
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier: eK1M89H9PZn2BWWBIhG9JWcR48KfE0gouzm92cLaYdg=
Subject key identifier: CA:E5:F8:E0:81:02:0E:91:4B:36:44:63:67:CF:4D:A2:04:BA:F1:B7
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number: 0245
Signing time: Mon 11 May 2026 02:30:33 +0000
Manifest this update: Mon 11 May 2026 02:30:32 +0000
Manifest next update: Mon 18 May 2026 02:30:32 +0000
Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: qrB1nCJQtMFoXpSGInnjEEY1+2MclEoP+a53u2OydpM=)
2: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: z6jab3pPMKE60NZxiOVLMs9nS5ZOotEr05TjZQstmbM=)
3: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: YRzH4mC2bDKEncXqO5K3xqWUSqE5Exwmq1o3B01/Eak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: May 11 02:30:32 2026 GMT
Not After : May 18 02:30:32 2026 GMT
Subject: CN=6a013f48-c56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:e8:2c:2a:af:02:26:e8:69:59:44:80:19:
ea:6f:ae:a7:fb:c7:39:43:7d:04:96:5b:e3:81:e0:
a5:f2:c6:60:05:01:32:1b:a2:3e:9b:8c:e6:b7:cc:
d8:e7:b2:5a:96:c4:77:81:bb:d5:c2:93:c4:f0:05:
1a:6f:51:8b:2d:6f:56:1a:15:1e:a4:3b:bb:a8:d2:
25:e5:b2:47:ce:dd:d0:76:d2:2b:74:71:ea:42:81:
c6:88:03:93:f9:41:fe:6d:1b:16:16:ae:03:95:29:
88:70:1b:94:54:c8:ee:36:1c:c4:4d:53:39:e4:46:
8e:80:6f:98:ca:e8:f0:a5:42:0f:0d:70:38:e6:c0:
44:20:6c:46:a5:52:8c:31:d1:4f:5f:9d:35:5f:2c:
50:1b:ea:7d:3d:6b:46:db:e6:d0:7e:c4:70:6e:91:
2c:ec:75:ce:57:80:ca:d1:1b:c8:02:b5:0d:39:7c:
6a:6f:08:a6:af:25:67:2a:48:77:7d:0d:b7:29:ad:
ba:fe:29:7b:81:53:12:6e:3e:a4:b9:df:a9:26:92:
e1:bf:c8:9c:c6:f4:32:1e:da:ad:1f:14:c2:ec:0e:
5d:da:b8:9b:58:5e:42:10:35:b1:71:fb:6e:92:5c:
7f:30:80:8b:42:15:82:a8:59:fa:80:29:0d:74:0c:
3c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E5:F8:E0:81:02:0E:91:4B:36:44:63:67:CF:4D:A2:04:BA:F1:B7
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:57:3a:89:e9:9d:2d:a4:31:aa:06:9d:fc:c8:41:d3:22:33:
b2:b1:13:89:31:33:17:89:e7:bb:b1:e6:d5:56:d1:ee:01:69:
dd:13:22:e5:65:cf:a6:18:ad:66:9c:18:e4:fb:ea:88:6d:4f:
04:6a:12:dd:a6:bd:b0:c9:a1:a7:2b:06:61:6e:2e:3a:a6:91:
4f:d2:be:36:97:9a:17:90:9d:af:19:d6:53:50:64:0e:eb:92:
cc:56:4c:06:77:dd:74:ef:04:d5:88:c2:14:43:b1:ff:45:6d:
6f:26:7b:2c:fe:a0:9f:71:81:bd:85:b6:ad:e7:64:92:1c:e9:
de:7e:85:c7:87:23:51:ec:4e:27:22:12:73:1b:cf:e5:5c:1a:
01:c2:ca:21:1d:d3:4f:61:af:36:97:ac:a9:29:24:ae:cd:37:
05:f2:b6:47:26:fd:8a:04:36:3b:ba:fb:fe:13:d9:78:fc:d9:
4a:3a:9e:0c:fa:61:67:12:0f:13:c1:f6:ef:03:d3:d5:a3:64:
dc:e6:b6:4e:4e:0b:77:5d:8f:d5:77:32:5e:d0:df:be:6a:f1:
54:de:94:a6:de:5a:33:16:e2:23:91:cc:e2:7b:b1:98:d7:f3:
be:52:e4:f4:1b:f6:65:a9:10:87:09:da:35:b0:33:f6:f7:d5:
59:84:b1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:13:04 2026 by rpki-client