
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json)
Hash identifier: WeGxa2IEaqPSpIZ2tDpMTi+loEuHacKE5CyWo/h4MNQ=
Subject key identifier: 2E:73:4C:61:3E:AA:17:27:B4:4E:B2:30:EC:FD:9C:DB:3E:9D:9D:B6
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
Manifest number: DC
Signing time: Wed 09 Sep 2026 07:04:52 +0000
Manifest this update: Wed 09 Sep 2026 07:04:51 +0000
Manifest next update: Wed 16 Sep 2026 07:04:51 +0000
Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: lwaXKybKVC5haUe0dMQS9g02zpqWchgW29iGSGEnKdA=)
2: 904FFA4A89E011F19D4A2A975611F970.roa (hash: DFAio1T3pAvkyo5GJuUxGnxD4vcze6AJnYJ5qLjBlVM=)
3: 2EC0243A89E011F1B81BDF965611F970.roa (hash: Nq+dCQHf90s4zW0PH0vEDjROrWf2N7+/pmtAxto3En8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 07:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Validity
Not Before: Sep 9 07:04:51 2026 GMT
Not After : Sep 16 07:04:51 2026 GMT
Subject: CN=6aa10514-cd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:3a:18:c4:4e:29:e4:25:f4:d2:05:a0:ce:
d5:a2:b3:9a:72:75:7a:cc:63:5f:3b:f2:f7:93:36:
5a:dc:f3:34:2d:fe:80:fd:61:03:29:2c:56:11:dc:
be:70:f3:24:90:6b:90:ac:68:32:90:fe:fb:25:2a:
e1:7b:38:9a:13:d8:8b:9c:ef:c0:e7:bf:ec:1e:02:
59:82:b3:1c:e5:88:aa:49:09:c8:55:a4:d8:4d:14:
95:f8:0c:d5:da:18:65:42:a9:df:fe:48:43:84:19:
fa:10:1e:49:8f:43:6c:6b:a3:5b:a0:1e:d3:3a:14:
57:4a:41:5e:07:dd:b2:95:81:8c:b9:64:10:9c:7c:
4f:ae:ee:34:27:89:de:0b:79:64:57:cf:66:cd:ac:
ec:91:a8:06:fe:08:58:21:af:42:2e:a2:42:9b:7e:
83:6a:ca:34:bd:7b:3d:a6:00:e1:c2:71:b7:d8:43:
4d:99:73:6a:2b:44:fe:b1:96:26:20:22:47:06:b7:
71:b5:b3:fa:01:58:66:ca:2c:ab:7f:8c:f6:af:68:
09:6f:91:9a:d8:c8:97:fe:20:d7:3f:56:10:1b:df:
d4:e4:27:34:2a:19:e7:14:e2:c0:d3:9b:83:be:20:
10:e8:93:4c:54:ba:9d:4b:23:13:25:05:95:bb:7c:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:73:4C:61:3E:AA:17:27:B4:4E:B2:30:EC:FD:9C:DB:3E:9D:9D:B6
X509v3 Authority Key Identifier:
keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f6:ef:87:39:b2:69:0b:96:37:8b:7b:45:79:be:44:3a:45:
60:5c:15:2d:6a:e1:2c:88:d2:94:1e:fc:6c:8d:4e:10:97:1b:
f8:4a:4a:36:fa:39:d6:c2:7d:36:2e:78:2c:fd:80:cd:4c:80:
92:1e:f1:1f:ee:7a:46:1c:6d:d8:d2:b8:c4:83:00:1d:69:2b:
ed:62:40:93:18:5f:b7:d8:78:b6:36:86:10:6b:71:76:e9:a4:
23:87:24:13:1c:ef:aa:e2:3c:27:4b:24:d5:6c:39:93:c5:c9:
73:9e:73:5c:4d:3e:90:67:fc:d5:bb:c8:ca:74:e8:b8:05:1d:
b4:f2:63:ee:b3:fd:a2:79:2a:22:27:93:ca:1b:30:f4:ca:b9:
54:9a:f2:86:69:8e:e7:b1:fb:14:25:6d:f1:91:f7:20:fc:33:
44:65:78:24:1e:8b:a8:81:45:ac:4f:44:87:2b:d7:05:96:3d:
2b:38:72:f3:02:1f:e8:a1:49:ee:51:e1:9e:c3:d8:31:e6:09:
ff:88:62:24:d9:79:8d:85:50:62:b9:bc:96:05:91:2a:cf:64:
35:76:11:a5:58:e9:94:44:dd:93:51:99:bf:82:ab:3b:04:35:
2a:10:e1:e7:33:a0:19:21:ea:41:df:92:dc:66:5b:dd:d5:3b:
8a:fc:82:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdFRjIxMTAvBgNVBAUTKDZBNDk3RUVENUY0RkUyQzE1MTY0REQyRDA3RkM0REQ1
MkJDRTg5MjEwHhcNMjYwOTA5MDcwNDUxWhcNMjYwOTE2MDcwNDUxWjAYMRYwFAYD
VQQDEw02YWExMDUxNC1jZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsps6GMROKeQl9NIFoM7VorOacnV6zGNfO/L3kzZa3PM0Lf6A/WEDKSxWEdy+
cPMkkGuQrGgykP77JSrheziaE9iLnO/A57/sHgJZgrMc5YiqSQnIVaTYTRSV+AzV
2hhlQqnf/khDhBn6EB5Jj0Nsa6NboB7TOhRXSkFeB92ylYGMuWQQnHxPru40J4ne
C3lkV89mzazskagG/ghYIa9CLqJCm36Daso0vXs9pgDhwnG32ENNmXNqK0T+sZYm
ICJHBrdxtbP6AVhmyiyrf4z2r2gJb5Ga2MiX/iDXP1YQG9/U5Cc0KhnnFOLA05uD
viAQ6JNMVLqdSyMTJQWVu3wQMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC5zTGE+
qhcntE6yMOz9nNs+nZ22MB8GA1UdIwQYMBaAFGpJfu1fT+LBUWTdLQf8TdUrzokh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0VGMi82QUZCRTQ0QzYz
ODExMUYwQTMzRDIzNjRDNEY5QUUwMi9ha2wtN1Y5UDRzRlJaTjB0Ql94TjFTdk9p
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FrbC03VjlQNHNGUlpOMHRCX3hOMVN2T2lTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0VGMi82QUZCRTQ0QzYzODExMUYwQTMzRDIzNjRDNEY5QUUwMi9ha2wtN1Y5UDRz
RlJaTjB0Ql94TjFTdk9pU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAx/bvhzmyaQuWN4t7RXm+RDpFYFwVLWrhLIjSlB78bI1OEJcb+EpKNvo51sJ9
Ni54LP2AzUyAkh7xH+56Rhxt2NK4xIMAHWkr7WJAkxhft9h4tjaGEGtxdumkI4ck
ExzvquI8J0sk1Ww5k8XJc55zXE0+kGf81bvIynTouAUdtPJj7rP9onkqIieTyhsw
9Mq5VJryhmmO57H7FCVt8ZH3IPwzRGV4JB6LqIFFrE9EhyvXBZY9Kzhy8wIf6KFJ
7lHhnsPYMeYJ/4hiJNl5jYVQYrm8lgWRKs9kNXYRpVjplETdk1GZv4KrOwQ1KhDh
5zOgGSHqQd+S3GZb3dU7ivyC4A==
-----END CERTIFICATE-----
Generated at Fri Sep 11 06:16:48 2026 by rpki-client