
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier: 6WxVJ7f06VJ7LEMATguKE6eoHWIPtRqInUw6AjgqGZA=
Subject key identifier: 12:8C:5A:9C:D1:B7:D1:0A:CF:45:DC:5A:36:09:42:AF:D2:69:E6:8A
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 02A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number: 0299
Signing time: Sun 25 Oct 2026 02:02:24 +0000
Manifest this update: Sun 25 Oct 2026 02:02:23 +0000
Manifest next update: Sun 01 Nov 2026 02:02:23 +0000
Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: vN4Rssy5adCvV78PDZ1fbKrZgA/ooi6g2SGTdBlkp3I=)
2: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: z6jab3pPMKE60NZxiOVLMs9nS5ZOotEr05TjZQstmbM=)
3: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: YRzH4mC2bDKEncXqO5K3xqWUSqE5Exwmq1o3B01/Eak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 02:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: Oct 25 02:02:23 2026 GMT
Not After : Nov 1 02:02:23 2026 GMT
Subject: CN=6add6330-dc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:8f:97:c7:13:7e:24:bf:66:c3:60:a5:e1:
84:1c:1d:a9:1d:11:bb:18:2b:1e:5c:d1:cf:bd:db:
7c:ef:fe:33:14:e4:a5:49:2c:94:3e:d0:21:56:a0:
97:0d:d7:ac:0e:c5:b3:39:e0:ff:35:07:e9:6b:a0:
fe:83:c1:04:cc:9b:99:e3:03:80:ba:55:7d:df:8a:
90:2f:89:ef:98:01:43:0d:78:6a:10:eb:9b:c4:b7:
e2:6d:7e:42:02:5b:77:a4:3a:fa:84:9a:7d:1e:9b:
6b:2d:25:f7:cf:41:97:b0:ed:50:79:c2:d9:91:51:
3e:f1:41:85:b4:46:63:43:ae:52:24:9f:13:e7:58:
38:e9:54:d9:20:a7:92:99:44:12:b3:26:77:8b:dd:
70:19:a3:23:aa:a8:90:89:29:da:66:b4:16:83:ee:
35:69:95:19:37:91:29:21:ea:25:20:6e:d0:73:62:
13:e3:67:45:8e:26:93:5e:3b:3d:2d:7d:db:11:a0:
54:29:6b:58:4a:99:98:5d:b8:12:a0:d5:aa:df:4f:
49:2f:34:bc:67:dc:73:53:39:95:54:b2:f1:b2:4a:
09:a6:00:cd:68:34:70:6c:e7:5c:37:35:be:44:ed:
8d:d0:82:c3:67:2d:f2:d2:f8:ab:bb:db:65:46:69:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8C:5A:9C:D1:B7:D1:0A:CF:45:DC:5A:36:09:42:AF:D2:69:E6:8A
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:49:be:0c:fd:b5:62:c9:02:2d:45:7e:4f:8f:bc:51:1b:22:
5d:51:d7:3e:c0:3e:aa:04:b6:0a:8a:a0:ce:3a:74:b1:63:d1:
c4:55:13:3f:e7:a7:5f:80:1d:c9:af:34:e7:bc:dd:2d:fd:07:
a5:6c:cb:32:5d:59:7e:88:e1:40:00:68:d7:16:61:1d:3c:26:
44:4e:c9:b0:ab:5f:81:e0:5e:58:0d:10:4d:36:99:44:ac:33:
df:3a:50:e0:88:55:6d:d3:b0:d7:2e:91:13:bb:92:0f:62:3d:
9f:cc:24:f8:e3:36:9f:d5:a2:62:01:58:db:21:bb:2d:5d:33:
dc:3e:6c:04:ca:d7:7e:bf:98:68:73:a8:0f:aa:e0:e1:6d:77:
98:fd:f9:a0:a7:d5:5c:98:30:3c:d4:58:a9:9b:45:5e:54:e8:
e4:bf:34:26:fb:8a:ee:6a:3a:e7:a4:8b:87:d5:58:2c:d4:59:
c8:27:80:2f:2c:d2:d8:d6:3b:87:3c:9f:ac:69:b9:1e:b6:74:
9e:40:3b:a7:e4:eb:70:a6:2e:1d:81:e0:7f:77:bc:78:b7:bb:
09:e5:44:e0:53:2f:58:ea:d3:d4:b1:ec:37:12:bf:03:c8:92:
24:ba:07:89:35:dd:b9:7b:bb:02:39:30:4c:cd:c5:43:08:c9:
bf:2d:bc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:10:33 2026 by rpki-client