$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft File: CeskiT_4OKrchy_8N1hCf2rsIXI.mft (raw, json) Hash identifier: zu8DZbuQ5gM8PS0/2supdqAsmVBy+Zoo+UDRNvRyW68= Subject key identifier: 02:27:07:2D:05:E9:97:4F:7B:E8:58:CE:11:01:AE:CF:4E:CA:19:8A Authority key identifier: 09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 Certificate issuer: /CN=A918F7A1/serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Certificate serial: 060E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft Manifest number: 0893 Signing time: Sat 04 Jul 2026 23:08:29 +0000 Manifest this update: Sat 04 Jul 2026 23:08:29 +0000 Manifest next update: Sat 11 Jul 2026 23:08:29 +0000 Files and hashes: 1: CeskiT_4OKrchy_8N1hCf2rsIXI.crl (hash: ieLEXERgdhjYzKwCc+waHzAGw/RbZtE7M+1vAUFh/dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 23:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1550 (0x60e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7A1, serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Validity Not Before: Jul 4 23:08:29 2026 GMT Not After : Jul 11 23:08:29 2026 GMT Subject: CN=6a49926d-55f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:40:92:74:e1:ba:68:14:4c:9f:fd:4f:fa:5e: a7:bd:d8:ff:af:e4:09:6d:3e:f7:8e:4b:55:ef:52: 15:a9:66:45:79:12:bf:dd:3c:52:c9:a2:81:a1:e7: 51:49:4f:e3:ce:be:33:1e:50:ea:52:21:71:b7:ce: 78:76:ff:db:5f:fa:46:4c:ac:de:ab:2a:08:64:cf: 1a:07:8d:03:74:53:6e:d4:cf:73:d6:a5:58:9f:16: e2:85:6f:1b:6f:6f:2f:ee:69:02:04:aa:dd:07:26: 83:de:5f:81:1d:9b:3e:8c:e3:25:8a:f3:9c:8b:d0: 93:74:4e:a4:06:05:a4:b1:bf:30:7e:f1:bc:84:a6: 18:cb:0a:e8:47:cb:d1:a2:67:55:7b:37:d9:59:11: e6:2e:ed:92:b7:29:a7:40:4e:73:46:72:7a:55:97: ed:95:56:08:9d:5c:97:e5:5c:a6:02:53:fa:2f:15: 8e:bf:9b:a8:84:29:bd:9f:2c:05:e6:e5:7a:5e:9c: fe:7c:c9:8c:1e:ba:c3:2a:f0:c4:c4:51:b1:a9:70: c5:c4:ef:a5:6c:9e:9f:22:6e:f5:08:d8:f0:0c:4b: 1e:a0:cc:19:b0:bc:94:29:25:b4:f5:a7:4d:61:2f: 06:6b:b8:48:3d:70:d0:6b:03:55:2c:d5:ac:51:a4: 64:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:27:07:2D:05:E9:97:4F:7B:E8:58:CE:11:01:AE:CF:4E:CA:19:8A X509v3 Authority Key Identifier: keyid:09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7c:de:40:ec:8f:d9:b8:15:37:65:51:e5:68:56:6c:8c:33: e3:4d:d4:58:55:29:30:3b:10:f2:76:6c:5b:5a:16:a3:18:90: 22:3e:38:d1:f3:d5:9f:f7:8a:d8:41:b7:97:a0:ce:85:41:12: 6c:a5:79:8a:b3:d7:6f:96:16:be:d5:9f:5c:7d:52:91:7c:a1: 6f:1d:a3:61:22:b9:92:59:c2:7c:40:8b:d2:89:6d:b6:b2:c2: 11:8d:5c:46:86:56:c0:94:33:11:ea:4e:68:a5:f4:04:08:15: 0a:ed:6e:e9:19:60:9f:f4:8d:75:76:77:66:c8:09:ee:a6:0b: 03:e9:60:f0:48:81:c9:ed:6e:bc:d7:d3:40:6e:68:8d:64:cf: 37:9e:37:73:e5:01:c8:13:03:93:56:3e:30:ae:7f:4a:83:b8: 95:55:98:12:dc:14:4a:dc:91:ff:cb:a6:39:47:48:0c:8d:fa: a1:4a:63:08:43:7f:ce:84:c2:b2:a7:ae:df:b7:14:59:57:3c: 57:5e:20:0a:f9:aa:48:2e:db:70:21:1f:ae:01:d7:21:40:51: 6d:d8:70:3a:0b:66:23:65:5d:3d:33:94:ef:5b:03:42:34:4a: a0:8c:da:6b:1a:5c:fd:12:e2:51:c5:70:fe:7b:5b:31:ef:d6: f6:d3:a0:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3QTExMTAvBgNVBAUTKDA5RUIyNDg5M0ZGODM4QUFEQzg3MkZGQzM3NTg0MjdG NkFFQzIxNzIwHhcNMjYwNzA0MjMwODI5WhcNMjYwNzExMjMwODI5WjAYMRYwFAYD VQQDEw02YTQ5OTI2ZC01NWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40CSdOG6aBRMn/1P+l6nvdj/r+QJbT73jktV71IVqWZFeRK/3TxSyaKBoedR SU/jzr4zHlDqUiFxt854dv/bX/pGTKzeqyoIZM8aB40DdFNu1M9z1qVYnxbihW8b b28v7mkCBKrdByaD3l+BHZs+jOMlivOci9CTdE6kBgWksb8wfvG8hKYYywroR8vR omdVezfZWRHmLu2StymnQE5zRnJ6VZftlVYInVyX5VymAlP6LxWOv5uohCm9nywF 5uV6Xpz+fMmMHrrDKvDExFGxqXDFxO+lbJ6fIm71CNjwDEseoMwZsLyUKSW09adN YS8Ga7hIPXDQawNVLNWsUaRktwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAInBy0F 6ZdPe+hYzhEBrs9OyhmKMB8GA1UdIwQYMBaAFAnrJIk/+Diq3Icv/DdYQn9q7CFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0 MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9LcmNoeV84TjFoQ2YycnNJ WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nlc2tpVF80T0tyY2h5XzhOMWhDZjJyc0lYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9L cmNoeV84TjFoQ2YycnNJWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH3zeQOyP2bgVN2VR5WhWbIwz403UWFUpMDsQ8nZsW1oWoxiQIj440fPVn/eK 2EG3l6DOhUESbKV5irPXb5YWvtWfXH1SkXyhbx2jYSK5klnCfECL0olttrLCEY1c RoZWwJQzEepOaKX0BAgVCu1u6Rlgn/SNdXZ3ZsgJ7qYLA+lg8EiBye1uvNfTQG5o jWTPN543c+UByBMDk1Y+MK5/SoO4lVWYEtwUStyR/8umOUdIDI36oUpjCEN/zoTC sqeu37cUWVc8V14gCvmqSC7bcCEfrgHXIUBRbdhwOgtmI2VdPTOU71sDQjRKoIza axpc/RLiUcVw/ntbMe/W9tOgig== -----END CERTIFICATE-----Generated at Sun Jul 5 08:39:55 2026 by rpki-client