
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json)
Hash identifier: 6g/o7yoHt9J0HhYyRYDep8CaLprbMvRB9kX4ED7TVlA=
Subject key identifier: 3D:9B:15:29:74:C3:13:31:E0:97:02:13:39:B0:FC:E9:92:3E:AD:78
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
Manifest number: 88
Signing time: Sun 05 Apr 2026 06:59:13 +0000
Manifest this update: Sun 05 Apr 2026 06:59:12 +0000
Manifest next update: Sun 12 Apr 2026 06:59:12 +0000
Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: lPXeShdUxNbhEpPngGu7xe4KcM6KQfDtX5WmEO/SJp4=)
2: D2B93B4C638211F087594469C4F9AE02.roa (hash: 0ADq3jBBf/c9J6sONIRmYmNIcZxt7ll3xQLzW23RQrY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Validity
Not Before: Apr 5 06:59:12 2026 GMT
Not After : Apr 12 06:59:12 2026 GMT
Subject: CN=69d20841-3706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:f6:c5:07:60:23:ee:5c:83:ba:ce:b3:f3:
0f:13:76:91:11:5c:61:57:19:59:7b:ca:16:65:3b:
9e:d2:6a:d3:a9:f7:26:d8:cc:38:8f:83:ec:65:fa:
b1:67:c8:0b:e7:ad:72:a4:75:ea:6c:fa:71:56:71:
d1:97:e4:88:85:d8:8d:78:dc:c5:f4:a2:7b:63:4c:
62:66:35:fb:53:dd:cf:bb:da:d0:3b:f4:d7:5d:0a:
da:4a:51:01:97:53:ed:c1:7f:94:ac:48:50:39:10:
71:6b:f4:09:bc:ae:11:05:11:66:c0:4b:9a:72:f8:
54:44:77:82:74:98:4f:b9:26:62:f2:60:77:42:42:
1e:9c:02:da:e1:f2:07:9c:fb:b4:f5:3b:fd:7d:aa:
97:48:a0:84:0b:8d:a7:5c:bb:7d:d4:ee:12:0a:03:
48:d8:c7:24:56:7c:69:6f:2c:72:b2:72:92:7c:3b:
9d:51:5f:25:cd:37:ac:df:2b:59:c8:23:9a:50:92:
af:a3:b8:4d:77:8c:dc:4d:bd:8c:dc:d3:5c:3e:1b:
0f:c6:20:95:e8:cc:fa:05:5a:25:83:20:84:36:46:
72:77:e1:2d:4e:87:6a:d5:85:1c:01:10:49:6c:a1:
49:35:99:cf:26:81:8b:7d:5f:00:94:c0:4e:5e:96:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9B:15:29:74:C3:13:31:E0:97:02:13:39:B0:FC:E9:92:3E:AD:78
X509v3 Authority Key Identifier:
keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7e:e7:1e:37:83:5b:d7:d0:b2:b8:ce:d8:99:86:a3:91:79:
69:60:67:e7:ab:1e:f7:c5:b8:94:3b:fb:4d:8d:a6:e1:f1:e2:
cb:33:42:be:58:c4:77:05:45:a4:a2:71:0d:d3:7c:51:9a:7c:
25:99:f4:c1:43:6c:51:80:1b:fe:23:8d:8a:c5:9f:a1:37:2c:
2b:3d:d6:e4:74:13:9a:ec:0f:90:c7:e1:ad:dd:b8:4d:2d:9f:
5c:b6:60:5e:da:e6:19:79:60:8e:24:31:8d:c5:47:99:63:a6:
9f:bc:2f:ae:93:55:e1:45:2e:44:b9:fd:46:f8:e1:66:04:0a:
6d:49:c6:6f:0a:a1:36:d4:a1:96:f7:64:bb:20:95:cb:c9:a2:
10:b9:58:24:e6:c2:75:8c:56:d5:b3:a3:df:24:a1:c0:1b:08:
59:95:e0:ea:15:d2:e4:9f:85:d3:42:cd:a5:0e:c1:86:05:bb:
92:a6:b2:2f:c7:6c:f6:eb:44:3f:d3:bd:7b:08:50:6a:37:7b:
91:47:e1:5a:9a:51:58:55:cd:d4:b4:19:7f:f4:73:a8:90:bc:
7e:67:5e:69:d9:e5:5c:f9:63:e8:bf:33:70:5c:e5:73:1b:40:
74:b5:8c:5f:79:bd:47:5a:27:1a:56:4e:c1:23:51:d5:74:5a:
6c:1f:cf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:34 2026 by rpki-client