$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft File: CeskiT_4OKrchy_8N1hCf2rsIXI.mft (raw, json) Hash identifier: 7ZPVfLmK/QPXzthQsSYtsseaHcG4Bcq0g54f9U4tO1k= Subject key identifier: EA:DC:67:EB:64:14:ED:AE:68:7A:40:17:2E:F4:EB:11:43:F7:E3:EE Authority key identifier: 09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 Certificate issuer: /CN=A918F7A1/serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Certificate serial: 0638 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft Manifest number: 08E8 Signing time: Tue 22 Sep 2026 22:23:42 +0000 Manifest this update: Tue 22 Sep 2026 22:23:42 +0000 Manifest next update: Tue 29 Sep 2026 22:23:42 +0000 Files and hashes: 1: CeskiT_4OKrchy_8N1hCf2rsIXI.crl (hash: tQxdJoKxsFcBiVhmjzaNI21jf52vs3Kf26qwZ7qYZOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1592 (0x638) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7A1, serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Validity Not Before: Sep 22 22:23:42 2026 GMT Not After : Sep 29 22:23:42 2026 GMT Subject: CN=6ab2ffee-3ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:1a:eb:20:f5:f9:cd:34:46:d2:0a:52:a6: 16:79:e7:26:8c:79:b8:54:c8:5d:41:e4:26:de:73: 15:11:fc:7f:bc:39:c2:0f:62:b6:f0:6d:1f:84:7a: 50:48:d9:77:29:fd:09:37:a1:ed:53:30:a8:66:60: 83:bd:86:4b:8d:16:1c:5a:48:ac:83:7d:24:19:21: a8:91:30:f4:94:c1:d6:8f:c3:46:5f:67:ad:f1:41: ff:8a:d2:65:cc:7b:44:4f:7e:c9:83:bf:63:5f:d7: 26:8c:91:07:54:81:73:e9:82:05:e3:2a:59:49:19: fe:49:27:a4:3a:ad:a3:79:cf:01:1c:85:35:dd:ea: 0d:1a:0d:df:bc:a9:74:59:dc:7e:c3:35:1b:73:47: a2:d5:f7:4e:5b:53:50:64:21:bf:82:d0:e5:b5:4a: 02:10:96:5f:eb:80:79:bb:15:6a:3d:6f:68:f5:7b: 80:6b:e0:d6:4e:72:f9:b1:e7:cd:7e:65:1d:f7:bf: e5:af:bf:1d:03:6b:6b:4a:2c:f0:31:be:3b:28:07: 9a:f4:fd:de:06:76:01:65:1c:1c:60:ae:5f:0d:52: 0c:7c:63:59:5f:24:8f:3c:b2:46:db:71:44:ec:1c: 4a:c6:09:5b:21:31:26:16:28:17:74:cf:e7:b5:fa: c4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DC:67:EB:64:14:ED:AE:68:7A:40:17:2E:F4:EB:11:43:F7:E3:EE X509v3 Authority Key Identifier: keyid:09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:e9:46:80:e6:26:e9:7e:83:fd:c7:29:64:9d:02:79:df:11: 76:89:bd:b1:b1:49:11:89:8f:31:44:d0:fb:79:84:f0:f0:e5: 1a:2e:59:7a:35:b5:d9:09:a1:72:25:a8:a4:ad:f5:4f:29:9f: a8:19:71:a2:3b:43:c4:42:26:7f:81:41:52:d7:13:07:5f:e5: 5f:6a:fd:66:f0:35:72:f1:04:0d:10:f5:d4:de:bb:37:4a:28: 89:6e:88:2c:f2:83:98:d0:68:d9:aa:e1:51:87:cd:c7:c5:bc: 09:25:a8:f7:20:49:ab:26:12:24:d3:7a:16:ab:e5:39:43:50: 1e:13:63:e2:63:79:8b:57:9a:da:15:bb:5b:b5:88:e3:8a:d5: 1e:04:10:4d:4c:cd:a3:5b:31:e5:6a:6e:b2:0d:e3:d4:4f:18: db:25:5c:bf:ff:4d:ba:54:58:c7:3e:99:d5:f6:8f:8c:fa:cc: fb:e5:66:e6:04:58:07:ab:66:00:81:f6:5f:8b:1c:3c:27:b3: 5a:45:8e:81:0e:46:98:08:cf:f0:5d:ad:17:36:2d:da:c5:85: 7b:eb:77:38:5c:5a:5c:54:07:5c:e9:d2:61:c5:e1:da:08:98: 1c:5e:5b:9a:e5:cd:00:84:43:9e:4f:4c:47:3e:68:b3:61:2b: 24:61:6d:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3QTExMTAvBgNVBAUTKDA5RUIyNDg5M0ZGODM4QUFEQzg3MkZGQzM3NTg0MjdG NkFFQzIxNzIwHhcNMjYwOTIyMjIyMzQyWhcNMjYwOTI5MjIyMzQyWjAYMRYwFAYD VQQDEw02YWIyZmZlZS0zZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFIa6yD1+c00RtIKUqYWeecmjHm4VMhdQeQm3nMVEfx/vDnCD2K28G0fhHpQ SNl3Kf0JN6HtUzCoZmCDvYZLjRYcWkisg30kGSGokTD0lMHWj8NGX2et8UH/itJl zHtET37Jg79jX9cmjJEHVIFz6YIF4ypZSRn+SSekOq2jec8BHIU13eoNGg3fvKl0 Wdx+wzUbc0ei1fdOW1NQZCG/gtDltUoCEJZf64B5uxVqPW9o9XuAa+DWTnL5sefN fmUd97/lr78dA2trSizwMb47KAea9P3eBnYBZRwcYK5fDVIMfGNZXySPPLJG23FE 7BxKxglbITEmFigXdM/ntfrEjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOrcZ+tk FO2uaHpAFy706xFD9+PuMB8GA1UdIwQYMBaAFAnrJIk/+Diq3Icv/DdYQn9q7CFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0 MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9LcmNoeV84TjFoQ2YycnNJ WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nlc2tpVF80T0tyY2h5XzhOMWhDZjJyc0lYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9L cmNoeV84TjFoQ2YycnNJWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABOlGgOYm6X6D/ccpZJ0Ced8Rdom9sbFJEYmPMUTQ+3mE8PDlGi5ZejW12Qmh ciWopK31TymfqBlxojtDxEImf4FBUtcTB1/lX2r9ZvA1cvEEDRD11N67N0ooiW6I LPKDmNBo2arhUYfNx8W8CSWo9yBJqyYSJNN6FqvlOUNQHhNj4mN5i1ea2hW7W7WI 44rVHgQQTUzNo1sx5Wpusg3j1E8Y2yVcv/9NulRYxz6Z1faPjPrM++Vm5gRYB6tm AIH2X4scPCezWkWOgQ5GmAjP8F2tFzYt2sWFe+t3OFxaXFQHXOnSYcXh2giYHF5b muXNAIRDnk9MRz5os2ErJGFtJQ== -----END CERTIFICATE-----Generated at Wed Sep 23 06:41:17 2026 by rpki-client