
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json)
Hash identifier: ftCNgdtKMOwim9Pnr2qNhHUpFS3jJW7dc/PKkh3zwPU=
Subject key identifier: 9B:20:09:FF:97:45:A2:2A:AB:E8:17:F7:54:FB:B4:FA:5F:AD:00:0C
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
Manifest number: E5
Signing time: Sun 27 Sep 2026 07:05:03 +0000
Manifest this update: Sun 27 Sep 2026 07:05:02 +0000
Manifest next update: Sun 04 Oct 2026 07:05:02 +0000
Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: uCbRZ2BF8BJgP812pHYau3TdPJATOk550Q0jrtTYbQ0=)
2: 2EC0243A89E011F1B81BDF965611F970.roa (hash: Nq+dCQHf90s4zW0PH0vEDjROrWf2N7+/pmtAxto3En8=)
3: 904FFA4A89E011F19D4A2A975611F970.roa (hash: DFAio1T3pAvkyo5GJuUxGnxD4vcze6AJnYJ5qLjBlVM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 07:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Validity
Not Before: Sep 27 07:05:02 2026 GMT
Not After : Oct 4 07:05:02 2026 GMT
Subject: CN=6ab8c01f-fae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:1a:7f:a9:aa:d5:d5:cc:90:74:fb:de:99:
6b:69:85:71:4e:b5:2a:5a:0b:6f:9b:df:87:84:c0:
af:32:27:f0:ba:d4:d3:b2:00:84:b3:e8:9b:2a:a5:
e9:a2:49:88:58:89:b1:78:b0:d8:4b:90:69:50:01:
96:98:83:ba:b0:f1:48:44:38:f6:48:c0:8a:d2:0f:
57:4c:47:99:93:05:8c:4a:52:4f:f3:e2:82:13:69:
09:7c:48:42:3f:e0:f5:b5:fc:af:a3:73:f8:b2:28:
67:f2:be:b9:21:2f:dc:6c:76:9f:ef:3c:dd:34:6a:
9d:85:f4:d4:85:31:8c:ec:9e:b0:6d:97:d1:48:4e:
24:d1:8c:27:99:ec:70:e8:1a:71:25:38:11:a6:8a:
7d:56:1a:08:36:f4:92:41:31:91:27:b9:bf:79:f2:
15:9a:07:ca:ab:b6:fb:b2:b4:d9:f3:e2:d0:93:57:
cb:df:9c:67:ea:e1:ab:8e:9c:33:75:5d:62:8c:64:
b3:a1:34:c3:5a:93:5b:ec:58:09:f6:ec:7a:65:1f:
fe:a2:a8:6e:52:5c:64:d8:37:d8:db:52:3e:a2:99:
c9:a9:60:ed:77:78:c5:49:83:99:5c:1b:a2:40:26:
51:2e:cb:66:70:a2:34:e5:c5:f4:4e:3c:4e:87:55:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:20:09:FF:97:45:A2:2A:AB:E8:17:F7:54:FB:B4:FA:5F:AD:00:0C
X509v3 Authority Key Identifier:
keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:53:de:f5:a3:63:49:a4:93:e8:a2:55:10:72:1a:7a:18:cc:
1a:ca:4a:5e:02:5d:07:e6:d7:81:9a:dd:e8:b1:7b:9b:fe:a2:
13:b5:3a:dd:96:e0:8f:f1:ae:63:f8:82:41:ed:09:b4:cc:8d:
22:09:80:6d:f8:73:1d:ca:21:c1:93:d3:88:26:1e:0f:09:39:
4d:c2:ba:7a:57:6a:41:70:52:0f:4b:6e:25:f7:70:35:2e:5c:
13:7e:cd:67:99:3c:fd:b1:64:28:87:e7:b8:ba:7d:bd:f3:ea:
49:76:bf:e1:1d:fa:1e:76:54:aa:a8:ac:64:bc:77:f3:c2:f0:
ed:b1:ed:a1:85:14:b3:99:88:9e:35:c2:0b:38:85:5a:ce:4d:
c3:86:c8:7a:11:92:a7:e3:5d:52:c4:45:d1:63:a4:ec:a7:15:
8f:97:93:b5:1a:bc:e6:43:40:7c:9d:cd:75:a5:89:48:4b:ab:
96:10:19:77:49:33:4a:33:84:51:fb:17:17:a7:18:07:ef:a8:
de:8e:1f:66:02:c1:b5:41:0f:20:57:bd:61:9f:2d:e4:e0:df:
14:31:e8:d5:4e:df:b9:53:4f:ce:97:b6:84:76:d8:8a:82:55:
57:4a:3a:fe:8a:79:81:cd:cb:e3:52:27:8e:c0:49:0e:9c:93:
0e:f5:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:39:19 2026 by rpki-client