyY+QeyIlEaW1XoNz7RD+7pB4= Subject key identifier: FA:1F:F1:13:EB:F9:80:DD:38:E2:25:DC:29:E6:92:8C:58:8F:26:2C Authority key identifier: C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E Certificate issuer: /CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Certificate serial: 563A30E18926D2103F5DB8D35D4D44E751408413 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft Manifest number: F0 Signing time: Sun 15 Nov 2026 00:13:52 +0000 Manifest this update: Sun 15 Nov 2026 00:08:52 +0000 Manifest next update: Mon 16 Nov 2026 03:39:52 +0000 Files and hashes: 1: C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl (hash: MTEzkSpi4d0so3fhmCTDiutats+vw+Z7zYEs8ZcIx3E=) 2: 3136322e342e3132312e302f32342d3234203d3e2037353338.roa (hash: JjMarjg2Zc6hqoQZgUCo2VMeha5Gj5iiZIx9vvG1h9o=) 3: 3136322e342e3132302e302f32342d3234203d3e2037353338.roa (hash: +oL4eb5beCTbwHQv05IGNdDaYgTzY6FmysDdzyN7dbc=) 4: 3136322e342e3132302e302f32332d3234203d3e2037353338.roa (hash: Mi+0JEPMuVlJEXsdnA5LTDCvWWBkvP7mWCGahHVlu/o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 03:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3a:30:e1:89:26:d2:10:3f:5d:b8:d3:5d:4d:44:e7:51:40:84:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Validity Not Before: Nov 15 00:08:52 2026 GMT Not After : Nov 16 03:39:52 2026 GMT Subject: CN=FA1FF113EBF980DD38E225DC29E6928C588F262C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:99:6e:cf:6c:05:fd:11:81:25:09:01:4b:01: be:cb:a8:1f:a7:8c:97:3c:7e:60:c2:f9:61:c9:bc: a4:8c:f1:90:28:a6:9b:0d:b4:5c:a1:6e:5e:a2:3a: 0f:a9:ac:1e:c0:8a:d0:1c:56:36:4d:7b:95:99:06: c3:76:38:38:58:a6:a4:b9:47:31:37:d5:71:85:78: 67:de:4a:46:ff:d5:02:01:a2:ca:b1:bf:7b:8d:62: d3:3d:ed:2d:df:28:f0:fa:5d:e3:63:1c:07:df:50: 83:bd:35:96:62:46:78:72:bd:68:aa:64:e6:b4:84: bd:a1:d2:34:41:e8:ae:a1:55:58:57:b9:37:b0:b7: 4d:7e:a5:c6:e9:fa:60:b1:52:38:b5:fd:2d:d3:c8: a0:86:b6:00:21:b4:a4:11:06:4b:e0:bd:ed:05:a9: 94:01:59:c9:92:08:e1:cd:28:dd:71:50:6c:3d:2a: da:73:46:1a:fe:e8:de:c6:1d:1d:cf:12:0b:53:5b: 1b:ea:ef:f3:87:35:e1:b3:56:56:45:28:8a:bf:63: 2f:4c:7f:f4:73:0a:f5:6d:dc:f6:b3:65:d1:6b:65: 0a:3b:3a:20:05:3e:45:50:96:49:81:50:62:3f:88: d4:5d:32:f3:10:57:10:42:36:66:0c:f8:72:73:32: ea:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1F:F1:13:EB:F9:80:DD:38:E2:25:DC:29:E6:92:8C:58:8F:26:2C X509v3 Authority Key Identifier: keyid:C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b3:10:14:fe:14:46:1a:1b:9e:7a:56:aa:ce:22:10:9a:5a: