
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json)
Hash identifier: RXXPH+dh+2ozHmT29V6b5u4qhY/QhDGu/OI9L6A3058=
Subject key identifier: 48:4C:18:AD:14:00:D5:D0:81:00:01:A6:C2:23:EA:72:2E:C8:5A:F2
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
Manifest number: 9A
Signing time: Mon 11 May 2026 07:33:31 +0000
Manifest this update: Mon 11 May 2026 07:33:31 +0000
Manifest next update: Mon 18 May 2026 07:33:31 +0000
Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: SIkCfs3rhnbdgzy7lHuuES2iFAF+TDczxSeZTUihTR0=)
2: D2B93B4C638211F087594469C4F9AE02.roa (hash: 0ADq3jBBf/c9J6sONIRmYmNIcZxt7ll3xQLzW23RQrY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Validity
Not Before: May 11 07:33:31 2026 GMT
Not After : May 18 07:33:31 2026 GMT
Subject: CN=6a01864b-391c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:43:18:3b:70:ef:fe:e4:39:57:2d:70:3b:
03:09:9b:d2:a8:d6:fd:19:74:52:b9:7b:5f:0e:02:
a9:57:4c:1a:b1:0f:d7:67:88:85:12:33:f4:a7:29:
5b:e9:c2:e2:5c:7b:d3:05:6a:86:54:ec:42:c9:52:
a1:48:da:bf:0b:0a:65:e6:23:ae:84:90:a2:03:55:
15:17:dc:c5:d3:19:5c:8b:42:21:1a:31:4f:3f:05:
f1:07:2c:36:4a:08:0c:3e:26:4c:de:4f:1f:47:e4:
4b:a3:95:d5:b6:5b:ac:7b:46:6b:ed:1b:b2:aa:a9:
7d:31:cf:8c:95:f7:76:6d:d7:3a:03:df:32:81:a3:
9b:fb:c1:b8:6e:31:5b:db:e8:44:25:02:a6:56:12:
64:f5:43:27:05:b1:83:f0:c6:47:bf:b0:e0:62:18:
13:a0:49:62:5c:c6:96:e7:39:56:27:ae:b6:54:9b:
39:ec:0d:92:31:3b:a5:7e:8c:41:ac:31:4c:3f:1b:
6e:ea:92:cf:97:b1:3d:b4:4a:ca:30:aa:40:1d:46:
2c:12:5b:ca:bb:9a:2f:7b:eb:31:36:f5:9f:76:70:
e5:ce:12:27:1d:b8:8a:b3:bd:c9:42:3c:39:d2:6e:
ef:c4:0f:14:78:ad:36:d1:44:74:b6:5a:ac:e4:34:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:18:AD:14:00:D5:D0:81:00:01:A6:C2:23:EA:72:2E:C8:5A:F2
X509v3 Authority Key Identifier:
keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:00:d1:f5:c6:08:58:07:c8:0a:f2:8f:1a:cd:05:45:df:16:
23:67:96:1e:8b:52:71:43:ff:00:fa:f1:86:d0:29:fb:aa:5b:
87:8b:48:bb:25:49:17:55:88:be:48:b8:4a:3e:04:20:db:22:
65:09:49:6a:32:c6:da:4d:9e:ac:b7:7f:73:9e:81:f6:9a:3f:
96:4a:c2:77:05:11:dc:c2:b6:15:46:c0:43:4f:8b:59:b4:00:
65:06:30:13:28:dc:d6:a4:82:a6:31:33:9d:b9:85:9d:16:71:
84:71:7a:a4:66:68:b5:60:7f:44:9c:6f:5a:f3:8f:1c:66:43:
db:aa:15:b1:5b:87:ef:eb:2c:b0:2b:ef:3e:0b:f4:91:aa:4a:
e9:02:78:65:cf:2d:ee:c2:04:8e:f7:26:2e:aa:b6:c2:e6:0b:
3e:3f:67:b0:2f:02:09:27:d1:b6:93:e8:57:a8:87:8e:e4:2f:
9f:02:e0:14:80:d7:07:80:c6:ff:f0:3c:53:3a:21:e9:35:02:
13:d7:aa:33:d2:29:e4:ba:3c:cf:57:5d:25:40:a9:6b:f2:a2:
32:e8:6d:8c:92:97:f4:ae:cb:45:aa:b5:37:e4:2f:31:cd:34:
f9:b9:71:0c:7a:7c:82:b2:70:2d:18:8b:37:ab:96:58:b3:cf:
17:2b:34:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:51:02 2026 by rpki-client