
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier: UBomZ3vxoernLEMBuMTFwviAFkIwQwbSa9aT5UQZWvU=
Subject key identifier: 0A:27:19:A2:B1:27:94:ED:B8:CB:ED:1B:67:1C:72:59:E4:78:26:10
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 0297
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number: 0289
Signing time: Wed 23 Sep 2026 01:43:02 +0000
Manifest this update: Wed 23 Sep 2026 01:43:02 +0000
Manifest next update: Wed 30 Sep 2026 01:43:02 +0000
Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: RtN4p23is/hrJooWnuFjjuS+CNgcULIerIqbKFIIwRk=)
2: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: YRzH4mC2bDKEncXqO5K3xqWUSqE5Exwmq1o3B01/Eak=)
3: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: z6jab3pPMKE60NZxiOVLMs9nS5ZOotEr05TjZQstmbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: Sep 23 01:43:02 2026 GMT
Not After : Sep 30 01:43:02 2026 GMT
Subject: CN=6ab32ea6-073c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:ea:53:bb:3a:5d:f2:ec:16:3d:5f:6c:9d:
83:d0:b6:6d:bf:6b:36:71:7d:fb:6d:1b:08:09:62:
9b:e8:e5:83:14:c7:33:c6:68:cb:22:14:0e:e5:21:
b8:d9:da:e6:24:75:bc:78:27:a1:04:ca:6d:dd:ba:
4d:80:d5:32:6c:2c:1d:c3:64:76:9b:01:70:f3:8e:
f9:96:0a:62:6e:23:8a:81:b7:a5:da:ca:08:89:e0:
2f:e5:ca:c9:c4:c9:a5:e5:71:70:c9:ab:22:44:8b:
b9:9c:d4:73:77:11:77:64:ce:23:fc:5b:00:ba:16:
a7:65:29:cc:8c:0c:29:12:c4:83:cc:fe:8a:fb:7f:
da:44:73:d0:78:4b:03:3d:80:21:94:9f:45:be:8b:
ec:40:2f:72:7c:69:f8:fb:1f:71:25:df:89:db:4a:
0e:99:c4:52:64:7e:a6:b6:d8:36:bf:e3:e0:ca:3a:
f8:7e:5f:23:d6:c5:a3:79:65:c0:c3:e0:c7:c0:d0:
b5:13:6b:bf:39:a6:4f:4f:e0:83:f3:71:36:68:5e:
e1:2a:1a:a5:fe:e7:ee:7d:1e:75:0f:ed:e8:12:9c:
95:70:9c:8c:8a:04:30:67:c2:d0:66:ff:4e:ef:e7:
d5:0c:2d:b2:48:b1:fa:9e:bc:76:37:51:5d:f3:c7:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:27:19:A2:B1:27:94:ED:B8:CB:ED:1B:67:1C:72:59:E4:78:26:10
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d3:91:49:d5:6b:30:37:4c:3b:37:5c:55:40:c7:28:1a:af:
eb:b2:54:0c:6d:3f:3e:a9:ef:94:e8:33:6a:3d:47:88:21:16:
16:ca:d6:dc:06:c3:fc:28:c6:e0:f0:4b:4d:28:bb:e3:07:0b:
6c:8f:1b:e6:12:32:e7:b8:14:85:d8:13:7d:71:3f:18:a7:92:
5b:c8:0d:8f:42:a3:a3:b1:b1:67:cf:87:78:d4:9e:8a:b3:6f:
f5:93:c1:c7:e3:c3:92:25:fb:10:e1:31:49:ae:6e:55:3e:d5:
89:9e:bc:cb:b0:f7:f9:ce:1b:26:4c:ea:31:76:94:29:a8:ab:
52:04:a6:d8:41:a2:b5:8c:dd:1c:a9:37:62:8d:d8:8f:bb:cc:
2d:cb:f8:a4:1b:76:a8:64:8d:ae:73:60:1a:1e:0c:40:71:a6:
02:a3:9f:79:1e:f3:0d:8e:e6:c4:88:e2:7b:77:3b:09:58:a3:
67:10:8b:28:7d:d3:a3:da:5c:ab:a5:e0:1d:2b:52:e7:d4:ba:
7a:50:bb:7d:58:db:94:b4:a5:f4:a4:d7:bc:cb:ac:9f:4d:2b:
8b:49:c2:26:c7:19:9f:3d:0f:85:1d:a2:92:90:14:c7:e3:22:
c9:41:30:38:8e:39:23:ee:4e:d8:3c:3b:9a:70:ac:a5:98:70:
6b:56:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:19:02 2026 by rpki-client