$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft File: CeskiT_4OKrchy_8N1hCf2rsIXI.mft (raw, json) Hash identifier: rPVf5F0r+F794w3/9LaEWV4Hyb5DGBzD3l8BML/Aous= Subject key identifier: 0E:DF:75:E7:77:35:DE:36:1C:05:66:89:97:9B:18:CA:AA:43:0E:81 Authority key identifier: 09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 Certificate issuer: /CN=A918F7A1/serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Certificate serial: 0540 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft Manifest number: 06F5 Signing time: Fri 30 May 2025 23:39:06 +0000 Manifest this update: Fri 30 May 2025 23:39:06 +0000 Manifest next update: Fri 06 Jun 2025 23:39:06 +0000 Files and hashes: 1: CeskiT_4OKrchy_8N1hCf2rsIXI.crl (hash: RBs2KuoGiTlEDJZqaXW73Hb+r4wt4t44BuwljXXNVvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1344 (0x540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7A1, serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Validity Not Before: May 30 23:39:06 2025 GMT Not After : Jun 6 23:39:06 2025 GMT Subject: CN=683a419a-8d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:60:69:88:8d:75:b5:ff:2d:3b:e9:92:8d: bc:5b:a8:f5:5c:00:13:b4:17:1b:2d:2d:c6:38:bc: df:8f:3d:19:a8:87:b4:40:4c:2e:e8:89:9e:13:34: f3:38:f9:0d:02:00:76:5c:72:e8:d4:2b:c4:3d:62: e2:24:3d:eb:35:79:7d:9e:72:37:61:c2:44:26:ea: 57:36:d7:9e:51:85:c6:2c:0e:8e:41:f3:d2:f1:98: 64:43:03:f0:7d:89:fe:ec:3c:c0:f3:f3:fd:59:37: 09:66:09:9e:35:c6:36:95:b0:76:ad:2a:ab:03:8f: bc:0d:62:fc:5f:15:2e:73:5a:cc:0d:8f:79:b7:da: 78:d1:bb:c9:57:2d:98:b4:ef:c5:c2:0e:f2:9c:21: a1:9f:cb:05:34:0a:29:e4:ff:32:90:46:a5:2f:cd: fe:50:62:65:a4:33:22:dc:63:aa:d8:40:3b:ca:b2: 07:5f:d0:b4:03:86:4c:21:31:94:92:2b:12:48:88: b8:27:f4:34:26:1b:21:6a:a3:14:33:37:49:ef:c1: 35:5d:52:c6:ad:3d:49:22:a6:91:80:8d:e2:17:12: e1:78:75:8a:e8:10:9a:35:e6:41:47:ad:33:f9:59: 24:2b:57:2e:d9:24:02:32:a5:80:a8:b7:01:aa:5a: 1b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DF:75:E7:77:35:DE:36:1C:05:66:89:97:9B:18:CA:AA:43:0E:81 X509v3 Authority Key Identifier: keyid:09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:5f:d5:f7:8c:af:d3:73:bc:75:9a:7b:ea:ca:e5:e7:41:8b: 17:9f:58:c0:f0:13:05:fb:6e:2a:69:7a:e5:0b:cf:5b:9d:f7: b9:2a:eb:6a:b4:78:0a:14:38:80:8c:57:40:50:a5:99:be:c3: dc:2c:d4:71:f7:05:86:98:b8:3f:40:80:67:7c:c8:c6:88:26: a7:17:dc:67:7f:93:ec:5d:81:29:4c:0d:c5:14:40:3f:5e:f8: b5:c0:c6:7e:41:40:8a:ee:b7:15:12:b6:0f:49:f7:f1:ae:6b: b0:a4:8e:91:92:04:3b:d0:6f:6d:53:e6:af:0a:9e:83:69:18: c7:37:43:c7:12:f5:2f:bf:44:0a:3a:73:62:71:8e:ee:fa:c4: e2:12:57:e3:9a:81:9f:ae:1d:48:23:6e:06:ca:23:9f:f7:c6: 10:87:98:64:62:4d:77:24:41:84:b7:a3:17:4c:eb:14:96:be: d1:05:8f:3b:5f:c7:b4:76:3d:09:47:c4:c6:eb:da:09:b7:26: c6:94:67:4f:59:b2:40:5b:da:bc:9b:bd:1b:29:72:a5:d7:46: be:27:6a:9c:aa:44:f8:47:8b:ab:e3:5b:7a:33:51:ed:eb:95: 20:ce:cf:ab:4c:d4:93:5e:98:c7:72:70:14:82:40:bc:a6:5b: 31:62:b1:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3QTExMTAvBgNVBAUTKDA5RUIyNDg5M0ZGODM4QUFEQzg3MkZGQzM3NTg0MjdG NkFFQzIxNzIwHhcNMjUwNTMwMjMzOTA2WhcNMjUwNjA2MjMzOTA2WjAYMRYwFAYD VQQDEw02ODNhNDE5YS04ZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnNgaYiNdbX/LTvpko28W6j1XAATtBcbLS3GOLzfjz0ZqIe0QEwu6ImeEzTz OPkNAgB2XHLo1CvEPWLiJD3rNXl9nnI3YcJEJupXNteeUYXGLA6OQfPS8ZhkQwPw fYn+7DzA8/P9WTcJZgmeNcY2lbB2rSqrA4+8DWL8XxUuc1rMDY95t9p40bvJVy2Y tO/Fwg7ynCGhn8sFNAop5P8ykEalL83+UGJlpDMi3GOq2EA7yrIHX9C0A4ZMITGU kisSSIi4J/Q0JhshaqMUMzdJ78E1XVLGrT1JIqaRgI3iFxLheHWK6BCaNeZBR60z +VkkK1cu2SQCMqWAqLcBqlobCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7fded3 Nd42HAVmiZebGMqqQw6BMB8GA1UdIwQYMBaAFAnrJIk/+Diq3Icv/DdYQn9q7CFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0 MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9LcmNoeV84TjFoQ2YycnNJ WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nlc2tpVF80T0tyY2h5XzhOMWhDZjJyc0lYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9L cmNoeV84TjFoQ2YycnNJWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjX9X3jK/Tc7x1mnvqyuXnQYsXn1jA8BMF+24qaXrlC89bnfe5Kutq tHgKFDiAjFdAUKWZvsPcLNRx9wWGmLg/QIBnfMjGiCanF9xnf5PsXYEpTA3FFEA/ Xvi1wMZ+QUCK7rcVErYPSffxrmuwpI6RkgQ70G9tU+avCp6DaRjHN0PHEvUvv0QK OnNicY7u+sTiElfjmoGfrh1II24GyiOf98YQh5hkYk13JEGEt6MXTOsUlr7RBY87 X8e0dj0JR8TG69oJtybGlGdPWbJAW9q8m70bKXKl10a+J2qcqkT4R4ur41t6M1Ht 65Ugzs+rTNSTXpjHcnAUgkC8plsxYrFQ -----END CERTIFICATE-----Generated at Sat May 31 17:03:30 2025 by rpki-client