
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json)
Hash identifier: kMluY1rgv+2tIjIPkG0lLLRgkhoewN2iiQKOjzdlr1g=
Subject key identifier: D3:EB:06:D9:26:0F:F1:6E:67:B5:BA:C6:EA:30:13:8D:EA:6B:51:9F
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial: 78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
Manifest number: 76
Signing time: Sun 01 Mar 2026 09:10:11 +0000
Manifest this update: Sun 01 Mar 2026 09:10:11 +0000
Manifest next update: Sun 08 Mar 2026 09:10:11 +0000
Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: eRhWtt6mrsWOT87LwfLnVBSfjFdj3u+/XNFDvVdW8qM=)
2: D2B93B4C638211F087594469C4F9AE02.roa (hash: 0ADq3jBBf/c9J6sONIRmYmNIcZxt7ll3xQLzW23RQrY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Validity
Not Before: Mar 1 09:10:11 2026 GMT
Not After : Mar 8 09:10:11 2026 GMT
Subject: CN=69a40273-86cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:19:f2:98:0c:3c:b0:68:33:20:09:cd:71:
8b:aa:75:22:ce:3d:97:12:d6:d8:09:f3:b1:60:50:
dc:35:d6:af:4b:cc:eb:65:61:9e:4e:04:f5:74:1b:
12:5f:f8:b3:58:42:01:17:0e:8b:64:13:58:a0:8c:
42:a6:4b:71:a9:c5:c3:39:80:64:54:e1:e9:e0:ee:
77:d6:3a:05:b4:6d:a5:1a:38:82:7c:e5:95:c8:46:
d4:1a:82:99:62:fc:84:2d:43:83:59:9b:d0:41:b0:
59:3a:1a:72:ea:13:77:0f:29:72:db:04:2a:0b:8e:
52:ba:35:22:80:94:af:7e:33:a4:69:60:1e:eb:5b:
c2:ad:51:b1:3a:e3:05:d7:6d:98:4a:86:90:de:4d:
12:84:05:50:8c:58:28:fd:11:fb:5b:79:5d:de:1d:
7f:54:04:87:02:d6:14:6f:bb:98:d8:89:8f:5b:6b:
4e:27:67:51:6b:e7:41:6b:dc:78:f4:2e:2f:b8:ba:
88:ad:f4:de:30:04:e0:67:1e:20:16:b9:26:69:7e:
a8:04:b3:3d:41:36:82:e5:93:ea:1a:98:33:3b:34:
01:bd:6d:98:8f:6d:a5:b9:c5:0c:c6:18:d8:0d:89:
76:ca:4f:67:f6:a2:92:a0:99:9e:4b:d0:6f:d7:da:
b5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EB:06:D9:26:0F:F1:6E:67:B5:BA:C6:EA:30:13:8D:EA:6B:51:9F
X509v3 Authority Key Identifier:
keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:12:f6:e6:4a:c3:6a:99:aa:d9:af:b0:70:3c:32:7f:8b:b7:
9c:3c:88:d9:a7:76:ec:f5:2f:b4:6f:7d:2a:13:33:e5:e1:94:
8a:83:27:22:eb:aa:f5:4a:33:6c:a4:1a:3f:93:08:06:a5:86:
02:52:eb:a7:90:9e:9d:1e:8a:37:4a:7f:e5:e9:0f:c2:1a:b6:
a2:e2:e9:14:5c:19:8d:4c:03:89:4d:d0:22:99:d6:40:bd:3f:
de:8e:24:e2:d5:1a:f5:42:87:88:b1:1c:be:5d:e0:9e:7d:45:
02:4f:14:f3:45:d2:d9:60:d7:fc:0b:98:13:04:25:14:4f:7c:
da:c1:03:2b:bb:5c:f5:4c:6c:56:20:d6:b2:52:d3:e0:80:ce:
43:f2:2d:18:47:ec:fc:6f:33:c7:4c:6a:b1:3f:55:57:41:fd:
c3:9f:06:49:3f:18:aa:f7:07:0a:ed:51:a9:bd:3a:32:f4:9e:
11:19:40:62:57:ae:1d:cf:15:58:ac:74:26:63:fe:bf:cf:23:
98:b1:57:ba:d2:1b:b8:22:33:79:8f:62:68:44:9f:05:02:e9:
5d:6b:44:26:09:1d:d9:47:d3:0c:1a:3b:49:b6:d1:2f:19:0f:
a5:c8:94:29:c9:0b:49:5a:84:3e:41:64:75:66:88:de:55:3e:
8d:d1:6e:4d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
N0VGMjExMC8GA1UEBRMoNkE0OTdFRUQ1RjRGRTJDMTUxNjRERDJEMDdGQzRERDUy
QkNFODkyMTAeFw0yNjAzMDEwOTEwMTFaFw0yNjAzMDgwOTEwMTFaMBgxFjAUBgNV
BAMTDTY5YTQwMjczLTg2Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC48RnymAw8sGgzIAnNcYuqdSLOPZcS1tgJ87FgUNw11q9LzOtlYZ5OBPV0GxJf
+LNYQgEXDotkE1igjEKmS3GpxcM5gGRU4eng7nfWOgW0baUaOIJ85ZXIRtQagpli
/IQtQ4NZm9BBsFk6GnLqE3cPKXLbBCoLjlK6NSKAlK9+M6RpYB7rW8KtUbE64wXX
bZhKhpDeTRKEBVCMWCj9EftbeV3eHX9UBIcC1hRvu5jYiY9ba04nZ1Fr50Fr3Hj0
Li+4uoit9N4wBOBnHiAWuSZpfqgEsz1BNoLlk+oamDM7NAG9bZiPbaW5xQzGGNgN
iXbKT2f2opKgmZ5L0G/X2rXzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0+sG2SYP
8W5ntbrG6jATjeprUZ8wHwYDVR0jBBgwFoAUakl+7V9P4sFRZN0tB/xN1SvOiSEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzZBRkJFNDRDNjM4
MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNGUlpOMHRCX3hOMVN2T2lT
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYWtsLTdWOVA0c0ZSWk4wdEJfeE4xU3ZPaVNFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3
RUYyLzZBRkJFNDRDNjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNG
UlpOMHRCX3hOMVN2T2lTRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC8EvbmSsNqmarZr7BwPDJ/i7ecPIjZp3bs9S+0b30qEzPl4ZSKgyci66r1SjNs
pBo/kwgGpYYCUuunkJ6dHoo3Sn/l6Q/CGrai4ukUXBmNTAOJTdAimdZAvT/ejiTi
1Rr1QoeIsRy+XeCefUUCTxTzRdLZYNf8C5gTBCUUT3zawQMru1z1TGxWINayUtPg
gM5D8i0YR+z8bzPHTGqxP1VXQf3DnwZJPxiq9wcK7VGpvToy9J4RGUBiV64dzxVY
rHQmY/6/zyOYsVe60hu4IjN5j2JoRJ8FAulda0QmCR3ZR9MMGjtJttEvGQ+lyJQp
yQtJWoQ+QWR1ZojeVT6N0W5N
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:52 2026 by rpki-client