$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft File: CeskiT_4OKrchy_8N1hCf2rsIXI.mft (raw, json) Hash identifier: KdsHLSAFlP8vX4f6qk1FyUg43t9ObRO+54AfS9Jj4Wk= Subject key identifier: A6:ED:65:3A:6E:CF:4C:05:A3:FB:CA:F0:42:B3:AF:FA:C7:4C:93:84 Authority key identifier: 09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 Certificate issuer: /CN=A918F7A1/serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Certificate serial: 0617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft Manifest number: 08A5 Signing time: Wed 22 Jul 2026 23:32:23 +0000 Manifest this update: Wed 22 Jul 2026 23:32:22 +0000 Manifest next update: Wed 29 Jul 2026 23:32:22 +0000 Files and hashes: 1: CeskiT_4OKrchy_8N1hCf2rsIXI.crl (hash: rBYpTsvwX2IjtlZ71HZVv9otf8sih43cRR9aq+yD/60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7A1, serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Validity Not Before: Jul 22 23:32:22 2026 GMT Not After : Jul 29 23:32:22 2026 GMT Subject: CN=6a615307-71d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:df:6a:e0:92:78:8f:7f:e4:3d:6d:7d:67:76: 1b:29:61:f0:41:4c:49:a5:1c:b8:24:70:e2:79:28: c7:db:9b:1f:95:10:7e:9d:76:5a:18:b0:18:7e:f1: 9a:7a:fb:72:77:8f:36:ff:4d:fc:e0:c5:1b:ec:ce: fa:07:60:98:1e:be:fc:af:f9:48:fe:eb:13:c5:fb: 5f:f9:70:e2:39:5d:26:d3:16:a0:8a:ff:8c:76:08: d9:ec:43:b4:ed:bf:7f:8c:73:12:7a:12:6f:8c:de: 8c:98:60:8a:d3:08:32:97:38:27:b5:48:5a:8c:3a: 46:41:d6:9d:2b:82:a0:2c:69:ea:ec:85:f0:01:de: 4d:81:dc:c0:30:3e:89:0f:8a:2f:14:3b:4a:5a:60: 34:c7:6d:67:a4:87:81:73:1d:21:b0:e5:a8:14:83: e8:03:59:12:73:4c:58:56:78:36:65:9b:3c:2f:65: f2:8f:e0:b7:39:16:0b:b3:84:a1:1a:6d:73:48:99: 0d:f1:c7:c7:bf:40:bd:53:84:cf:50:21:56:08:fa: 3f:75:c4:d1:f6:08:5d:80:c5:63:0f:9b:22:f1:2e: 7a:17:7d:e9:0c:13:c3:21:dd:22:04:8f:fd:8c:c2: 28:da:3b:ac:d3:fc:13:51:ef:08:ea:7a:3d:6d:f8: c6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:ED:65:3A:6E:CF:4C:05:A3:FB:CA:F0:42:B3:AF:FA:C7:4C:93:84 X509v3 Authority Key Identifier: keyid:09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:40:17:ce:98:b4:eb:d5:b0:b0:38:35:32:d6:0a:c6:83:2d: a4:88:cf:45:01:92:a0:bd:ef:57:b3:d2:1c:d4:06:74:44:b5: df:e7:db:6d:53:e8:70:05:56:a2:2d:a0:58:0c:63:44:47:6a: de:e4:91:ad:c1:78:4d:fe:25:88:ff:8b:49:b0:25:dc:83:1d: df:56:97:9b:85:d1:b8:83:87:b7:78:7f:82:ba:cd:7d:95:88: 8a:c9:9f:a5:35:d4:a6:e9:62:d7:2d:f0:8b:6b:16:ab:a1:47: 84:34:e1:51:36:f5:2f:cf:98:13:79:1e:bc:8c:1b:45:6c:79: 3b:d7:8d:40:37:e8:86:c6:9a:b6:16:ba:a2:1f:f6:8d:cd:06: 73:cf:44:6a:0e:bc:57:bd:36:94:14:de:b8:31:2d:59:4d:5e: 20:c7:92:43:07:e6:b0:8c:73:a7:c1:d0:5e:2a:ab:07:d1:33: 7f:5c:cc:93:a8:29:12:7d:19:e9:5c:6f:5c:cc:1d:2e:dc:c7: 75:a5:fa:20:30:e6:cf:a5:34:f9:7b:7c:ca:66:bf:d7:fa:fb: 05:7f:c0:b2:b0:00:3c:f6:dc:67:72:f9:4c:22:bc:59:0a:69: 7d:78:20:5b:7f:b4:a9:53:99:5b:43:67:0f:54:19:c5:10:86: 75:13:3a:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3QTExMTAvBgNVBAUTKDA5RUIyNDg5M0ZGODM4QUFEQzg3MkZGQzM3NTg0MjdG NkFFQzIxNzIwHhcNMjYwNzIyMjMzMjIyWhcNMjYwNzI5MjMzMjIyWjAYMRYwFAYD VQQDEw02YTYxNTMwNy03MWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2N9q4JJ4j3/kPW19Z3YbKWHwQUxJpRy4JHDieSjH25sflRB+nXZaGLAYfvGa evtyd482/0384MUb7M76B2CYHr78r/lI/usTxftf+XDiOV0m0xagiv+MdgjZ7EO0 7b9/jHMSehJvjN6MmGCK0wgylzgntUhajDpGQdadK4KgLGnq7IXwAd5NgdzAMD6J D4ovFDtKWmA0x21npIeBcx0hsOWoFIPoA1kSc0xYVng2ZZs8L2Xyj+C3ORYLs4Sh Gm1zSJkN8cfHv0C9U4TPUCFWCPo/dcTR9ghdgMVjD5si8S56F33pDBPDId0iBI/9 jMIo2jus0/wTUe8I6no9bfjGdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKbtZTpu z0wFo/vK8EKzr/rHTJOEMB8GA1UdIwQYMBaAFAnrJIk/+Diq3Icv/DdYQn9q7CFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0 MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9LcmNoeV84TjFoQ2YycnNJ WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nlc2tpVF80T0tyY2h5XzhOMWhDZjJyc0lYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9L cmNoeV84TjFoQ2YycnNJWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQUAXzpi069WwsDg1MtYKxoMtpIjPRQGSoL3vV7PSHNQGdES13+fbbVPocAVW oi2gWAxjREdq3uSRrcF4Tf4liP+LSbAl3IMd31aXm4XRuIOHt3h/grrNfZWIismf pTXUpuli1y3wi2sWq6FHhDThUTb1L8+YE3kevIwbRWx5O9eNQDfohsaatha6oh/2 jc0Gc89Eag68V702lBTeuDEtWU1eIMeSQwfmsIxzp8HQXiqrB9Ezf1zMk6gpEn0Z 6VxvXMwdLtzHdaX6IDDmz6U0+Xt8yma/1/r7BX/AsrAAPPbcZ3L5TCK8WQppfXgg W3+0qVOZW0NnD1QZxRCGdRM6ag== -----END CERTIFICATE-----Generated at Fri Jul 24 06:23:31 2026 by rpki-client