
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json)
Hash identifier: 0f4KIA+3/7dCKLqYxb2rKkxLFDqhyFPnpkP4QOpQ7f4=
Subject key identifier: A5:BD:FA:59:B6:E0:1A:99:27:02:18:22:35:1C:2E:CF:C7:14:8D:BB
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
Manifest number: F5
Signing time: Thu 29 Oct 2026 07:06:23 +0000
Manifest this update: Thu 29 Oct 2026 07:06:23 +0000
Manifest next update: Thu 05 Nov 2026 07:06:23 +0000
Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: naT102bx8vmQIhUe94xx6Nhitvmhuwad+eYbnOPg5T0=)
2: 2EC0243A89E011F1B81BDF965611F970.roa (hash: Nq+dCQHf90s4zW0PH0vEDjROrWf2N7+/pmtAxto3En8=)
3: 904FFA4A89E011F19D4A2A975611F970.roa (hash: DFAio1T3pAvkyo5GJuUxGnxD4vcze6AJnYJ5qLjBlVM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 07:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Validity
Not Before: Oct 29 07:06:23 2026 GMT
Not After : Nov 5 07:06:23 2026 GMT
Subject: CN=6ae2f06f-884d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:ee:a0:31:b9:33:91:56:58:c9:39:05:7f:
3f:97:44:ca:f5:8e:3e:40:47:81:c0:a3:67:6c:fd:
f4:d1:cc:63:15:f3:0f:db:b6:ce:c1:98:cd:71:b9:
e1:a7:ca:27:9e:2e:8f:cb:b7:85:b1:14:ac:02:3e:
c7:cc:db:5d:5d:81:d2:41:e3:f5:43:2a:a5:50:27:
11:6b:b9:de:8b:71:1c:aa:0b:79:0d:30:20:9c:91:
d0:c4:cf:a1:6e:5c:7c:9b:d4:4d:cb:91:d1:c5:15:
20:63:ab:a3:9a:62:a7:3d:d5:41:8a:ee:bf:e0:48:
c0:a2:07:db:ab:93:28:10:5c:88:73:02:9e:b4:52:
31:62:0e:5c:99:4d:15:11:c6:a0:f5:f8:4a:06:e6:
50:ca:cf:67:30:cb:b8:98:07:cb:04:39:26:05:17:
29:77:b0:83:5d:10:3e:79:89:3a:15:fa:a0:7e:dc:
88:7d:c6:5c:a6:d1:23:2d:65:d9:0d:cf:bd:20:13:
b6:ec:d8:4f:45:5d:dc:6f:9a:90:6e:c5:21:fc:a1:
d4:75:a9:61:db:8d:d9:d1:ea:89:10:3f:20:86:df:
66:41:16:ef:ad:7e:72:7d:80:e3:ba:42:3f:3d:4f:
c4:21:c4:e3:04:f6:c1:f3:2f:35:b5:16:64:eb:cf:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BD:FA:59:B6:E0:1A:99:27:02:18:22:35:1C:2E:CF:C7:14:8D:BB
X509v3 Authority Key Identifier:
keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:06:d3:aa:e3:b3:15:fe:53:e6:2e:ec:0f:a6:eb:26:31:56:
16:f4:74:82:7f:1d:81:30:ca:13:d3:a7:23:e5:d4:e8:9f:22:
9d:3e:80:13:04:77:3d:dc:5a:ad:02:db:87:79:f3:c8:4b:98:
93:db:6e:8d:ec:c2:cd:68:f7:84:1d:23:1d:13:de:37:c7:94:
71:57:ab:f2:dd:fc:6a:43:9d:62:91:9b:15:41:61:e9:b4:cb:
24:ad:34:0d:b6:67:5d:a9:7c:c9:ac:13:2e:d6:b4:60:e1:af:
ba:72:eb:70:02:bb:05:1c:e1:c6:e2:42:e1:6b:4e:8a:ff:af:
a6:2c:83:0a:34:df:12:c1:6d:05:ae:94:e7:31:59:64:e8:45:
f7:23:d9:4f:79:57:97:47:34:30:d6:fe:f9:94:50:15:0f:46:
0a:b6:52:b9:eb:bd:5a:8d:1f:5b:d2:44:29:4b:36:3b:ab:01:
94:49:b6:ab:e8:64:5d:b0:0f:58:dc:27:36:8d:36:55:52:61:
df:d5:76:fc:21:16:d1:0a:75:47:6e:19:f7:64:d3:45:74:bd:
bf:b6:f6:b9:43:78:19:78:6e:16:48:e1:94:0c:a3:6d:1c:e9:
7f:77:24:60:f2:53:04:88:ab:ab:71:45:3e:12:16:f6:a1:6f:
aa:27:37:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:02:38 2026 by rpki-client