
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier: aB8B7v3/lB2vlQ/TIXrLmq9EI69SR+i8GI8TTfV16J0=
Subject key identifier: 5D:B3:D4:EF:A0:64:4A:53:07:2E:81:66:1C:74:30:11:26:65:26:1B
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number: 0239
Signing time: Fri 17 Apr 2026 02:21:31 +0000
Manifest this update: Fri 17 Apr 2026 02:21:30 +0000
Manifest next update: Fri 24 Apr 2026 02:21:30 +0000
Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: EytsHUVZQNkg42EP84pEfEhHQTyWAcWtQlwMEZyVtbU=)
2: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: z6jab3pPMKE60NZxiOVLMs9nS5ZOotEr05TjZQstmbM=)
3: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: YRzH4mC2bDKEncXqO5K3xqWUSqE5Exwmq1o3B01/Eak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:21:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: Apr 17 02:21:30 2026 GMT
Not After : Apr 24 02:21:30 2026 GMT
Subject: CN=69e1992a-805d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:61:84:6d:20:e8:29:35:d8:96:21:c3:dc:
53:60:08:1d:c4:df:ed:e1:eb:85:0d:a9:43:35:93:
ed:f4:2e:19:00:c3:e7:50:a4:ba:df:83:59:b2:26:
49:0c:b1:32:76:c9:47:1c:e6:bb:95:4a:d9:1b:26:
b4:ef:96:3e:72:c2:94:20:86:97:9b:77:3f:9f:36:
c0:ab:34:24:6e:a9:53:19:3a:1a:1b:d2:3f:5f:8c:
57:0b:4c:1c:4e:11:c9:60:e7:fd:29:ac:d8:a7:b4:
8b:9e:a5:5e:ff:aa:eb:cb:31:dd:5a:9e:7e:5a:39:
24:a4:4d:4b:a7:17:c7:cf:6b:81:a9:4b:46:02:e9:
13:ff:1e:9f:cf:ae:a7:30:24:68:34:13:fa:97:8c:
47:5e:0c:c9:40:a0:f6:66:76:4f:44:4e:d6:84:d9:
88:ff:10:9f:ff:31:8c:35:a4:83:31:a6:c9:06:ef:
38:d4:87:d0:f1:aa:40:c9:1a:5a:47:84:63:c5:d1:
3b:47:e7:ab:82:23:a7:ed:ea:c4:1a:eb:20:bf:6e:
de:39:70:30:87:51:b4:44:1e:bf:a2:0e:3d:08:f3:
b5:fd:f2:2a:f0:16:16:02:3c:79:bd:65:e1:e6:af:
00:f6:f0:b6:92:e0:0d:b3:86:48:5b:93:66:79:15:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B3:D4:EF:A0:64:4A:53:07:2E:81:66:1C:74:30:11:26:65:26:1B
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:22:fd:32:e0:c7:c7:62:01:be:2e:05:a8:08:3a:d5:b4:16:
4e:14:42:4c:15:7d:e1:c0:1e:82:da:da:c8:57:61:4a:e2:29:
a6:13:38:fc:f2:4f:c7:43:63:a1:53:08:20:15:9d:7e:78:80:
99:b9:dd:c6:de:04:c9:8c:09:4b:92:0f:be:90:4c:d4:da:f0:
fe:99:68:16:0c:ed:e2:7f:2e:d0:24:95:72:17:1f:25:60:6a:
fb:2b:9f:3d:15:a1:c4:20:c8:1a:05:05:29:c6:c6:2c:78:2b:
d4:a1:a0:9b:48:4c:f7:4d:9c:da:30:5f:11:6f:21:95:58:13:
97:75:69:3c:bd:5c:39:36:ea:6a:f2:fb:87:1f:cb:01:32:40:
f2:ce:64:90:33:7c:61:37:4f:a9:9b:7c:c3:71:d0:00:e5:7c:
3b:66:c0:b5:3c:3e:ca:a6:bb:c8:7c:79:cf:b9:e0:c5:8e:4c:
43:bc:b7:da:11:6f:2f:51:6d:29:90:9d:33:92:7d:d9:a2:aa:
37:6a:20:b1:65:0e:14:72:2e:c6:77:90:dd:44:e2:7a:fb:b8:
93:bd:4b:96:74:46:d8:5f:bc:08:43:d1:31:f8:27:e2:cd:1b:
df:ae:30:70:be:2e:a8:76:cb:05:c1:39:a1:7c:04:87:14:b8:
3d:d8:aa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:48 2026 by rpki-client