a2:68:df:b3:dc:fe:8a:00:98:a2:c7:52:29:a4:3f:fa:0f:d7: ed:e1:0f:ec:69:6f:cf:10:53:bd:bc:68:e0:80:47:8a:0f:c6: 8e:9a:1d:4a:b2:2d:2d:35:f2:6b:a1:95:77:12:ff:09:e7:87: bc:e8:ad:3b:f9:c3:23:27:ed:ca:67:73:ef:62:c4:55:48:c1: d3:d1:bf:d8:6b:d9:c9:e4:60:a3:c3:91:6e:e9:65:51:17:fe: 2d:d3:bd:2f:fd:9e:d8:d6:74:e2:60:c7:3f:f2:c4:2c:75:c6: 96:b0:53:ed:56:38:2c:3f:8b:c8:c1:08:84:24:af:22:f5:79: cf:c5:46:0d:31:97:e4:30:d3:1b:f1:92:97:17:41:0e:d1:09: f8:8f:b3:bf:57:3e:e9:8f:f5:a0:ef:05:a6:2c:ca:68:bc:c7: 73:64:88:96:f0:07:23:89:00:ae:33:4b:ff:0f:e8:8f:46:2b: 84:69:eb:08:8a:5e:53:88:ec:ea:76:8c:cf:e8:6e:6e:a1:92: f5:ed:53:1b:15:ac:7d:6f:90:50:f8:d0:56:e9:39:b1:2f:69: 8e:3f:51:39:57:9f:9f:27:6b:cb:cc:eb:bb:de:74:0d:34:bb: b8:aa:67:86 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUVjow4Ykm0hA/XbjTXU1E51FAhBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU4OUNDMEQyQ0YwRDYzNENCNEU5MDA2RUE3QTU1REQ3 N0UyQ0I5RTAeFw0yNjExMTUwMDA4NTJaFw0yNjExMTYwMzM5NTJaMDMxMTAvBgNV BAMTKEZBMUZGMTEzRUJGOTgwREQzOEUyMjVEQzI5RTY5MjhDNTg4RjI2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDemW7PbAX9EYElCQFLAb7LqB+n jJc8fmDC+WHJvKSM8ZAoppsNtFyhbl6iOg+prB7AitAcVjZNe5WZBsN2ODhYpqS5 RzE31XGFeGfeSkb/1QIBosqxv3uNYtM97S3fKPD6XeNjHAffUIO9NZZiRnhyvWiq ZOa0hL2h0jRB6K6hVVhXuTewt01+pcbp+mCxUji1/S3TyKCGtgAhtKQRBkvgve0F qZQBWcmSCOHNKN1xUGw9KtpzRhr+6N7GHR3PEgtTWxvq7/OHNeGzVlZFKIq/Yy9M f/RzCvVt3PazZdFrZQo7OiAFPkVQlkmBUGI/iNRdMvMQVxBCNmYM+HJzMuq3AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU+h/xE+v5gN044iXcKeaSjFiPJiwwHwYDVR0j BBgwFoAUxYnMDSzw1jTLTpAG6npV3Xfiy54wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBXT04v MC9DNTg5Q0MwRDJDRjBENjM0Q0I0RTkwMDZFQTdBNTVERDc3RTJDQjlFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0M1ODlDQzBEMkNGMEQ2MzRDQjRFOTAwNkVBN0E1 NURENzdFMkNCOUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUFdPTi8wL0M1ODlDQzBEMkNGMEQ2 MzRDQjRFOTAwNkVBN0E1NURENzdFMkNCOUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBosxAU/hRGGhue elaqziIQmlqiaN+z3P6KAJiix1IppD/6D9ft4Q/saW/PEFO9vGjggEeKD8aOmh1K si0tNfJroZV3Ev8J54e86K07+cMjJ+3KZ3PvYsRVSMHT0b/Ya9nJ5GCjw5Fu6WVR F/4t070v/Z7Y1nTiYMc/8sQsdcaWsFPtVjgsP4vIwQiEJK8i9XnPxUYNMZfkMNMb 8ZKXF0EO0Qn4j7O/Vz7pj/Wg7wWmLMpovMdzZIiW8AcjiQCuM0v/D+iPRiuEaesI il5TiOzqdozP6G5uoZL17VMbFax9b5BQ+NBW6TmxL2mOP1E5V5+fJ2vLzOu73nQN NLu4qmeG -----END CERTIFICATE-----Generated at Sun Nov 15 20:14:35 2026 by rpki-client