$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json) Hash identifier: Kb7US3PTXY6cgpt93n9R543I/YuSTaSNXw8WDMf1XgA= Subject key identifier: 05:0C:B2:EB:8E:03:14:86:1B:0D:52:E3:38:F7:20:9B:19:44:DD:9C Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9 Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft Manifest number: 0288 Signing time: Mon 21 Sep 2026 01:53:45 +0000 Manifest this update: Mon 21 Sep 2026 01:53:45 +0000 Manifest next update: Mon 28 Sep 2026 01:53:45 +0000 Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: pbUhOpdM1gy+EOX4O4yK7rU9PbSYOIK9jiR2Hn1GD68=) 2: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: z6jab3pPMKE60NZxiOVLMs9nS5ZOotEr05TjZQstmbM=) 3: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: YRzH4mC2bDKEncXqO5K3xqWUSqE5Exwmq1o3B01/Eak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9 Validity Not Before: Sep 21 01:53:45 2026 GMT Not After : Sep 28 01:53:45 2026 GMT Subject: CN=6ab08e29-d9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:b2:bf:50:92:d1:20:ba:ce:ac:e0:b2:15: ee:f4:e3:e0:9d:94:bf:58:e8:0d:99:a0:bc:ec:e3: 3b:aa:d4:4e:31:3e:df:f7:b3:33:8e:3b:f0:99:78: 57:cf:fa:e7:f8:8e:ee:fa:09:35:33:41:db:03:91: c2:53:41:7a:43:d1:fb:a0:fd:9b:9f:a8:8d:fd:7c: 9b:33:e0:75:d9:1f:73:a5:44:6c:c5:c5:13:96:61: a7:e2:ec:a4:7a:32:8d:fc:9c:57:dc:fe:2e:19:8a: 80:ac:bf:e5:68:9b:f8:b8:26:01:1a:ac:c1:27:38: bb:05:e1:ba:35:b9:6f:ea:65:ec:aa:e3:ab:bd:34: a7:24:4a:b3:b7:02:1a:6a:13:89:20:9c:ba:ab:9f: fe:d9:71:10:54:dc:5f:96:fa:e9:72:74:f5:06:cd: d5:44:dc:e0:5d:ea:3e:1d:53:06:4a:41:50:c6:17: 33:66:41:d5:73:0c:2e:06:0b:93:77:32:af:94:b8: 7a:2a:1e:1d:17:20:2c:f6:cb:e2:85:3b:59:9e:44: c0:05:d2:47:5b:30:de:96:20:bb:a7:07:3a:36:4c: 87:da:7d:67:01:bb:35:b0:03:72:9a:68:16:03:d1: da:80:4e:4f:b8:37:be:60:57:c4:94:e3:88:66:28: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0C:B2:EB:8E:03:14:86:1B:0D:52:E3:38:F7:20:9B:19:44:DD:9C X509v3 Authority Key Identifier: keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:f5:7b:e7:63:12:cb:be:47:ec:fe:5b:48:89:34:b8:0f:9a: 32:e0:4b:8d:77:c4:3b:c4:b7:b7:50:c2:8c:a0:a4:f2:c0:1a: 2f:6d:eb:76:b5:0e:91:26:0b:2e:a2:c2:d1:64:db:1a:2e:02: 28:5f:09:75:f3:42:43:7a:20:f6:20:a9:70:02:02:4e:da:d5: 6c:e7:4c:50:c1:aa:49:68:f6:0c:47:20:9f:e2:8f:c4:22:49: ac:5b:1b:df:56:a8:e3:03:a4:7e:9f:41:17:09:00:b5:6a:44: 8a:3a:4d:98:89:34:56:b4:fb:32:04:fd:9e:74:35:c8:41:1e: 99:89:73:30:47:af:9c:72:ee:73:10:65:63:5f:27:5d:1d:e0: a0:b6:37:97:c5:d0:0d:32:49:b9:26:e0:55:3f:f9:e6:02:77: 83:4e:0c:d5:06:7d:c2:8d:6f:27:32:da:d3:53:f8:a6:c4:1f: 4a:2d:18:e2:dc:e8:0a:01:2d:a3:de:8c:3a:5c:15:95:d3:a9: b3:7a:c4:c8:2a:e3:af:d4:a7:e4:29:64:de:5a:2f:b6:f3:7c: 9d:34:aa:e7:70:29:78:29:27:8b:11:69:b5:0d:65:55:8c:eb: bd:6c:ae:6b:fe:52:51:a7:3c:55:28:7c:86:ab:63:b4:8c:09: a3:56:a7:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCNUIxMTAvBgNVBAUTKDI4ODQ4REMzRjE5RTc3MjlGRkUzN0VGN0U0RjBBNUM5 QzVCNDkwRTkwHhcNMjYwOTIxMDE1MzQ1WhcNMjYwOTI4MDE1MzQ1WjAYMRYwFAYD VQQDEw02YWIwOGUyOS1kOWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAux6yv1CS0SC6zqzgshXu9OPgnZS/WOgNmaC87OM7qtROMT7f97MzjjvwmXhX z/rn+I7u+gk1M0HbA5HCU0F6Q9H7oP2bn6iN/XybM+B12R9zpURsxcUTlmGn4uyk ejKN/JxX3P4uGYqArL/laJv4uCYBGqzBJzi7BeG6Nblv6mXsquOrvTSnJEqztwIa ahOJIJy6q5/+2XEQVNxflvrpcnT1Bs3VRNzgXeo+HVMGSkFQxhczZkHVcwwuBguT dzKvlLh6Kh4dFyAs9svihTtZnkTABdJHWzDeliC7pwc6NkyH2n1nAbs1sANymmgW A9HagE5PuDe+YFfElOOIZijH3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAUMsuuO AxSGGw1S4zj3IJsZRN2cMB8GA1UdIwQYMBaAFCiEjcPxnncp/+N+9+TwpcnFtJDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUI1Qi84RDU3RTE3Q0RE OTUxMUVEQUU4QzZDN0FDNEY5QUUwMi9LSVNOd19HZWR5bl80MzczNVBDbHljVzBr T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tJU053X0dlZHluXzQzNzM1UENseWNXMGtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUI1Qi84RDU3RTE3Q0REOTUxMUVEQUU4QzZDN0FDNEY5QUUwMi9LSVNOd19HZWR5 bl80MzczNVBDbHljVzBrT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkPV752MSy75H7P5bSIk0uA+aMuBLjXfEO8S3t1DCjKCk8sAaL23rdrUOkSYL LqLC0WTbGi4CKF8JdfNCQ3og9iCpcAICTtrVbOdMUMGqSWj2DEcgn+KPxCJJrFsb 31ao4wOkfp9BFwkAtWpEijpNmIk0VrT7MgT9nnQ1yEEemYlzMEevnHLucxBlY18n XR3goLY3l8XQDTJJuSbgVT/55gJ3g04M1QZ9wo1vJzLa01P4psQfSi0Y4tzoCgEt o96MOlwVldOps3rEyCrjr9Sn5Clk3lovtvN8nTSq53ApeCknixFptQ1lVYzrvWyu a/5SUac8VSh8hqtjtIwJo1anHw== -----END CERTIFICATE-----Generated at Mon Sep 21 11:42:21 2026 by rpki-client