This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier: YGn+LJT+cXsmHzV48tALiKPtZgTq1oBs4KH0IeS1llA=
Subject key identifier: DB:37:69:F6:63:6F:F9:00:E0:A8:EE:BC:DD:5F:C1:83:B7:E5:3F:AB
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number: 020B
Signing time: Sun 25 Jan 2026 01:40:00 +0000
Manifest this update: Sun 25 Jan 2026 01:40:00 +0000
Manifest next update: Sun 01 Feb 2026 01:40:00 +0000
Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: isyVE4P1/SHk/RVsPQMe30Q1QalFZbciIFNoHwI55S0=)
2: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: Ds1Oggb1CXmheiOx4YZNVxU2i1qg8eEHn8KdU83omHg=)
3: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: NvHtd8ujE1yELsuYXTHpNbSZA6sMXQEq9scs3taiBxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: Jan 25 01:40:00 2026 GMT
Not After : Feb 1 01:40:00 2026 GMT
Subject: CN=69757470-b830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:1a:bc:4f:5f:36:47:9f:24:d8:91:4d:a7:
98:1f:0e:7f:4a:ef:5f:18:4f:63:5d:03:f5:9c:54:
06:de:71:96:82:2c:de:9a:ce:7b:64:3a:f9:9f:ce:
85:88:f8:78:b0:bd:07:8d:f3:bc:aa:86:26:8a:00:
c1:54:fd:55:85:16:6c:3f:bb:5b:d7:6e:71:60:bc:
8f:e8:a4:91:a7:46:c3:71:c2:58:50:25:86:70:17:
13:c5:e0:79:c0:28:88:9d:ed:08:72:88:7e:e0:2e:
d6:80:37:b2:5a:fa:21:60:f2:29:fd:3d:df:3c:a4:
f9:3e:04:48:ec:b7:39:36:04:38:09:81:3b:d1:7a:
de:73:32:b0:cb:51:14:6b:9a:4d:9c:f9:60:80:d3:
d8:0d:3e:36:07:3b:a8:0d:c5:72:79:12:a8:fa:39:
75:8f:84:29:df:c4:21:e7:b3:1b:f0:1f:99:e9:9c:
5e:67:e5:14:6a:20:ff:19:55:fb:53:c7:44:ac:33:
c5:9a:cf:d4:7d:cb:f5:d0:6c:0f:13:3a:37:92:66:
28:68:6d:b5:ce:2f:f2:61:aa:03:47:8e:f5:27:93:
a2:f1:20:df:de:b0:fd:c8:0e:22:94:87:a4:fe:4a:
73:fa:70:84:84:47:13:e2:93:07:75:08:96:42:db:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:69:F6:63:6F:F9:00:E0:A8:EE:BC:DD:5F:C1:83:B7:E5:3F:AB
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:b2:31:21:37:c7:ad:08:04:85:9e:1a:2d:82:0e:4c:d1:f9:
d0:eb:52:ee:46:8a:5a:4e:b1:bd:f2:ed:7d:11:a0:db:7d:3f:
98:d5:b0:55:22:0c:e4:bd:d9:33:0b:4f:aa:d3:de:e6:14:88:
50:ce:09:7f:ca:77:b0:90:20:27:46:11:96:ad:48:36:3c:1f:
9e:c8:3f:26:24:43:53:95:bd:96:0e:1a:54:3a:cf:23:29:d3:
2e:03:7c:a5:8a:cb:d6:b2:f5:9c:84:84:44:85:a6:22:be:c2:
8a:3e:11:b7:c5:6d:b1:c9:76:96:af:91:91:78:04:be:79:aa:
d1:fd:c8:05:35:17:ca:2c:59:1e:ec:e9:89:6f:c7:2d:e0:3d:
b2:4f:2e:38:c3:d3:09:34:2b:aa:37:8e:f9:bb:2f:a4:f0:56:
57:54:22:9c:ff:04:43:47:ec:f9:ec:3a:c6:20:e8:92:47:7d:
61:33:d6:d5:93:15:65:43:b7:12:cd:cf:d5:23:dc:82:bb:48:
0e:eb:2c:d7:c8:68:d8:3e:9c:14:17:17:77:f1:d2:ae:24:16:
d8:51:0d:cf:a5:d0:54:aa:68:fe:d5:11:33:ff:69:49:f5:af:
88:ad:62:c3:33:ff:93:ef:21:a8:ab:0b:50:a7:6e:19:1d:3e:
a6:16:65:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:36:08 2026 by rpki-client