diff --git a/src/libcharon/plugins/vici/README.md b/src/libcharon/plugins/vici/README.md
index 38f7f9b01..01c3f858c 100644
--- a/src/libcharon/plugins/vici/README.md
+++ b/src/libcharon/plugins/vici/README.md
@@ -776,12 +776,15 @@ command.
 			nat-any = <yes, if any endpoint is behind a NAT (also if faked)>
 			if-id-in = <hex encoded default inbound XFRM interface ID>
 			if-id-out = <hex encoded default outbound XFRM interface ID>
-			encr-alg = <IKE encryption algorithm string>
+			encr-alg = <IKE encryption algorithm name>
 			encr-keysize = <key size for encr-alg, if applicable>
-			integ-alg = <IKE integrity algorithm string>
+			integ-alg = <IKE integrity algorithm name>
 			integ-keysize = <key size for encr-alg, if applicable>
-			prf-alg = <IKE pseudo random function string>
-			dh-group = <IKE Diffie-Hellman group string>
+			prf-alg = <IKE pseudo random function name>
+			dh-group = <IKE key exchange method name>
+			ake1 = <first additional IKE key exchange method name, if any>
+			...
+			ake7 = <seventh additional IKE key exchange method name, if any>
 			established = <seconds the IKE_SA has been established>
 			rekey-time = <seconds before IKE_SA gets rekeyed>
 			reauth-time = <seconds before IKE_SA gets re-authenticated>
@@ -827,7 +830,10 @@ command.
 					integ-alg = <ESP or AH integrity algorithm name, if any>
 					integ-keysize = <ESP or AH integrity key size, if applicable>
 					prf-alg = <CHILD_SA pseudo random function name>
-					dh-group = <CHILD_SA PFS rekeying DH group name, if any>
+					dh-group = <CHILD_SA key exchange method name, if any>
+					ake1 = <first additional CHILD_SA key exchange method name, if any>
+					...
+					ake7 = <seventh additional CHILD_SA key exchange method name, if any>
 					esn = <1 if using extended sequence numbers>
 					bytes-in = <number of input bytes processed>
 					packets-in = <number of input packets processed>