
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier: vhsOQw7cJg670ZWFFuVYiim14mXkvfivnSpmIvXESsk=
Subject key identifier: 70:5A:9A:A9:4D:DF:B5:0F:F4:31:7B:5F:A7:68:E7:E6:5B:B8:04:87
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 0249
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number: 023B
Signing time: Tue 21 Apr 2026 02:23:52 +0000
Manifest this update: Tue 21 Apr 2026 02:23:51 +0000
Manifest next update: Tue 28 Apr 2026 02:23:51 +0000
Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: ZRq/CK5r8JhZPbFlsoQSQQYV4edK6JWIMaAmdU8uLIE=)
2: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: YRzH4mC2bDKEncXqO5K3xqWUSqE5Exwmq1o3B01/Eak=)
3: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: z6jab3pPMKE60NZxiOVLMs9nS5ZOotEr05TjZQstmbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 02:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: Apr 21 02:23:51 2026 GMT
Not After : Apr 28 02:23:51 2026 GMT
Subject: CN=69e6dfb7-e88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:88:29:77:a4:19:9a:7d:53:34:94:b1:0b:
78:7b:39:dc:18:41:ad:d1:a1:40:a2:1f:bd:30:f8:
ea:41:cd:0f:a1:a9:51:94:24:e8:86:eb:e0:f5:a1:
75:1e:bd:29:e9:a5:2e:12:33:2d:73:61:60:54:de:
71:8e:17:dd:39:fa:0f:6b:84:43:5e:ae:1b:10:1d:
7c:dd:9e:e3:5d:a5:50:1c:09:a5:42:8c:05:a9:7b:
2c:35:b3:96:25:65:95:f9:c0:28:d3:75:48:23:8b:
c4:28:c0:a3:17:70:c9:a9:93:58:14:db:f9:51:e5:
04:fc:a8:aa:09:5d:31:55:57:f1:92:9b:5a:bc:22:
6a:22:6d:c2:9e:65:41:ab:0d:8b:ae:dd:fb:b5:b1:
58:6a:9f:89:37:1b:ac:19:c1:e0:ed:ee:5f:79:ef:
41:ce:cb:60:9c:fe:9e:58:f7:f3:61:69:b3:e1:a5:
00:6d:32:02:52:04:d6:5b:18:03:a4:43:f4:94:e4:
68:46:95:9b:cd:bd:52:f4:fe:29:42:28:32:b5:61:
59:9e:ad:be:cd:5b:59:f9:93:05:81:43:5b:8e:ab:
17:cd:65:7a:d5:13:ce:26:2d:01:cf:90:74:bb:ff:
29:7b:b6:73:21:98:69:e0:fc:9a:75:c0:54:2c:19:
ac:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5A:9A:A9:4D:DF:B5:0F:F4:31:7B:5F:A7:68:E7:E6:5B:B8:04:87
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:e7:3d:ea:45:96:3a:19:b7:be:7c:d9:70:34:c2:9e:5a:8c:
e8:59:c0:ba:1e:93:c8:90:bc:1e:fd:6d:8b:c3:ee:dc:51:d9:
8c:4b:d8:f6:40:74:48:12:64:9b:68:b8:19:52:69:43:03:59:
28:6f:36:3e:36:63:e4:b7:3a:c2:4b:77:a8:05:ad:45:cb:fd:
c3:74:6c:58:52:85:b0:35:7b:a3:24:4b:65:85:06:81:77:2b:
67:11:c3:7b:d3:65:7c:da:21:4e:d5:06:68:e3:06:b6:24:87:
c0:22:39:bc:5c:8d:30:d0:86:00:3e:c8:d3:91:16:85:d1:78:
43:4f:cc:01:fe:aa:d4:1b:28:8f:6a:a9:28:7f:4a:db:5d:55:
65:06:0e:5c:06:0a:47:2c:2e:67:dc:f7:97:8d:88:ea:dd:7f:
25:1a:36:64:ed:c2:2d:19:f9:b1:fe:5e:cd:0c:f9:12:a4:37:
8f:90:93:71:31:fa:56:08:c9:cc:ed:1e:a8:8d:8d:57:27:c0:
68:5b:b3:43:08:14:a5:33:75:bc:d0:3b:0c:50:39:eb:ab:df:
8d:27:60:7f:58:79:61:ce:bb:df:21:d5:2f:5a:f4:11:ad:e0:
97:9c:e9:83:c6:40:9e:5e:e9:c0:69:1a:dc:7d:43:61:14:d6:
38:39:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:03:57 2026 by rpki-client