
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
File: madm1M-kWp-eN3glBJixJ2jEHho.mft (raw, json)
Hash identifier: 9og09aE0ppMGWwsQyGsgDO7HGX6VXteLdUnPU2wSnRE=
Subject key identifier: E2:66:AB:62:56:ED:4E:54:F7:57:A5:D6:14:2E:A9:30:B7:D9:CD:AD
Authority key identifier: 99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
Certificate issuer: /CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
Manifest number: 011B
Signing time: Sun 01 Mar 2026 06:51:13 +0000
Manifest this update: Sun 01 Mar 2026 06:51:13 +0000
Manifest next update: Sun 08 Mar 2026 06:51:13 +0000
Files and hashes: 1: madm1M-kWp-eN3glBJixJ2jEHho.crl (hash: 1v5P6TiQTYCbg9RP2dreEzB4Kiqucd5fUsSEb+qUUAU=)
2: 4DD8750E69A611EF84A27584C4F9AE02.roa (hash: kQamVFgmYMR8msjGru66GiLhfU+VJZnNEztLqZV6JgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl
rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155501, serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
Validity
Not Before: Mar 1 06:51:13 2026 GMT
Not After : Mar 8 06:51:13 2026 GMT
Subject: CN=69a3e1e1-c3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:5a:5b:dc:af:b6:3d:a8:d6:f5:cf:cd:3b:
c3:d4:52:d8:f1:28:0b:e7:3a:91:6c:25:0c:df:d0:
19:56:bd:5a:a8:67:fd:90:67:42:0e:b9:ea:98:37:
63:ba:04:f8:d6:55:c5:fd:fb:7b:93:33:03:5b:3d:
13:7f:d2:75:3c:16:c9:3b:4a:da:94:c4:37:ed:94:
b5:37:ac:01:cf:10:72:52:3a:90:d6:1c:d0:31:28:
04:78:0a:aa:03:e9:d3:34:d0:79:9d:a7:ed:9a:26:
b2:fc:47:fb:bc:2a:f9:e5:5c:8a:00:c8:d4:e7:42:
75:a9:18:ca:86:3f:73:62:68:46:a1:16:77:0b:3b:
e0:88:d1:0f:61:0f:af:7e:5e:57:5e:ea:54:ef:22:
5b:73:ae:8c:31:2a:2f:cf:56:1b:6f:b3:50:07:21:
a4:6a:52:fb:ac:6f:f5:37:e0:10:2e:21:c2:57:8f:
a8:c7:7c:44:21:f7:5a:e9:9b:6f:1e:cf:c4:d5:44:
e7:7d:7f:0f:5d:e8:02:f0:38:4c:31:df:63:5e:87:
73:f2:8e:75:c8:ad:36:a5:2b:de:53:ab:b3:9f:73:
b1:f4:23:98:87:84:bb:a1:e6:2b:5b:96:ed:07:da:
04:c5:f6:77:15:21:5a:be:af:a3:fc:72:f1:59:ff:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:66:AB:62:56:ED:4E:54:F7:57:A5:D6:14:2E:A9:30:B7:D9:CD:AD
X509v3 Authority Key Identifier:
keyid:99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:e6:46:7a:a6:f0:1c:7b:c4:5e:f9:7a:c7:5c:af:03:ed:f4:
ae:fc:25:cd:a0:72:ec:8e:b8:b0:99:3d:4d:bb:87:01:1f:83:
c7:c0:12:8a:61:98:73:7f:cb:8a:bc:68:f7:e7:6d:33:49:75:
35:3c:81:21:93:4b:34:4f:43:0a:fc:3e:98:65:a0:98:fa:c9:
f9:70:68:74:28:9a:77:78:3d:ef:4c:1e:94:26:0e:e2:e8:6f:
97:bd:5c:cd:6f:c7:0d:77:2b:6f:f8:c1:a7:48:d9:48:d8:23:
7a:c4:ae:39:ea:a5:df:b3:b6:f0:a7:5b:cf:94:f4:44:92:cf:
51:79:40:4c:23:cc:65:b8:21:d2:19:fe:8d:dc:42:71:a4:67:
2f:c5:3a:e5:81:0c:60:3d:03:1f:5e:f0:6a:15:f5:ab:f7:e4:
b7:63:e8:2f:21:b4:2c:2a:2a:3c:de:b4:d5:bf:86:2b:66:2e:
3c:8e:bf:be:0b:db:7b:86:3a:5f:bb:2b:5e:b4:b5:8b:b5:39:
2e:c6:40:85:b2:e5:d9:aa:35:0b:07:04:e2:4e:bb:18:57:e6:
05:ca:48:da:33:ea:0c:b3:db:fe:b2:42:d8:c3:6f:40:f4:6d:
09:f8:fc:dc:70:4a:84:2f:e2:0a:61:3e:4a:be:88:e8:00:65:
95:02:41:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU1MDExMTAvBgNVBAUTKDk5QTc2NkQ0Q0ZBNDVBOUY5RTM3NzgyNTA0OThCMTI3
NjhDNDFFMUEwHhcNMjYwMzAxMDY1MTEzWhcNMjYwMzA4MDY1MTEzWjAYMRYwFAYD
VQQDEw02OWEzZTFlMS1jM2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxBdaW9yvtj2o1vXPzTvD1FLY8SgL5zqRbCUM39AZVr1aqGf9kGdCDrnqmDdj
ugT41lXF/ft7kzMDWz0Tf9J1PBbJO0ralMQ37ZS1N6wBzxByUjqQ1hzQMSgEeAqq
A+nTNNB5naftmiay/Ef7vCr55VyKAMjU50J1qRjKhj9zYmhGoRZ3CzvgiNEPYQ+v
fl5XXupU7yJbc66MMSovz1Ybb7NQByGkalL7rG/1N+AQLiHCV4+ox3xEIfda6Ztv
Hs/E1UTnfX8PXegC8DhMMd9jXodz8o51yK02pSveU6uzn3Ox9COYh4S7oeYrW5bt
B9oExfZ3FSFavq+j/HLxWf/kdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJmq2JW
7U5U91el1hQuqTC32c2tMB8GA1UdIwQYMBaAFJmnZtTPpFqfnjd4JQSYsSdoxB4a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTUwMS8yNjg4RTMwMjY4
REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dwLWVOM2dsQkppeEoyakVI
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21hZG0xTS1rV3AtZU4zZ2xCSml4SjJqRUhoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTUwMS8yNjg4RTMwMjY4REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dw
LWVOM2dsQkppeEoyakVIaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgOZGeqbwHHvEXvl6x1yvA+30rvwlzaBy7I64sJk9TbuHAR+Dx8ASimGYc3/L
irxo9+dtM0l1NTyBIZNLNE9DCvw+mGWgmPrJ+XBodCiad3g970welCYO4uhvl71c
zW/HDXcrb/jBp0jZSNgjesSuOeql37O28Kdbz5T0RJLPUXlATCPMZbgh0hn+jdxC
caRnL8U65YEMYD0DH17wahX1q/fkt2PoLyG0LCoqPN601b+GK2YuPI6/vgvbe4Y6
X7srXrS1i7U5LsZAhbLl2ao1CwcE4k67GFfmBcpI2jPqDLPb/rJC2MNvQPRtCfj8
3HBKhC/iCmE+Sr6I6ABllQJBGw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:49 2026 by rpki-client