
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json)
Hash identifier: 5NXwqCYap7IHYl4khBw/kMI5xUqdVD8CCjqmrPMQth4=
Subject key identifier: CA:0F:12:EC:4E:D8:9B:17:E2:05:6C:C4:15:8E:4C:72:53:11:30:27
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
Manifest number: BB
Signing time: Fri 17 Jul 2026 08:13:16 +0000
Manifest this update: Fri 17 Jul 2026 08:13:16 +0000
Manifest next update: Fri 24 Jul 2026 08:13:16 +0000
Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: mG4AxR36KxvhkAGLvV8/nwFCfw6cxTQlamMW/qICagA=)
2: D2B93B4C638211F087594469C4F9AE02.roa (hash: 0ADq3jBBf/c9J6sONIRmYmNIcZxt7ll3xQLzW23RQrY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Validity
Not Before: Jul 17 08:13:16 2026 GMT
Not After : Jul 24 08:13:16 2026 GMT
Subject: CN=6a59e41c-ca63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:17:67:1e:9e:47:21:11:c4:13:12:e9:28:
50:43:70:c1:c2:9f:5e:3b:6b:dc:ae:c2:fe:0e:da:
9a:07:35:5e:8a:aa:23:02:d6:28:99:8f:5c:38:0d:
8a:1a:c7:ba:2b:3d:d1:6a:8e:6c:b5:91:c8:bb:44:
69:93:8a:02:5c:d6:72:58:a2:cb:69:65:d4:15:4c:
9b:03:4f:e0:d0:18:55:61:7f:8e:04:a0:e3:e8:13:
3b:19:25:b9:31:01:bd:33:84:0d:ea:23:6d:ca:28:
37:0a:90:f6:86:12:1b:3e:5b:23:bc:c8:8d:82:e8:
e2:8d:60:c8:2d:98:7e:7d:7a:5e:d8:25:29:bb:a5:
3d:08:75:9e:78:85:6c:5d:23:77:10:5d:cc:d1:6b:
be:2f:17:8a:e6:0f:72:2e:56:27:34:33:7d:96:6a:
41:e0:7e:00:2f:94:54:e1:da:db:c8:3c:e2:c4:af:
67:78:f7:3d:8b:ca:cc:38:0c:57:82:05:12:8d:ab:
11:ba:68:9a:f3:29:d4:f5:19:2e:36:32:2b:4b:bb:
1a:74:95:f8:70:67:dd:23:cd:60:88:0e:9b:b9:31:
f7:cc:1c:53:78:6e:83:fa:4f:d9:76:ab:13:89:9b:
ed:02:2b:cb:c7:11:e8:de:d9:23:57:f6:6d:5e:56:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0F:12:EC:4E:D8:9B:17:E2:05:6C:C4:15:8E:4C:72:53:11:30:27
X509v3 Authority Key Identifier:
keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b5:09:bd:25:01:7a:8b:04:e2:ac:8c:2e:bc:df:7c:a8:5d:
70:cd:22:81:6a:76:bc:64:1b:ed:bd:7b:c9:67:7f:d3:8d:30:
6c:38:5c:c5:8d:e2:c0:9d:c4:2a:35:8a:07:0d:9d:bc:18:7b:
36:26:32:7e:30:28:0c:a0:22:70:8b:1f:d1:24:e2:ab:35:65:
a8:7e:ce:7c:3b:c2:ec:fa:99:ca:de:18:9d:f5:fe:58:69:01:
a4:2b:9b:0c:b3:27:09:f2:9e:63:58:77:1d:fb:c3:ac:b2:48:
65:3f:04:75:ef:b8:8a:08:f4:80:ed:95:39:97:d2:4a:83:a2:
ee:59:ac:77:ef:91:39:f1:0c:24:78:78:d0:8d:0a:65:23:c8:
52:a5:7b:f6:ed:57:44:89:f9:fb:d8:ee:49:17:69:20:9d:4f:
f1:f9:fb:7d:46:00:cd:e0:e8:64:79:b3:33:9a:cc:84:16:bf:
35:ec:ec:02:8b:3e:2d:3e:cd:b5:37:0f:5b:6b:f5:98:a9:54:
a6:fe:77:66:9f:16:2c:ae:74:f2:54:d6:2f:b5:2c:ca:5c:95:
f5:4e:ea:76:18:4f:09:ff:73:c4:a0:7e:af:7c:f0:59:dd:de:
8f:57:79:ec:14:ff:84:dd:a9:f9:79:cb:25:c0:49:e5:dc:1f:
8f:68:cb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:21:13 2026 by rpki-client