
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
File: madm1M-kWp-eN3glBJixJ2jEHho.mft (raw, json)
Hash identifier: 59LURtT1d2/15eQ2NeelnFvl/zcLF2goPgGcmsCRfdI=
Subject key identifier: 4F:C4:86:FD:B4:F5:A8:DB:35:F9:F0:74:E6:0C:C6:AE:BF:7A:23:30
Authority key identifier: 99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
Certificate issuer: /CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
Manifest number: 0129
Signing time: Wed 25 Mar 2026 04:52:00 +0000
Manifest this update: Wed 25 Mar 2026 04:51:59 +0000
Manifest next update: Wed 01 Apr 2026 04:51:59 +0000
Files and hashes: 1: madm1M-kWp-eN3glBJixJ2jEHho.crl (hash: cZv0HTYrzE4I18UP9pUahinMxJ3A7naZUqUiHT5VboM=)
2: 4DD8750E69A611EF84A27584C4F9AE02.roa (hash: VOUYAm4vUARPOBx8hzx51ITs/3U+Tn4nx1d9cHtgB/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl
rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155501, serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
Validity
Not Before: Mar 25 04:51:59 2026 GMT
Not After : Apr 1 04:51:59 2026 GMT
Subject: CN=69c369f0-ae8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:be:a1:30:63:5d:63:9c:09:14:10:5d:00:ef:
c4:f1:8b:7b:ec:8b:91:1c:f6:e0:ed:c8:ef:77:12:
a7:67:54:61:26:08:a0:d3:d7:88:49:c0:34:63:6e:
9e:4a:b0:e7:4d:cb:3a:10:4f:91:7a:0c:37:24:2c:
b3:74:93:75:ab:bf:ea:57:9e:f0:ea:a5:af:98:e7:
1e:55:90:7a:5c:0a:12:33:22:42:b7:dd:19:2c:f5:
7d:83:ee:4a:53:10:59:96:9c:c1:d0:7f:88:9a:33:
23:c4:e3:5b:bc:d9:5c:dd:d7:6f:24:b1:71:08:07:
db:bf:01:50:d2:9e:9f:2e:aa:ec:f6:67:3b:45:6e:
a8:38:a3:4d:a5:f2:a9:2e:b7:a7:6c:77:ef:25:1c:
a8:1a:3c:2b:ab:8c:0a:4c:5b:71:83:c2:3c:89:b6:
d9:ff:98:74:14:88:fe:1c:fb:96:5a:97:76:1a:8e:
a4:32:f1:ac:e8:79:4e:0a:3d:73:05:65:87:ed:ed:
62:7d:ca:23:a2:2d:aa:6f:d7:51:3f:ca:75:4c:aa:
92:b9:64:49:d1:27:16:65:15:6c:9a:69:cb:b8:c9:
d8:6c:06:d7:99:41:6e:e7:2b:f7:57:ac:37:7d:8d:
7c:99:2d:f2:c0:a0:e8:59:3b:e8:ba:7f:bb:e8:a4:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C4:86:FD:B4:F5:A8:DB:35:F9:F0:74:E6:0C:C6:AE:BF:7A:23:30
X509v3 Authority Key Identifier:
keyid:99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f9:b1:0a:63:2d:a3:2e:e5:71:dc:66:50:9f:30:74:5d:b5:
e9:b9:d4:74:1d:c0:62:96:2e:94:24:ce:b3:e3:70:fb:17:52:
d2:a0:57:9b:c4:a0:9e:97:6a:91:16:27:57:5a:39:d4:f8:50:
dd:d6:57:f4:60:39:71:e9:07:41:e6:96:f7:94:e9:2e:5e:27:
7e:ef:2c:f7:64:35:7c:9a:1f:a1:54:bf:43:59:bd:b1:62:83:
77:3a:b2:0f:7e:2a:16:ce:61:14:e9:a5:f0:ee:2f:13:7e:1d:
36:14:ea:23:a6:d1:53:b8:07:24:a5:55:e8:d9:5a:c0:c1:8f:
12:1a:f9:34:b2:8a:8c:41:7e:61:af:38:7e:31:99:03:f8:72:
bd:85:2b:b1:8a:67:78:9b:03:51:cd:69:f3:d4:ea:de:31:8a:
2f:ed:16:63:67:0f:4c:66:07:05:17:81:08:25:bc:b2:83:94:
06:75:58:96:db:c9:fc:67:70:bc:b2:75:a1:6c:30:b6:69:f4:
53:2c:27:b7:41:ed:f7:72:5a:66:bb:1a:04:36:a0:ef:57:0e:
74:b9:4c:fa:57:6a:16:ea:10:11:fa:25:66:50:bc:2f:20:e6:
30:b6:05:71:e4:14:9b:fc:fb:6e:7b:a1:69:f9:5d:dd:1c:6f:
a9:56:e1:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU1MDExMTAvBgNVBAUTKDk5QTc2NkQ0Q0ZBNDVBOUY5RTM3NzgyNTA0OThCMTI3
NjhDNDFFMUEwHhcNMjYwMzI1MDQ1MTU5WhcNMjYwNDAxMDQ1MTU5WjAYMRYwFAYD
VQQDEw02OWMzNjlmMC1hZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7L6hMGNdY5wJFBBdAO/E8Yt77IuRHPbg7cjvdxKnZ1RhJgig09eIScA0Y26e
SrDnTcs6EE+Regw3JCyzdJN1q7/qV57w6qWvmOceVZB6XAoSMyJCt90ZLPV9g+5K
UxBZlpzB0H+ImjMjxONbvNlc3ddvJLFxCAfbvwFQ0p6fLqrs9mc7RW6oOKNNpfKp
LrenbHfvJRyoGjwrq4wKTFtxg8I8ibbZ/5h0FIj+HPuWWpd2Go6kMvGs6HlOCj1z
BWWH7e1ifcojoi2qb9dRP8p1TKqSuWRJ0ScWZRVsmmnLuMnYbAbXmUFu5yv3V6w3
fY18mS3ywKDoWTvoun+76KS+KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/Ehv20
9ajbNfnwdOYMxq6/eiMwMB8GA1UdIwQYMBaAFJmnZtTPpFqfnjd4JQSYsSdoxB4a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTUwMS8yNjg4RTMwMjY4
REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dwLWVOM2dsQkppeEoyakVI
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21hZG0xTS1rV3AtZU4zZ2xCSml4SjJqRUhoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTUwMS8yNjg4RTMwMjY4REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dw
LWVOM2dsQkppeEoyakVIaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADPmxCmMtoy7lcdxmUJ8wdF216bnUdB3AYpYulCTOs+Nw+xdS0qBXm8Sgnpdq
kRYnV1o51PhQ3dZX9GA5cekHQeaW95TpLl4nfu8s92Q1fJofoVS/Q1m9sWKDdzqy
D34qFs5hFOml8O4vE34dNhTqI6bRU7gHJKVV6NlawMGPEhr5NLKKjEF+Ya84fjGZ
A/hyvYUrsYpneJsDUc1p89Tq3jGKL+0WY2cPTGYHBReBCCW8soOUBnVYltvJ/Gdw
vLJ1oWwwtmn0Uywnt0Ht93JaZrsaBDag71cOdLlM+ldqFuoQEfolZlC8LyDmMLYF
ceQUm/z7bnuhafld3RxvqVbhQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:10 2026 by rpki-client