Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File:                     KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier:          UBomZ3vxoernLEMBuMTFwviAFkIwQwbSa9aT5UQZWvU=
Subject key identifier:   0A:27:19:A2:B1:27:94:ED:B8:CB:ED:1B:67:1C:72:59:E4:78:26:10
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer:       /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial:       0297
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number:          0289
Signing time:             Wed 23 Sep 2026 01:43:02 +0000
Manifest this update:     Wed 23 Sep 2026 01:43:02 +0000
Manifest next update:     Wed 30 Sep 2026 01:43:02 +0000
Files and hashes:         1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: RtN4p23is/hrJooWnuFjjuS+CNgcULIerIqbKFIIwRk=)
                          2: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: YRzH4mC2bDKEncXqO5K3xqWUSqE5Exwmq1o3B01/Eak=)
                          3: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: z6jab3pPMKE60NZxiOVLMs9nS5ZOotEr05TjZQstmbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
                          rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663 (0x297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
        Validity
            Not Before: Sep 23 01:43:02 2026 GMT
            Not After : Sep 30 01:43:02 2026 GMT
        Subject: CN=6ab32ea6-073c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:ea:53:bb:3a:5d:f2:ec:16:3d:5f:6c:9d:
                    83:d0:b6:6d:bf:6b:36:71:7d:fb:6d:1b:08:09:62:
                    9b:e8:e5:83:14:c7:33:c6:68:cb:22:14:0e:e5:21:
                    b8:d9:da:e6:24:75:bc:78:27:a1:04:ca:6d:dd:ba:
                    4d:80:d5:32:6c:2c:1d:c3:64:76:9b:01:70:f3:8e:
                    f9:96:0a:62:6e:23:8a:81:b7:a5:da:ca:08:89:e0:
                    2f:e5:ca:c9:c4:c9:a5:e5:71:70:c9:ab:22:44:8b:
                    b9:9c:d4:73:77:11:77:64:ce:23:fc:5b:00:ba:16:
                    a7:65:29:cc:8c:0c:29:12:c4:83:cc:fe:8a:fb:7f:
                    da:44:73:d0:78:4b:03:3d:80:21:94:9f:45:be:8b:
                    ec:40:2f:72:7c:69:f8:fb:1f:71:25:df:89:db:4a:
                    0e:99:c4:52:64:7e:a6:b6:d8:36:bf:e3:e0:ca:3a:
                    f8:7e:5f:23:d6:c5:a3:79:65:c0:c3:e0:c7:c0:d0:
                    b5:13:6b:bf:39:a6:4f:4f:e0:83:f3:71:36:68:5e:
                    e1:2a:1a:a5:fe:e7:ee:7d:1e:75:0f:ed:e8:12:9c:
                    95:70:9c:8c:8a:04:30:67:c2:d0:66:ff:4e:ef:e7:
                    d5:0c:2d:b2:48:b1:fa:9e:bc:76:37:51:5d:f3:c7:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:27:19:A2:B1:27:94:ED:B8:CB:ED:1B:67:1C:72:59:E4:78:26:10
            X509v3 Authority Key Identifier:
                keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d3:91:49:d5:6b:30:37:4c:3b:37:5c:55:40:c7:28:1a:af:
         eb:b2:54:0c:6d:3f:3e:a9:ef:94:e8:33:6a:3d:47:88:21:16:
         16:ca:d6:dc:06:c3:fc:28:c6:e0:f0:4b:4d:28:bb:e3:07:0b:
         6c:8f:1b:e6:12:32:e7:b8:14:85:d8:13:7d:71:3f:18:a7:92:
         5b:c8:0d:8f:42:a3:a3:b1:b1:67:cf:87:78:d4:9e:8a:b3:6f:
         f5:93:c1:c7:e3:c3:92:25:fb:10:e1:31:49:ae:6e:55:3e:d5:
         89:9e:bc:cb:b0:f7:f9:ce:1b:26:4c:ea:31:76:94:29:a8:ab:
         52:04:a6:d8:41:a2:b5:8c:dd:1c:a9:37:62:8d:d8:8f:bb:cc:
         2d:cb:f8:a4:1b:76:a8:64:8d:ae:73:60:1a:1e:0c:40:71:a6:
         02:a3:9f:79:1e:f3:0d:8e:e6:c4:88:e2:7b:77:3b:09:58:a3:
         67:10:8b:28:7d:d3:a3:da:5c:ab:a5:e0:1d:2b:52:e7:d4:ba:
         7a:50:bb:7d:58:db:94:b4:a5:f4:a4:d7:bc:cb:ac:9f:4d:2b:
         8b:49:c2:26:c7:19:9f:3d:0f:85:1d:a2:92:90:14:c7:e3:22:
         c9:41:30:38:8e:39:23:ee:4e:d8:3c:3b:9a:70:ac:a5:98:70:
         6b:56:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:19:02 2026 by rpki-client