
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier: gBHywMMfxlt88+WAMkgMiTVZqrMJdYhhD5eGetdFGL4=
Subject key identifier: 72:21:00:4B:D9:7F:04:CB:B3:97:92:40:0B:9C:21:9A:33:C6:EF:D0
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 02B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number: 02A4
Signing time: Sun 15 Nov 2026 01:46:21 +0000
Manifest this update: Sun 15 Nov 2026 01:46:20 +0000
Manifest next update: Sun 22 Nov 2026 01:46:20 +0000
Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: kK4ioHpM0g0ZsVdwz+MqeWBy4OH4EC6dt83RtCDbtBM=)
2: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: z6jab3pPMKE60NZxiOVLMs9nS5ZOotEr05TjZQstmbM=)
3: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: YRzH4mC2bDKEncXqO5K3xqWUSqE5Exwmq1o3B01/Eak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 01:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690 (0x2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: Nov 15 01:46:20 2026 GMT
Not After : Nov 22 01:46:20 2026 GMT
Subject: CN=6af90eed-d8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:cd:76:77:aa:5a:12:20:93:51:f3:43:8c:
30:1f:2e:9c:bc:69:ab:a4:21:bd:cf:19:3b:dc:76:
a1:2b:5d:ec:ca:50:fd:0c:4a:2e:2f:a7:69:de:52:
9b:3b:2a:1a:ee:b3:a0:43:ef:62:39:dc:ec:16:96:
b3:4d:75:18:58:ce:42:6b:57:a5:42:b9:db:44:62:
4b:b7:d2:ad:d6:e4:7b:f0:68:80:84:7a:19:f2:9f:
e1:3a:5f:04:0f:35:62:6f:9c:ab:98:a1:97:ca:8c:
df:93:44:ce:d0:2e:05:24:11:2c:60:79:9e:91:da:
cc:9a:6e:ba:4c:4c:9c:8f:59:92:d3:0c:97:27:85:
da:44:02:24:ad:79:8a:96:70:cf:10:c9:2a:b4:4b:
b3:ef:fb:e0:cd:f9:ee:52:ff:a6:aa:05:12:ac:25:
a2:1d:42:3b:20:7f:aa:37:e6:45:56:2f:a1:f2:cb:
52:cb:d9:7f:d4:85:1b:86:7f:9d:ad:8f:12:4e:e5:
58:b0:4e:86:03:19:f8:b2:31:c6:06:f5:0a:9c:5f:
fd:09:33:5e:56:bf:b8:6f:49:f0:ed:f2:2c:eb:3d:
a7:b9:78:52:15:6b:af:8d:24:9c:bc:c0:66:a2:09:
86:ce:39:aa:ff:4b:d6:92:90:df:99:a7:b6:07:b5:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:21:00:4B:D9:7F:04:CB:B3:97:92:40:0B:9C:21:9A:33:C6:EF:D0
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:a4:60:e6:ed:99:3f:07:52:85:ae:9a:5f:39:d5:f5:23:0a:
93:4c:0d:4f:7d:f0:49:e5:83:c8:83:02:e3:0d:75:b1:bc:af:
7c:8d:2c:67:a0:ae:50:df:86:17:09:b7:30:c8:49:11:28:37:
f4:4f:f6:8c:ed:ef:2d:88:c8:78:3c:e4:5e:c8:08:9a:7a:db:
a9:5e:78:dc:d6:d1:bf:76:bf:9f:a2:7d:d1:2f:f1:77:89:f9:
dc:95:62:0e:db:ae:92:37:49:70:e6:a7:2e:24:46:4d:bb:12:
3f:98:01:13:3f:0c:dc:58:21:97:56:a9:b2:06:07:13:31:7d:
39:89:64:48:97:a3:7c:89:53:88:56:db:a7:f1:dd:b1:f9:9f:
02:6b:eb:0e:16:3a:8e:9d:64:df:3f:0b:8e:97:04:75:97:4f:
40:27:5c:37:44:c7:c0:98:75:82:00:93:5e:de:39:d3:b4:48:
7e:35:be:57:a4:51:30:2b:62:bf:b2:7e:d2:5b:07:35:ee:67:
67:9d:fa:e6:98:3f:8f:73:92:f6:87:32:56:cc:0d:d6:a1:4f:
13:df:ac:b7:a7:4b:f5:1f:55:15:66:9c:19:58:f3:52:a9:4c:
57:bf:50:a8:f3:c9:47:db:c3:f0:29:48:11:18:0e:24:e4:31:
35:be:d4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:26:49 2026 by rpki-client