$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft File: CeskiT_4OKrchy_8N1hCf2rsIXI.mft (raw, json) Hash identifier: fdayPzIMYkwkST8KAC51Gd8a4eWJ90heDGoQ3PL2sX4= Subject key identifier: FE:FE:7E:E7:EE:55:29:7E:2B:B2:E7:CA:0A:81:4A:59:AA:33:98:A2 Authority key identifier: 09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 Certificate issuer: /CN=A918F7A1/serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Certificate serial: 0591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft Manifest number: 0798 Signing time: Tue 04 Nov 2025 23:16:47 +0000 Manifest this update: Tue 04 Nov 2025 23:16:46 +0000 Manifest next update: Tue 11 Nov 2025 23:16:46 +0000 Files and hashes: 1: CeskiT_4OKrchy_8N1hCf2rsIXI.crl (hash: pkvDssxHTaZ1e47iADxXFwFSgGEKAsQ1VhEJLIAxACI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1425 (0x591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7A1, serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Validity Not Before: Nov 4 23:16:46 2025 GMT Not After : Nov 11 23:16:46 2025 GMT Subject: CN=690a895e-e3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ef:f1:b3:2d:6a:3b:54:ae:b0:ed:fb:a2:73: 70:b9:12:82:4e:51:fe:63:ea:2e:b8:7d:d4:37:21: 52:38:a7:e3:12:e8:c8:c2:13:ac:b3:36:3d:23:02: ca:15:9b:5c:da:09:1a:68:08:20:a8:5a:4c:94:a9: dc:81:5f:15:87:9a:3d:0f:b8:13:78:d2:a9:be:61: 94:75:e4:92:4a:b7:14:78:ea:0d:3f:17:36:89:b6: d5:a5:30:97:1f:4d:9f:fd:6d:f1:bc:ab:f2:ff:66: 2c:58:68:5f:80:2e:a6:c1:ae:73:62:91:b7:2b:eb: e4:16:7a:b0:38:9a:d9:a9:21:18:70:31:91:47:fc: e1:cd:7c:42:e2:7e:9e:2a:3c:c0:c9:1d:db:88:e6: 8d:3f:d6:69:f8:76:de:b7:74:7e:0b:5b:40:b1:b6: ca:22:48:15:0b:d8:16:72:0b:c3:38:9c:71:05:19: 35:57:40:d6:bf:62:f9:db:16:ee:8b:a3:16:67:83: 67:eb:2d:d7:31:07:d9:a8:4a:b0:d3:f8:67:6c:59: e6:94:5d:17:46:6f:41:9b:05:93:a6:90:23:a4:0c: 8a:57:a3:70:a3:bc:78:c6:e7:dd:2f:39:16:b9:34: 3f:7e:3a:82:ba:c7:fe:e8:89:2c:17:ce:f3:26:87: 98:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FE:7E:E7:EE:55:29:7E:2B:B2:E7:CA:0A:81:4A:59:AA:33:98:A2 X509v3 Authority Key Identifier: keyid:09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:39:c3:01:f1:32:eb:02:61:e8:e6:f6:bc:6d:ec:d6:ac:b9: 82:b3:0a:81:63:e6:02:88:8b:b2:81:4c:16:77:4d:64:c0:31: c5:33:bd:1d:7e:6e:88:fa:b8:b2:ea:4e:a6:d7:41:39:b4:d6: ee:fb:60:85:31:2f:52:34:53:1e:9d:52:6c:22:52:80:62:e1: cb:bf:52:61:88:d3:f5:62:8d:95:df:f5:3e:96:33:35:2a:fe: ae:4b:dd:1e:3f:e1:6a:0d:75:c4:ce:f8:7a:a2:95:95:1b:2b: 9f:5a:de:19:3a:08:2f:7b:4c:dc:82:e7:eb:5b:57:65:86:04: f7:1d:45:69:6b:94:ce:c0:21:e7:33:d3:cc:c4:25:72:48:8a: 48:0a:34:cc:3c:21:c1:43:4a:9f:27:5a:85:05:a6:b5:de:29: a2:c2:a5:99:86:1a:cf:a5:ab:97:f0:ef:31:9c:6a:34:1c:1d: eb:09:4b:56:5b:ff:3b:16:a5:18:79:ef:0c:a3:68:f0:d5:ae: 6c:e9:26:43:61:71:ea:67:e3:89:e6:f1:c8:13:5f:2a:98:b6: 8d:ba:9d:cc:8b:c0:f8:29:3c:15:ba:56:d2:5c:22:3b:51:c8: 24:c7:e3:7d:d6:e2:ff:27:2d:31:df:45:37:10:cf:9d:01:31: 57:55:1c:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3QTExMTAvBgNVBAUTKDA5RUIyNDg5M0ZGODM4QUFEQzg3MkZGQzM3NTg0MjdG NkFFQzIxNzIwHhcNMjUxMTA0MjMxNjQ2WhcNMjUxMTExMjMxNjQ2WjAYMRYwFAYD VQQDEw02OTBhODk1ZS1lM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+/xsy1qO1SusO37onNwuRKCTlH+Y+ouuH3UNyFSOKfjEujIwhOsszY9IwLK FZtc2gkaaAggqFpMlKncgV8Vh5o9D7gTeNKpvmGUdeSSSrcUeOoNPxc2ibbVpTCX H02f/W3xvKvy/2YsWGhfgC6mwa5zYpG3K+vkFnqwOJrZqSEYcDGRR/zhzXxC4n6e KjzAyR3biOaNP9Zp+Hbet3R+C1tAsbbKIkgVC9gWcgvDOJxxBRk1V0DWv2L52xbu i6MWZ4Nn6y3XMQfZqEqw0/hnbFnmlF0XRm9BmwWTppAjpAyKV6Nwo7x4xufdLzkW uTQ/fjqCusf+6IksF87zJoeYeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7+fufu VSl+K7LnygqBSlmqM5iiMB8GA1UdIwQYMBaAFAnrJIk/+Diq3Icv/DdYQn9q7CFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0 MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9LcmNoeV84TjFoQ2YycnNJ WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nlc2tpVF80T0tyY2h5XzhOMWhDZjJyc0lYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9L cmNoeV84TjFoQ2YycnNJWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmOcMB8TLrAmHo5va8bezWrLmCswqBY+YCiIuygUwWd01kwDHFM70d fm6I+riy6k6m10E5tNbu+2CFMS9SNFMenVJsIlKAYuHLv1JhiNP1Yo2V3/U+ljM1 Kv6uS90eP+FqDXXEzvh6opWVGyufWt4ZOggve0zcgufrW1dlhgT3HUVpa5TOwCHn M9PMxCVySIpICjTMPCHBQ0qfJ1qFBaa13imiwqWZhhrPpauX8O8xnGo0HB3rCUtW W/87FqUYee8Mo2jw1a5s6SZDYXHqZ+OJ5vHIE18qmLaNup3Mi8D4KTwVulbSXCI7 Ucgkx+N91uL/Jy0x30U3EM+dATFXVRzF -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:07 2025 by rpki-client