
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier: dJO1+31btZCKlx6rXwMr/vqhwP6/L5ELHDz1dQKsi20=
Subject key identifier: 4D:D1:21:21:10:37:14:2D:AB:ED:95:FF:75:D0:A1:6F:C8:F6:8E:36
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number: 0251
Signing time: Fri 05 Jun 2026 02:30:57 +0000
Manifest this update: Fri 05 Jun 2026 02:30:56 +0000
Manifest next update: Fri 12 Jun 2026 02:30:56 +0000
Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: Hhb9P955tdvZb7Bi1KTg9PNDev6vTn5R+VDX66TkPjY=)
2: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: YRzH4mC2bDKEncXqO5K3xqWUSqE5Exwmq1o3B01/Eak=)
3: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: z6jab3pPMKE60NZxiOVLMs9nS5ZOotEr05TjZQstmbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 02:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: Jun 5 02:30:56 2026 GMT
Not After : Jun 12 02:30:56 2026 GMT
Subject: CN=6a2234e1-ecdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:90:5b:b1:bb:80:db:33:9e:13:ce:b7:32:
7f:8c:03:cb:d0:38:3b:03:f2:54:e8:0c:7a:75:0d:
a8:9a:20:70:4b:7c:5d:a1:da:75:9d:c5:98:29:49:
12:c6:c8:22:7c:5a:d7:e1:ef:28:66:f5:10:43:5c:
02:da:79:c8:42:db:18:6c:57:90:c1:26:22:e6:32:
6a:3c:1f:6f:85:d8:12:05:36:f5:6f:24:ba:80:8a:
1c:58:69:f6:50:33:b6:18:b9:a7:4f:44:fe:d8:39:
6a:9f:49:29:43:fd:62:d7:87:e1:93:d4:5d:6d:db:
7a:18:c8:95:ba:95:80:b1:19:95:9c:23:d5:f3:88:
63:50:40:a0:c7:4b:c3:51:08:0b:85:dc:85:45:91:
8d:e9:e4:db:20:57:45:02:27:63:fd:48:21:38:c0:
85:13:dd:70:ba:ba:96:37:4c:64:de:4b:82:81:d3:
ff:42:d6:27:b3:d1:4a:12:e6:09:a4:50:41:ee:83:
e5:f6:23:77:db:a5:64:54:af:d1:ff:51:67:c2:93:
96:8b:18:8d:01:f8:c2:ed:80:45:2e:8a:b9:03:4e:
33:6b:d8:68:1d:8d:fc:fa:e0:9e:52:31:11:85:a6:
1e:f6:96:f3:fd:bc:52:58:66:74:ac:a4:b5:e0:18:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D1:21:21:10:37:14:2D:AB:ED:95:FF:75:D0:A1:6F:C8:F6:8E:36
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ec:9f:07:83:7b:e6:11:17:33:f8:e0:48:ec:aa:28:35:63:
7f:04:58:bb:3f:21:f1:1a:4a:92:6a:00:2e:e6:47:a7:24:74:
8c:01:b9:65:57:95:25:6c:83:cc:b4:95:2c:d7:d9:e3:04:98:
9b:ae:3f:37:3e:9d:56:94:97:bd:7d:e6:c9:cf:3e:bb:f1:9b:
da:9c:a3:4c:3b:87:01:68:91:5e:6a:97:78:23:7c:5b:23:3d:
fd:76:a2:c7:b6:a7:ca:c0:f4:c7:7e:12:f6:17:56:e8:28:64:
f0:12:fa:19:0a:5a:02:df:eb:e8:04:d1:e6:7f:5a:b9:f9:03:
fb:81:f3:9d:c0:e8:c9:cf:d2:e3:57:54:a9:8d:b0:b8:aa:81:
15:ee:ac:d7:c5:a7:a7:5c:4b:8d:93:4c:de:ad:7e:16:a2:61:
a8:32:fd:46:de:37:20:cb:00:90:b7:88:fd:e8:7f:0c:56:6d:
cb:2b:7e:9b:78:10:f9:f7:59:12:59:cd:9a:22:88:e5:c6:5b:
9a:84:f8:95:31:54:96:4a:5d:0a:b5:88:a4:e6:8b:cf:cf:09:
b1:b0:3b:fa:b8:3a:3c:48:28:94:f7:ea:5f:0a:ba:21:c7:c4:
1c:ed:9e:d1:02:29:b9:68:ad:89:df:10:74:bc:c9:67:90:88:
d7:c0:3b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:34:34 2026 by rpki-client