$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json) Hash identifier: TsJI9UZ5YbnXbMzuTPjmPTmsXJRp5BRAiCpNv7TeCj0= Subject key identifier: AA:01:33:43:03:B8:B0:16:18:0D:28:F6:75:77:2C:2B:E8:2C:63:53 Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9 Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft Manifest number: 01A2 Signing time: Tue 01 Jul 2025 03:45:39 +0000 Manifest this update: Tue 01 Jul 2025 03:45:39 +0000 Manifest next update: Tue 08 Jul 2025 03:45:39 +0000 Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: jn+DvRAm3omIKlN7cX0X7OxU/m05P+UTcln6Ac3DlqA=) 2: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: Ds1Oggb1CXmheiOx4YZNVxU2i1qg8eEHn8KdU83omHg=) 3: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: NvHtd8ujE1yELsuYXTHpNbSZA6sMXQEq9scs3taiBxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9 Validity Not Before: Jul 1 03:45:39 2025 GMT Not After : Jul 8 03:45:39 2025 GMT Subject: CN=686359e3-0390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:57:2c:39:61:54:21:10:6f:00:93:8b:3b:08: e6:7a:b6:f5:29:b9:2f:97:5f:62:b8:0f:ec:57:c7: 8b:dd:62:e4:bf:19:28:d5:74:09:e4:14:80:be:30: be:a3:f7:ed:1b:b3:59:50:94:92:c5:82:a1:5f:ae: 8f:e1:0b:27:6e:0c:ff:cd:4c:d6:19:c9:a4:8d:74: ae:a3:43:80:3b:52:e8:74:38:4f:f4:fd:5d:9b:73: 01:0b:0f:4d:ee:3c:c6:0d:19:3d:02:6b:7b:db:dc: 53:10:5c:9b:16:3a:61:cd:30:a8:fc:eb:8a:7b:3a: 5d:6f:b2:ee:17:88:aa:68:3f:5d:10:7c:c3:a0:2c: a5:d6:1a:50:15:8e:8f:44:73:f3:14:97:c5:a0:ed: e2:2d:43:a0:05:02:28:90:2a:aa:69:96:80:d5:08: 1d:1a:de:aa:b4:92:1e:bf:0e:0b:41:1c:24:78:dc: 66:36:f7:23:8e:e2:94:ba:fd:df:fa:14:94:7c:7f: 74:ed:60:ee:5d:fa:0d:e2:87:42:57:d1:cc:8b:bb: e3:ea:33:ff:1a:18:f1:8d:24:f1:59:29:fa:90:16: c9:86:3c:fb:c2:14:36:e5:a3:d1:ff:b0:5d:f3:56: 27:ac:83:a1:92:39:c6:9f:93:77:e0:13:f7:4a:60: f4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:01:33:43:03:B8:B0:16:18:0D:28:F6:75:77:2C:2B:E8:2C:63:53 X509v3 Authority Key Identifier: keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:05:48:c7:77:c3:97:fd:e1:dc:e3:3d:b5:f3:b7:d6:d6:7f: 1e:a5:ee:9f:ca:bf:b2:a5:78:08:0d:e0:07:05:5b:75:c8:1a: 03:42:54:33:67:b5:05:08:ad:0e:42:1c:ad:3d:c1:26:88:d7: b7:3e:b4:9c:07:cf:db:ce:bd:29:cf:31:0b:29:6b:09:f1:d1: 86:e8:0d:f3:08:2a:43:d1:45:d5:4a:bc:3f:26:b9:8f:61:99: da:91:1b:36:07:35:33:df:8b:e1:70:42:e5:a5:74:ae:49:4b: 21:e3:2b:69:14:33:61:3b:08:6e:4f:10:07:3e:7c:e7:d9:e8: ac:49:54:5c:ae:a7:f3:c9:cd:79:64:66:c0:0d:24:8e:fa:9b: fe:73:59:50:f4:d1:2a:b4:e2:8c:f4:a6:37:f9:66:72:dd:a7: 68:9a:ba:b2:0d:93:52:e1:e4:ed:f8:7a:dd:b1:9c:55:58:7c: 6d:8f:2b:c8:60:8a:4d:74:12:ab:ff:46:72:58:a1:c8:d2:cf: d5:9f:2f:90:3e:85:c6:df:75:89:f0:51:f7:b5:63:41:89:64: cf:72:bb:4e:73:f9:46:3e:b7:56:ae:39:e9:24:f6:ac:f2:ab: 11:32:71:74:dc:cc:d6:dd:91:ec:1b:6a:79:ef:1b:4e:68:96: b8:bc:e6:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCNUIxMTAvBgNVBAUTKDI4ODQ4REMzRjE5RTc3MjlGRkUzN0VGN0U0RjBBNUM5 QzVCNDkwRTkwHhcNMjUwNzAxMDM0NTM5WhcNMjUwNzA4MDM0NTM5WjAYMRYwFAYD VQQDEw02ODYzNTllMy0wMzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FcsOWFUIRBvAJOLOwjmerb1Kbkvl19iuA/sV8eL3WLkvxko1XQJ5BSAvjC+ o/ftG7NZUJSSxYKhX66P4Qsnbgz/zUzWGcmkjXSuo0OAO1LodDhP9P1dm3MBCw9N 7jzGDRk9Amt729xTEFybFjphzTCo/OuKezpdb7LuF4iqaD9dEHzDoCyl1hpQFY6P RHPzFJfFoO3iLUOgBQIokCqqaZaA1QgdGt6qtJIevw4LQRwkeNxmNvcjjuKUuv3f +hSUfH907WDuXfoN4odCV9HMi7vj6jP/GhjxjSTxWSn6kBbJhjz7whQ25aPR/7Bd 81YnrIOhkjnGn5N34BP3SmD0MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoBM0MD uLAWGA0o9nV3LCvoLGNTMB8GA1UdIwQYMBaAFCiEjcPxnncp/+N+9+TwpcnFtJDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUI1Qi84RDU3RTE3Q0RE OTUxMUVEQUU4QzZDN0FDNEY5QUUwMi9LSVNOd19HZWR5bl80MzczNVBDbHljVzBr T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tJU053X0dlZHluXzQzNzM1UENseWNXMGtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUI1Qi84RDU3RTE3Q0REOTUxMUVEQUU4QzZDN0FDNEY5QUUwMi9LSVNOd19HZWR5 bl80MzczNVBDbHljVzBrT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXBUjHd8OX/eHc4z2187fW1n8epe6fyr+ypXgIDeAHBVt1yBoDQlQz Z7UFCK0OQhytPcEmiNe3PrScB8/bzr0pzzELKWsJ8dGG6A3zCCpD0UXVSrw/JrmP YZnakRs2BzUz34vhcELlpXSuSUsh4ytpFDNhOwhuTxAHPnzn2eisSVRcrqfzyc15 ZGbADSSO+pv+c1lQ9NEqtOKM9KY3+WZy3adomrqyDZNS4eTt+HrdsZxVWHxtjyvI YIpNdBKr/0ZyWKHI0s/Vny+QPoXG33WJ8FH3tWNBiWTPcrtOc/lGPrdWrjnpJPas 8qsRMnF03MzW3ZHsG2p57xtOaJa4vObe -----END CERTIFICATE-----Generated at Tue Jul 1 06:04:57 2025 by rpki-client