
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
File: madm1M-kWp-eN3glBJixJ2jEHho.mft (raw, json)
Hash identifier: xrIdh/yXwOuyHURM1gpBk2AaWosdXJH9/PGT+8JdgYk=
Subject key identifier: 89:71:05:59:40:B8:A4:59:BB:BF:54:02:EB:62:4B:CD:97:0D:63:56
Authority key identifier: 99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
Certificate issuer: /CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
Manifest number: 0142
Signing time: Wed 13 May 2026 05:25:26 +0000
Manifest this update: Wed 13 May 2026 05:25:26 +0000
Manifest next update: Wed 20 May 2026 05:25:26 +0000
Files and hashes: 1: madm1M-kWp-eN3glBJixJ2jEHho.crl (hash: I2jt3PhGuLFgds/N+PGyzowAPH/nk1gB0uNCLk9VbvU=)
2: 4DD8750E69A611EF84A27584C4F9AE02.roa (hash: VOUYAm4vUARPOBx8hzx51ITs/3U+Tn4nx1d9cHtgB/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl
rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155501, serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
Validity
Not Before: May 13 05:25:26 2026 GMT
Not After : May 20 05:25:26 2026 GMT
Subject: CN=6a040b46-89a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:49:65:e8:34:9b:14:a0:b2:6b:1a:07:3c:d4:
23:8d:e5:ac:53:9a:97:35:9d:7f:79:ff:5e:09:83:
a7:af:77:ec:9a:1b:a9:a6:48:ab:4f:82:4d:6f:8b:
e0:f3:18:27:79:06:b5:67:ad:37:19:d9:a9:d1:d9:
67:f9:3d:77:e3:40:f2:29:0e:4c:e0:47:89:05:9b:
a0:d0:92:b6:aa:26:de:5d:89:7c:d8:56:49:f1:67:
4a:2c:98:1e:6f:0d:67:7e:cf:4f:cc:bd:d4:3f:95:
3b:32:30:67:52:86:16:14:ab:46:44:f0:d2:6e:91:
94:a9:7d:21:a3:85:d9:ad:67:d1:83:34:12:a6:9b:
5b:e2:1d:91:25:d0:42:fc:74:cb:73:cf:45:e0:e4:
dc:69:8a:80:b9:b3:0d:1e:cb:ac:c7:fc:05:3d:9a:
ad:d6:5c:b7:1c:db:f9:ef:e0:d3:ee:38:49:d5:6b:
ad:39:60:58:1e:b4:61:f8:4b:86:d4:95:3e:f9:62:
93:e5:8a:21:fe:e4:d7:05:e3:45:79:6f:84:a5:00:
88:52:bc:77:c0:79:ed:c2:d8:d3:79:6f:58:1e:cf:
90:a7:f4:16:d7:e8:0f:62:2c:da:f3:b2:83:d7:00:
6b:15:4e:92:3f:74:a5:fb:12:24:dc:03:da:86:9d:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:71:05:59:40:B8:A4:59:BB:BF:54:02:EB:62:4B:CD:97:0D:63:56
X509v3 Authority Key Identifier:
keyid:99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c0:1c:f7:4b:af:61:99:8d:4c:d7:3c:7a:54:59:f6:54:08:
a3:48:da:b3:48:b6:e2:ef:65:09:9c:d6:c0:36:b4:63:3d:dd:
4d:b1:78:f3:3b:58:64:6e:a0:09:e8:0f:06:a9:e2:6e:11:06:
b2:c7:3e:28:db:2f:c6:a5:7c:2c:81:54:0a:c3:e3:a2:c8:07:
f3:f6:bb:86:e6:3f:30:25:6d:2d:95:0f:9b:bf:7d:94:a9:84:
24:48:f4:14:9e:be:93:75:33:50:31:2f:9a:0c:63:6e:4f:09:
c0:94:c7:de:87:06:be:3b:b5:96:31:30:30:88:71:a4:15:4c:
45:eb:9d:47:02:b9:12:f3:1f:b4:cb:36:48:76:a8:a1:e4:a9:
16:21:bb:1f:0b:6b:e8:44:9a:e4:50:05:24:e6:8e:f4:25:fd:
43:22:6c:62:5e:f9:18:39:c9:e7:9e:89:d3:1b:16:83:de:f1:
7f:d6:db:f9:b2:cd:6a:42:ce:07:3a:ff:2d:3c:cb:81:e4:93:
40:1e:76:ae:ce:86:d8:74:bd:2a:b8:69:bd:ba:e8:f3:51:e1:
c9:a9:04:4f:d7:ed:ce:06:ec:08:7a:19:5e:aa:2b:57:35:fd:
53:ee:92:d9:93:5c:f2:16:32:47:f5:0a:b9:ce:16:16:83:19:
1c:93:3f:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU1MDExMTAvBgNVBAUTKDk5QTc2NkQ0Q0ZBNDVBOUY5RTM3NzgyNTA0OThCMTI3
NjhDNDFFMUEwHhcNMjYwNTEzMDUyNTI2WhcNMjYwNTIwMDUyNTI2WjAYMRYwFAYD
VQQDEw02YTA0MGI0Ni04OWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjkll6DSbFKCyaxoHPNQjjeWsU5qXNZ1/ef9eCYOnr3fsmhuppkirT4JNb4vg
8xgneQa1Z603Gdmp0dln+T1340DyKQ5M4EeJBZug0JK2qibeXYl82FZJ8WdKLJge
bw1nfs9PzL3UP5U7MjBnUoYWFKtGRPDSbpGUqX0ho4XZrWfRgzQSpptb4h2RJdBC
/HTLc89F4OTcaYqAubMNHsusx/wFPZqt1ly3HNv57+DT7jhJ1WutOWBYHrRh+EuG
1JU++WKT5Yoh/uTXBeNFeW+EpQCIUrx3wHntwtjTeW9YHs+Qp/QW1+gPYiza87KD
1wBrFU6SP3Sl+xIk3APahp0G2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlxBVlA
uKRZu79UAutiS82XDWNWMB8GA1UdIwQYMBaAFJmnZtTPpFqfnjd4JQSYsSdoxB4a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTUwMS8yNjg4RTMwMjY4
REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dwLWVOM2dsQkppeEoyakVI
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21hZG0xTS1rV3AtZU4zZ2xCSml4SjJqRUhoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTUwMS8yNjg4RTMwMjY4REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dw
LWVOM2dsQkppeEoyakVIaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtcAc90uvYZmNTNc8elRZ9lQIo0jas0i24u9lCZzWwDa0Yz3dTbF48ztYZG6g
CegPBqnibhEGssc+KNsvxqV8LIFUCsPjosgH8/a7huY/MCVtLZUPm799lKmEJEj0
FJ6+k3UzUDEvmgxjbk8JwJTH3ocGvju1ljEwMIhxpBVMReudRwK5EvMftMs2SHao
oeSpFiG7Hwtr6ESa5FAFJOaO9CX9QyJsYl75GDnJ556J0xsWg97xf9bb+bLNakLO
Bzr/LTzLgeSTQB52rs6G2HS9Krhpvbro81HhyakET9ftzgbsCHoZXqorVzX9U+6S
2ZNc8hYyR/UKuc4WFoMZHJM/Ng==
-----END CERTIFICATE-----
Generated at Wed May 13 07:54:15 2026 by rpki-client