$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft File: CeskiT_4OKrchy_8N1hCf2rsIXI.mft (raw, json) Hash identifier: 39RSlwPPzK7e/ZmdH/hVGLKQXttZ4PJbBXjx01Wqhxg= Subject key identifier: 9A:92:0C:49:93:C3:D1:8B:79:74:A5:B6:B9:20:62:61:E6:AF:18:33 Authority key identifier: 09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 Certificate issuer: /CN=A918F7A1/serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Certificate serial: 0579 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft Manifest number: 0768 Signing time: Tue 16 Sep 2025 23:38:38 +0000 Manifest this update: Tue 16 Sep 2025 23:38:38 +0000 Manifest next update: Tue 23 Sep 2025 23:38:38 +0000 Files and hashes: 1: CeskiT_4OKrchy_8N1hCf2rsIXI.crl (hash: t053D0wVxfm6wwYd9bdnVxK+PFDiezyYxM9RCq+35xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 23:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1401 (0x579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7A1, serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Validity Not Before: Sep 16 23:38:38 2025 GMT Not After : Sep 23 23:38:38 2025 GMT Subject: CN=68c9f4fe-8b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:bf:5a:ef:e9:b1:52:54:95:68:4f:66:f2: dc:12:df:6a:db:83:bf:72:f6:a7:aa:0c:14:29:8d: 85:17:44:eb:16:f1:17:71:95:91:a3:d4:0d:4b:e7: 76:d4:48:92:6c:38:9a:c9:8c:a1:e5:87:ca:f5:e9: 07:45:2a:ee:23:d1:37:e4:2e:2b:63:24:8f:20:53: 08:88:f9:99:59:4d:6c:21:f4:9d:af:46:13:0a:18: 61:8d:06:dc:bc:b2:a2:6d:ef:73:58:66:64:20:2c: 4b:6d:94:c6:23:e6:b2:96:a1:6a:96:0b:16:8a:35: e3:a1:e7:79:a7:72:88:5a:15:2a:5b:86:73:ea:5a: aa:c5:48:6d:94:ab:fa:78:eb:f1:fc:c5:66:93:a0: f6:93:8d:aa:de:7c:44:20:84:c5:85:59:84:26:a5: 53:26:b2:de:36:da:2b:7e:6a:7e:50:b5:6b:14:91: df:8b:55:b8:af:35:bc:d3:80:cc:4c:cd:e6:fb:ac: af:1a:a1:ca:2c:18:57:36:7a:1b:aa:73:f8:35:9b: 3f:67:f0:d8:80:4d:a5:92:68:81:90:f4:83:59:ca: 0f:2e:b7:dd:0b:4c:51:cf:80:d3:ef:67:66:24:82: 37:9b:08:7a:76:1d:ab:89:bb:f0:8a:f9:b2:8d:ba: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:92:0C:49:93:C3:D1:8B:79:74:A5:B6:B9:20:62:61:E6:AF:18:33 X509v3 Authority Key Identifier: keyid:09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d0:e1:bd:91:b6:6b:68:24:7e:69:d1:d5:0e:6f:7a:eb:1a: 1b:f5:1c:c2:c6:b5:4a:65:da:b7:89:05:bd:1a:4c:9e:93:50: 53:77:57:b5:3f:3d:c2:45:9e:b6:4d:a4:4f:46:f4:b4:63:73: b2:df:aa:aa:1d:59:45:81:da:6b:eb:65:7c:d2:a3:de:c9:ab: 45:19:27:0a:10:5a:d5:94:c5:ae:a6:98:bc:5e:15:fa:4c:5a: c8:96:19:f6:87:03:9d:6f:fe:41:ac:8f:cb:fa:88:2e:2a:64: eb:02:7f:89:9f:a4:39:15:38:ac:cd:82:42:b3:05:e0:74:72: 90:38:38:92:0b:96:0b:2c:2e:18:dc:a4:75:74:b0:bc:29:3f: 63:03:74:85:02:3f:fc:0b:8c:54:0a:2a:0b:94:84:c7:1e:d0: 9f:6f:84:5e:86:ee:96:56:61:7d:b6:67:1d:dd:57:55:ac:71: 8e:ae:a8:63:a9:07:8e:9f:fc:1f:ed:0d:2b:40:77:fe:e5:a5: 7c:6c:0a:83:11:60:af:2f:48:c8:f1:7c:66:1d:19:e2:3d:99: 6a:d1:a2:30:e9:4e:b4:17:61:87:9c:8e:de:93:5f:3e:8c:8e: 97:44:b3:87:27:c3:89:60:3d:d8:2e:26:48:6c:5b:19:d8:8a: 16:4e:c5:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3QTExMTAvBgNVBAUTKDA5RUIyNDg5M0ZGODM4QUFEQzg3MkZGQzM3NTg0MjdG NkFFQzIxNzIwHhcNMjUwOTE2MjMzODM4WhcNMjUwOTIzMjMzODM4WjAYMRYwFAYD VQQDEw02OGM5ZjRmZS04YjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzm/Wu/psVJUlWhPZvLcEt9q24O/cvanqgwUKY2FF0TrFvEXcZWRo9QNS+d2 1EiSbDiayYyh5YfK9ekHRSruI9E35C4rYySPIFMIiPmZWU1sIfSdr0YTChhhjQbc vLKibe9zWGZkICxLbZTGI+aylqFqlgsWijXjoed5p3KIWhUqW4Zz6lqqxUhtlKv6 eOvx/MVmk6D2k42q3nxEIITFhVmEJqVTJrLeNtorfmp+ULVrFJHfi1W4rzW804DM TM3m+6yvGqHKLBhXNnobqnP4NZs/Z/DYgE2lkmiBkPSDWcoPLrfdC0xRz4DT72dm JII3mwh6dh2ribvwivmyjboJYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqSDEmT w9GLeXSltrkgYmHmrxgzMB8GA1UdIwQYMBaAFAnrJIk/+Diq3Icv/DdYQn9q7CFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0 MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9LcmNoeV84TjFoQ2YycnNJ WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nlc2tpVF80T0tyY2h5XzhOMWhDZjJyc0lYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9L cmNoeV84TjFoQ2YycnNJWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO0OG9kbZraCR+adHVDm966xob9RzCxrVKZdq3iQW9Gkyek1BTd1e1 Pz3CRZ62TaRPRvS0Y3Oy36qqHVlFgdpr62V80qPeyatFGScKEFrVlMWuppi8XhX6 TFrIlhn2hwOdb/5BrI/L+oguKmTrAn+Jn6Q5FTiszYJCswXgdHKQODiSC5YLLC4Y 3KR1dLC8KT9jA3SFAj/8C4xUCioLlITHHtCfb4Rehu6WVmF9tmcd3VdVrHGOrqhj qQeOn/wf7Q0rQHf+5aV8bAqDEWCvL0jI8XxmHRniPZlq0aIw6U60F2GHnI7ek18+ jI6XRLOHJ8OJYD3YLiZIbFsZ2IoWTsWo -----END CERTIFICATE-----Generated at Thu Sep 18 23:28:45 2025 by rpki-client