Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File:                     KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier:          6WxVJ7f06VJ7LEMATguKE6eoHWIPtRqInUw6AjgqGZA=
Subject key identifier:   12:8C:5A:9C:D1:B7:D1:0A:CF:45:DC:5A:36:09:42:AF:D2:69:E6:8A
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer:       /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial:       02A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number:          0299
Signing time:             Sun 25 Oct 2026 02:02:24 +0000
Manifest this update:     Sun 25 Oct 2026 02:02:23 +0000
Manifest next update:     Sun 01 Nov 2026 02:02:23 +0000
Files and hashes:         1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: vN4Rssy5adCvV78PDZ1fbKrZgA/ooi6g2SGTdBlkp3I=)
                          2: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: z6jab3pPMKE60NZxiOVLMs9nS5ZOotEr05TjZQstmbM=)
                          3: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: YRzH4mC2bDKEncXqO5K3xqWUSqE5Exwmq1o3B01/Eak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
                          rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 02:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
        Validity
            Not Before: Oct 25 02:02:23 2026 GMT
            Not After : Nov  1 02:02:23 2026 GMT
        Subject: CN=6add6330-dc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1d:8f:97:c7:13:7e:24:bf:66:c3:60:a5:e1:
                    84:1c:1d:a9:1d:11:bb:18:2b:1e:5c:d1:cf:bd:db:
                    7c:ef:fe:33:14:e4:a5:49:2c:94:3e:d0:21:56:a0:
                    97:0d:d7:ac:0e:c5:b3:39:e0:ff:35:07:e9:6b:a0:
                    fe:83:c1:04:cc:9b:99:e3:03:80:ba:55:7d:df:8a:
                    90:2f:89:ef:98:01:43:0d:78:6a:10:eb:9b:c4:b7:
                    e2:6d:7e:42:02:5b:77:a4:3a:fa:84:9a:7d:1e:9b:
                    6b:2d:25:f7:cf:41:97:b0:ed:50:79:c2:d9:91:51:
                    3e:f1:41:85:b4:46:63:43:ae:52:24:9f:13:e7:58:
                    38:e9:54:d9:20:a7:92:99:44:12:b3:26:77:8b:dd:
                    70:19:a3:23:aa:a8:90:89:29:da:66:b4:16:83:ee:
                    35:69:95:19:37:91:29:21:ea:25:20:6e:d0:73:62:
                    13:e3:67:45:8e:26:93:5e:3b:3d:2d:7d:db:11:a0:
                    54:29:6b:58:4a:99:98:5d:b8:12:a0:d5:aa:df:4f:
                    49:2f:34:bc:67:dc:73:53:39:95:54:b2:f1:b2:4a:
                    09:a6:00:cd:68:34:70:6c:e7:5c:37:35:be:44:ed:
                    8d:d0:82:c3:67:2d:f2:d2:f8:ab:bb:db:65:46:69:
                    b1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8C:5A:9C:D1:B7:D1:0A:CF:45:DC:5A:36:09:42:AF:D2:69:E6:8A
            X509v3 Authority Key Identifier:
                keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:49:be:0c:fd:b5:62:c9:02:2d:45:7e:4f:8f:bc:51:1b:22:
         5d:51:d7:3e:c0:3e:aa:04:b6:0a:8a:a0:ce:3a:74:b1:63:d1:
         c4:55:13:3f:e7:a7:5f:80:1d:c9:af:34:e7:bc:dd:2d:fd:07:
         a5:6c:cb:32:5d:59:7e:88:e1:40:00:68:d7:16:61:1d:3c:26:
         44:4e:c9:b0:ab:5f:81:e0:5e:58:0d:10:4d:36:99:44:ac:33:
         df:3a:50:e0:88:55:6d:d3:b0:d7:2e:91:13:bb:92:0f:62:3d:
         9f:cc:24:f8:e3:36:9f:d5:a2:62:01:58:db:21:bb:2d:5d:33:
         dc:3e:6c:04:ca:d7:7e:bf:98:68:73:a8:0f:aa:e0:e1:6d:77:
         98:fd:f9:a0:a7:d5:5c:98:30:3c:d4:58:a9:9b:45:5e:54:e8:
         e4:bf:34:26:fb:8a:ee:6a:3a:e7:a4:8b:87:d5:58:2c:d4:59:
         c8:27:80:2f:2c:d2:d8:d6:3b:87:3c:9f:ac:69:b9:1e:b6:74:
         9e:40:3b:a7:e4:eb:70:a6:2e:1d:81:e0:7f:77:bc:78:b7:bb:
         09:e5:44:e0:53:2f:58:ea:d3:d4:b1:ec:37:12:bf:03:c8:92:
         24:ba:07:89:35:dd:b9:7b:bb:02:39:30:4c:cd:c5:43:08:c9:
         bf:2d:bc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:10:33 2026 by rpki-client