
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier: EkOU6JvmP178KKvvLVyIvHnWpuJtpiALpWwPx/TM5Yg=
Subject key identifier: 3C:BE:7C:2F:C3:AA:59:2C:AF:E7:88:8B:79:30:75:61:A9:0D:41:66
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number: 021D
Signing time: Sun 01 Mar 2026 03:36:51 +0000
Manifest this update: Sun 01 Mar 2026 03:36:50 +0000
Manifest next update: Sun 08 Mar 2026 03:36:50 +0000
Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: /HlJvL1JfZbRSXzHw/B8b7slmXDoREkMZnXhG4VmXoM=)
2: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: Ds1Oggb1CXmheiOx4YZNVxU2i1qg8eEHn8KdU83omHg=)
3: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: NvHtd8ujE1yELsuYXTHpNbSZA6sMXQEq9scs3taiBxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:36:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: Mar 1 03:36:50 2026 GMT
Not After : Mar 8 03:36:50 2026 GMT
Subject: CN=69a3b453-6b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:5b:0c:87:0a:92:3f:b2:ec:1c:2a:6d:ff:
d0:98:59:40:1e:57:48:7d:23:9e:83:07:bf:0d:3e:
68:42:e0:a6:b5:9c:3c:ea:50:41:9f:49:6a:30:06:
7c:60:89:2c:28:01:f1:79:b1:e3:7d:75:d0:68:6b:
8d:2c:e6:00:ef:22:09:8b:71:95:5b:52:c5:2b:f1:
6b:6f:b2:e7:7a:aa:83:88:0e:c4:a3:6a:11:ab:cb:
50:2f:65:31:ed:ff:3f:b6:48:15:b0:3c:03:ac:0b:
c8:9f:5d:1a:d2:36:f7:ff:b5:61:b3:20:99:35:84:
bc:e4:a5:cc:ad:38:ec:c3:27:21:c8:a5:61:4c:c5:
b0:bf:96:03:51:53:1e:42:a3:31:07:03:a1:db:4f:
37:e2:c7:cc:c3:e5:c8:06:ab:87:d8:84:af:17:a1:
31:18:4f:03:39:1f:86:8f:c4:60:fa:1c:9c:d4:f8:
a2:b8:62:9a:c6:ee:1b:ae:9a:5b:56:52:3b:e9:8c:
c9:b8:ac:87:6a:1c:0d:71:96:93:1d:3f:f0:4d:ef:
52:64:83:c9:30:8d:00:7a:a8:53:69:a7:d3:d4:8f:
54:38:69:f5:61:4c:49:ae:73:01:ba:0c:13:c6:7e:
7d:f4:b6:f2:9f:3a:08:4e:4e:9c:d9:83:63:03:13:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BE:7C:2F:C3:AA:59:2C:AF:E7:88:8B:79:30:75:61:A9:0D:41:66
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:e7:aa:6e:b0:11:fb:f1:40:d7:c8:30:8e:17:8f:a0:73:7d:
72:14:8c:35:7a:97:62:71:fa:e3:33:0d:0a:a2:52:ce:fc:15:
17:bb:d8:1d:9c:27:72:0a:5d:80:cd:78:a8:a7:00:ac:c5:71:
71:a3:a6:91:00:41:d4:c0:62:92:29:13:22:65:12:e2:5e:4c:
37:6f:18:5a:d9:e5:69:eb:63:d6:96:4f:ff:94:3a:e7:76:e3:
69:b5:1b:6a:ee:9a:9c:c8:1a:10:7c:55:9d:6f:98:94:2f:00:
d1:ab:98:0b:7f:7a:4a:1c:ad:c8:15:a1:a4:90:75:21:77:0c:
e8:15:ae:21:32:b1:97:fd:ad:4f:c0:a8:09:85:6b:55:1c:f2:
29:7c:0f:20:a6:60:0a:13:2d:f1:3d:c4:ad:f1:2b:91:90:0e:
42:31:d0:a8:f8:37:be:6b:1d:b4:01:3e:e1:b9:f3:98:4f:0c:
6b:7f:ae:cf:c2:ae:8a:dc:38:17:de:ff:27:36:8e:94:82:89:
a7:91:7b:02:bc:ce:f7:5a:f8:28:8a:72:76:80:0f:f0:46:f0:
1e:9f:ea:b2:9f:7a:e6:0f:54:41:07:b3:32:02:d2:5a:42:a8:
ca:05:db:1f:e7:24:5b:4e:da:d0:65:0a:aa:cf:07:ab:64:73:
6b:a5:cd:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFCNUIxMTAvBgNVBAUTKDI4ODQ4REMzRjE5RTc3MjlGRkUzN0VGN0U0RjBBNUM5
QzVCNDkwRTkwHhcNMjYwMzAxMDMzNjUwWhcNMjYwMzA4MDMzNjUwWjAYMRYwFAYD
VQQDDA02OWEzYjQ1My02YjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1hFbDIcKkj+y7Bwqbf/QmFlAHldIfSOegwe/DT5oQuCmtZw86lBBn0lqMAZ8
YIksKAHxebHjfXXQaGuNLOYA7yIJi3GVW1LFK/Frb7LneqqDiA7Eo2oRq8tQL2Ux
7f8/tkgVsDwDrAvIn10a0jb3/7VhsyCZNYS85KXMrTjswychyKVhTMWwv5YDUVMe
QqMxBwOh20834sfMw+XIBquH2ISvF6ExGE8DOR+Gj8Rg+hyc1PiiuGKaxu4brppb
VlI76YzJuKyHahwNcZaTHT/wTe9SZIPJMI0AeqhTaafT1I9UOGn1YUxJrnMBugwT
xn599LbynzoITk6c2YNjAxPSgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDy+fC/D
qlksr+eIi3kwdWGpDUFmMB8GA1UdIwQYMBaAFCiEjcPxnncp/+N+9+TwpcnFtJDp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUI1Qi84RDU3RTE3Q0RE
OTUxMUVEQUU4QzZDN0FDNEY5QUUwMi9LSVNOd19HZWR5bl80MzczNVBDbHljVzBr
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tJU053X0dlZHluXzQzNzM1UENseWNXMGtPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MUI1Qi84RDU3RTE3Q0REOTUxMUVEQUU4QzZDN0FDNEY5QUUwMi9LSVNOd19HZWR5
bl80MzczNVBDbHljVzBrT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYueqbrAR+/FA18gwjhePoHN9chSMNXqXYnH64zMNCqJSzvwVF7vYHZwncgpd
gM14qKcArMVxcaOmkQBB1MBikikTImUS4l5MN28YWtnlaetj1pZP/5Q653bjabUb
au6anMgaEHxVnW+YlC8A0auYC396ShytyBWhpJB1IXcM6BWuITKxl/2tT8CoCYVr
VRzyKXwPIKZgChMt8T3ErfErkZAOQjHQqPg3vmsdtAE+4bnzmE8Ma3+uz8Kuitw4
F97/JzaOlIKJp5F7ArzO91r4KIpydoAP8EbwHp/qsp965g9UQQezMgLSWkKoygXb
H+ckW07a0GUKqs8Hq2Rza6XNYQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:28 2026 by rpki-client