
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier: UsiDnv0TAGmiI/aKNLFrrJYxpSj2GynfN6HWh1VraeY=
Subject key identifier: EB:70:7F:08:7B:3B:D3:04:57:7B:F6:E4:1D:D6:55:57:E4:FE:9F:EC
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 01EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number: 01E1
Signing time: Mon 03 Nov 2025 02:41:53 +0000
Manifest this update: Mon 03 Nov 2025 02:41:53 +0000
Manifest next update: Mon 10 Nov 2025 02:41:53 +0000
Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: xbmTdA0F+aaTQlk1sCAbXQLYAtwABQV1PIfljbEmNYs=)
2: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: Ds1Oggb1CXmheiOx4YZNVxU2i1qg8eEHn8KdU83omHg=)
3: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: NvHtd8ujE1yELsuYXTHpNbSZA6sMXQEq9scs3taiBxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: Nov 3 02:41:53 2025 GMT
Not After : Nov 10 02:41:53 2025 GMT
Subject: CN=69081671-1f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:08:18:05:6b:fe:cf:02:cc:db:a5:df:60:
63:29:5f:ff:fd:a5:47:c1:59:45:8a:07:a4:3b:9a:
a3:b2:4e:58:22:74:2e:f1:ce:c8:7c:17:90:88:49:
26:1f:0d:ce:e8:07:ce:c2:80:47:40:43:1e:2b:a9:
84:ac:b0:27:74:84:c0:83:d4:0f:2b:cb:06:f9:33:
7b:32:43:75:02:8f:f1:05:84:2a:6f:84:f8:88:ff:
a4:37:77:db:37:79:9e:3f:40:5c:2f:56:6b:5a:21:
e6:24:45:ec:1a:21:aa:e2:61:65:18:85:a1:6e:9a:
52:44:4a:b8:b6:41:1b:49:b3:54:8e:d6:93:19:a4:
e4:81:9e:1e:47:b4:3e:12:ae:d9:83:82:58:14:bd:
11:7a:96:0a:ec:6f:2d:9a:f4:d1:f1:2f:7b:5f:f6:
9a:c1:70:ef:8b:7e:09:8e:7e:16:eb:6a:d3:97:06:
d8:5e:07:eb:31:12:51:b5:87:fe:ab:73:54:bd:71:
b4:d7:9c:3c:f4:d2:b3:42:cc:72:c0:30:1f:bf:89:
2e:26:93:d9:05:2b:af:27:f9:4f:b6:22:51:90:b0:
19:69:13:3d:3d:e6:6f:29:82:77:ea:9c:84:0f:99:
96:32:0b:21:a6:1a:31:75:d7:69:55:72:40:ba:60:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:70:7F:08:7B:3B:D3:04:57:7B:F6:E4:1D:D6:55:57:E4:FE:9F:EC
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:73:c1:4b:74:6a:12:7c:27:fc:da:78:71:65:39:f7:9a:d8:
cc:06:1a:0c:2f:e5:18:62:c3:4f:83:70:28:68:8c:53:11:9d:
0f:31:50:5e:21:21:18:29:0d:28:71:1b:7b:64:3c:d1:e8:26:
1b:2e:b4:fc:37:e4:5c:84:6e:ff:3c:b6:00:94:19:7a:7d:28:
f6:b1:ad:75:a9:48:be:27:8f:2e:23:ff:db:31:59:a4:f3:d9:
8d:bd:28:93:9e:03:63:d6:61:74:43:f5:4b:99:de:4f:5b:5a:
82:3c:a8:99:74:3b:a4:a7:0d:60:85:76:e5:80:7a:a4:be:0f:
75:17:70:3b:46:a4:7d:da:7f:84:e4:f1:86:20:df:51:76:05:
04:aa:15:26:d3:b3:62:01:4a:1d:c8:d9:d4:b4:72:2a:0a:0d:
88:04:cb:90:87:c3:10:4e:40:69:9b:95:62:02:68:d5:04:72:
72:4b:91:3f:56:16:bc:b7:e1:e0:c6:a6:2e:87:2d:a3:18:4c:
c2:f0:9b:96:ea:84:84:84:ff:4e:a7:a2:2a:c0:f8:b8:26:02:
88:cd:e7:ed:12:be:f3:d8:62:12:2c:f5:00:a8:a8:32:59:fa:
cb:39:b7:d2:23:8d:8c:f5:44:eb:f4:1c:2f:cb:b5:69:dc:84:
60:d5:60:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:16:36 2025 by rpki-client