$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft File: CeskiT_4OKrchy_8N1hCf2rsIXI.mft (raw, json) Hash identifier: QvGu/UDPgiz+pvxzkVtizUJrFPfUWMsRtoKJhz3Rjdc= Subject key identifier: 69:72:BA:6E:75:A7:22:F3:0D:AB:E1:D7:75:FE:BE:54:13:8F:83:6A Authority key identifier: 09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 Certificate issuer: /CN=A918F7A1/serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft Manifest number: 08C3 Signing time: Tue 18 Aug 2026 23:06:48 +0000 Manifest this update: Tue 18 Aug 2026 23:06:47 +0000 Manifest next update: Tue 25 Aug 2026 23:06:47 +0000 Files and hashes: 1: CeskiT_4OKrchy_8N1hCf2rsIXI.crl (hash: /7ebEIRgiNbiyZo5GhDqp+xfCbVqWn6BC/Kv/yr+zW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7A1, serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Validity Not Before: Aug 18 23:06:47 2026 GMT Not After : Aug 25 23:06:47 2026 GMT Subject: CN=6a84e588-7b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:80:a7:fe:f7:d2:32:f9:e4:f8:80:cb:3a:95: 99:09:d2:9e:b2:54:25:59:e7:41:5b:e6:3f:4d:a3: 2e:df:82:7e:83:34:81:61:31:3d:b5:80:82:bb:12: 26:f7:44:0f:50:25:89:7f:ce:cb:9f:29:8c:15:05: 54:d1:ef:e1:0a:60:a6:93:db:14:c8:27:61:16:a8: 99:e4:19:a4:e3:c5:fc:c4:c0:1e:a1:ba:1c:89:6a: c0:93:49:6d:e8:95:1c:b2:1d:da:4f:0f:5d:ee:54: 87:72:c2:4c:87:b9:f8:59:5e:7f:9b:6a:ea:d0:5a: fd:86:17:2b:30:a7:ce:e7:ea:8b:da:69:76:cd:f1: 9b:d6:b1:93:7f:96:b1:98:cd:88:d1:cd:f2:b3:d5: b8:e2:ea:17:0e:5b:90:f5:30:73:38:ae:d6:77:2d: 31:39:e9:f2:74:b1:38:82:a9:26:3d:3a:6c:9e:dd: 90:67:d2:45:1c:32:9a:6a:c4:eb:45:88:fa:db:2a: e9:e4:1c:db:3c:07:66:9a:a3:88:16:d0:57:5e:27: f8:81:5a:ff:8d:d2:23:0f:48:12:6c:ef:af:2d:27: a1:30:99:d0:10:ba:dd:c5:08:91:c6:72:e4:79:1f: 52:3d:d7:9f:70:7d:b0:d4:5e:52:f1:44:75:5f:9e: fd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:72:BA:6E:75:A7:22:F3:0D:AB:E1:D7:75:FE:BE:54:13:8F:83:6A X509v3 Authority Key Identifier: keyid:09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:08:06:bf:ad:2d:a8:11:38:8e:d9:a6:ee:82:69:1e:2b:92: 6e:9d:73:1d:25:a3:88:f7:2d:0c:7c:85:08:e4:26:6f:fb:02: 98:53:6b:91:9d:c2:6d:9d:58:ab:c0:89:30:ba:ec:e1:e1:e8: 08:50:fd:24:8e:c3:3c:30:3d:e8:68:b3:8f:59:25:87:cd:1f: 4c:a1:07:18:09:30:6c:a1:fc:15:1d:85:28:ad:c7:f3:53:8e: 51:2e:71:74:13:1d:26:54:4b:02:d3:10:20:d5:b4:a1:fe:cb: 23:17:60:54:1c:59:4c:96:e6:76:a0:1b:1d:a4:f8:d4:0f:0e: d3:3f:2b:9d:de:59:d4:42:02:88:88:6f:25:92:45:53:ff:8e: 06:ff:88:2a:a7:59:67:64:40:ca:60:4c:9f:63:bd:dd:c3:d3: 48:65:97:ae:36:db:0b:23:4a:ee:a8:03:39:15:84:de:0b:56: 12:1f:3f:50:90:92:15:80:67:c7:21:30:b4:e6:c3:45:91:81: 1d:b6:4c:78:89:fb:50:72:e3:3c:5e:26:dd:dd:31:a7:2f:86: a5:da:e8:92:10:c3:48:b0:c7:60:85:80:02:54:e2:1b:fc:ea: e4:3e:ba:3e:83:b1:50:a6:fd:8a:0e:81:cc:79:80:7b:f7:48: 86:26:d9:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3QTExMTAvBgNVBAUTKDA5RUIyNDg5M0ZGODM4QUFEQzg3MkZGQzM3NTg0MjdG NkFFQzIxNzIwHhcNMjYwODE4MjMwNjQ3WhcNMjYwODI1MjMwNjQ3WjAYMRYwFAYD VQQDEw02YTg0ZTU4OC03YjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoCn/vfSMvnk+IDLOpWZCdKeslQlWedBW+Y/TaMu34J+gzSBYTE9tYCCuxIm 90QPUCWJf87LnymMFQVU0e/hCmCmk9sUyCdhFqiZ5Bmk48X8xMAeobociWrAk0lt 6JUcsh3aTw9d7lSHcsJMh7n4WV5/m2rq0Fr9hhcrMKfO5+qL2ml2zfGb1rGTf5ax mM2I0c3ys9W44uoXDluQ9TBzOK7Wdy0xOenydLE4gqkmPTpsnt2QZ9JFHDKaasTr RYj62yrp5BzbPAdmmqOIFtBXXif4gVr/jdIjD0gSbO+vLSehMJnQELrdxQiRxnLk eR9SPdefcH2w1F5S8UR1X579EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGlyum51 pyLzDavh13X+vlQTj4NqMB8GA1UdIwQYMBaAFAnrJIk/+Diq3Icv/DdYQn9q7CFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0 MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9LcmNoeV84TjFoQ2YycnNJ WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nlc2tpVF80T0tyY2h5XzhOMWhDZjJyc0lYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9L cmNoeV84TjFoQ2YycnNJWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMggGv60tqBE4jtmm7oJpHiuSbp1zHSWjiPctDHyFCOQmb/sCmFNrkZ3CbZ1Y q8CJMLrs4eHoCFD9JI7DPDA96Gizj1klh80fTKEHGAkwbKH8FR2FKK3H81OOUS5x dBMdJlRLAtMQINW0of7LIxdgVBxZTJbmdqAbHaT41A8O0z8rnd5Z1EICiIhvJZJF U/+OBv+IKqdZZ2RAymBMn2O93cPTSGWXrjbbCyNK7qgDORWE3gtWEh8/UJCSFYBn xyEwtObDRZGBHbZMeIn7UHLjPF4m3d0xpy+GpdrokhDDSLDHYIWAAlTiG/zq5D66 PoOxUKb9ig6BzHmAe/dIhibZ9w== -----END CERTIFICATE-----Generated at Wed Aug 19 12:52:27 2026 by rpki-client