
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier: 19TQLEjPl1+LBg5O1+qMXCU2Od+6N2aO+5KzyjNE1lU=
Subject key identifier: E0:65:E3:52:E4:12:0B:E9:4C:09:7B:E6:E4:16:44:57:CB:97:78:B8
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 0263
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number: 0255
Signing time: Sat 13 Jun 2026 02:21:16 +0000
Manifest this update: Sat 13 Jun 2026 02:21:16 +0000
Manifest next update: Sat 20 Jun 2026 02:21:16 +0000
Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: 0tD0hj035ghAJOrrJa4RBesxe3IYP0Z2UtyFuUFQO8Q=)
2: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: z6jab3pPMKE60NZxiOVLMs9nS5ZOotEr05TjZQstmbM=)
3: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: YRzH4mC2bDKEncXqO5K3xqWUSqE5Exwmq1o3B01/Eak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: Jun 13 02:21:16 2026 GMT
Not After : Jun 20 02:21:16 2026 GMT
Subject: CN=6a2cbe9c-6a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:69:fd:87:c2:2a:ad:30:62:8f:73:c8:10:4f:
e2:34:18:e1:4b:1d:8f:25:d2:1f:f8:d8:3f:0d:c7:
02:3e:df:48:9a:95:d3:b4:1a:35:a5:b4:4d:5f:2c:
69:67:6e:00:fd:09:72:e9:68:27:35:a4:09:72:d2:
78:00:e9:35:1d:01:76:7f:06:d4:85:71:29:5a:7c:
d8:7f:60:fa:7f:f7:ec:22:1f:96:9f:6f:8c:96:25:
b6:b7:a7:36:8b:eb:36:5d:5a:81:79:8d:77:91:0a:
7b:43:81:cf:4b:23:f1:ac:45:74:60:61:0f:49:74:
89:b1:2f:1d:74:b4:1b:19:11:b4:f6:e6:54:54:fb:
c3:d0:fc:bb:ec:86:86:fc:c1:cc:19:0d:3d:4a:29:
26:aa:2a:1a:26:f1:a8:7d:ac:da:74:b4:2a:14:33:
85:37:01:c2:6b:cc:3a:c0:c6:ec:d4:b5:3e:d8:b2:
d9:1f:f6:1e:d7:70:85:24:92:0c:b2:a7:34:de:83:
aa:12:5d:f7:d3:27:4c:b2:d8:f5:4f:78:96:2e:e8:
19:41:b7:fc:92:e1:40:b5:99:53:70:a4:2c:8f:60:
a8:b1:22:da:fc:57:dc:5b:a1:9e:c9:1b:bc:06:1e:
48:8e:3c:dd:13:1a:87:d1:b2:37:b3:c9:92:54:95:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:65:E3:52:E4:12:0B:E9:4C:09:7B:E6:E4:16:44:57:CB:97:78:B8
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d4:11:ec:7e:94:48:b9:10:1b:66:d9:27:ad:89:0e:c2:d0:
ed:ec:3b:ef:0c:8a:6f:c9:88:e0:08:ef:99:56:bf:c9:a2:09:
09:f2:57:26:f9:2d:55:c1:cf:5a:79:8b:44:af:a5:93:64:28:
d2:fc:56:e6:df:a8:47:b5:6b:59:ff:80:8c:3f:97:ca:9a:05:
19:d7:53:95:3f:fe:e1:5d:a8:fe:49:4c:12:f4:24:5b:4d:f7:
1b:f2:a3:ba:b4:ee:e4:8f:df:5c:26:7b:6c:3f:63:0a:d7:e6:
f4:10:c2:c9:38:ab:26:0f:e7:69:7c:f9:98:75:a1:06:bd:94:
85:84:ec:84:7a:26:a5:5c:ff:07:af:b0:2c:ba:7e:a3:29:ec:
92:6f:b9:87:02:56:bf:ec:4f:bb:20:98:86:1e:33:32:89:90:
3b:ee:70:8c:e0:4b:0b:54:a4:d4:4a:c1:18:4f:aa:d4:54:9f:
fb:82:09:f3:c7:c3:c0:82:29:d0:e4:e6:35:45:50:83:e9:11:
c4:74:56:cf:0a:50:04:be:16:fc:fc:2e:02:fd:d3:cb:d6:43:
cd:c6:6f:42:a9:22:44:3e:3a:fa:8d:cc:ca:93:6f:9e:0e:17:
ca:8e:01:a1:6b:a6:4c:2f:e2:f3:0a:fc:8a:ce:ca:fc:a2:a2:
c9:bb:4c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:43 2026 by rpki-client