Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft
File: PitYQ36GJEE5rkzQPZf0A0KFBzY.mft (raw, json)
Hash identifier: JG7ci7zVLtbHnK/FDNc96cFUKKERNEFrQrzgchFwJCo=
Subject key identifier: BC:6C:02:DA:ED:4D:D2:83:ED:31:FF:07:75:12:D6:EB:8D:5B:A6:53
Authority key identifier: 3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36
Certificate issuer: /CN=A914EE0C/serialNumber=3E2B58437E86244139AE4CD03D97F40342850736
Certificate serial: 27B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft
Manifest number: 278A
Signing time: Fri 19 Jun 2026 05:09:28 +0000
Manifest this update: Fri 19 Jun 2026 05:09:27 +0000
Manifest next update: Fri 26 Jun 2026 05:09:27 +0000
Files and hashes: 1: PitYQ36GJEE5rkzQPZf0A0KFBzY.crl (hash: j5Lkrt2LuuNfWkTJgAMx6ioX0PlgRRn0NNi42CoDHV4=)
2: 7CEC0182B10C11E5BB6B2A16C4F9AE02.roa (hash: vJ92RvTBuV/LG9/GWSM84+Qb5SNUcMMRHiCnMH947qk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10160 (0x27b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EE0C, serialNumber=3E2B58437E86244139AE4CD03D97F40342850736
Validity
Not Before: Jun 19 05:09:27 2026 GMT
Not After : Jun 26 05:09:27 2026 GMT
Subject: CN=6a34cf08-7534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:a6:df:ff:07:be:37:ac:9e:e2:f2:1a:5b:
4b:e0:b0:b0:c7:d3:fb:b6:65:49:ea:f8:87:84:63:
f6:1f:55:f1:0d:ce:f7:e7:8b:2a:e4:23:5c:42:b4:
d7:4d:95:c9:5e:64:42:1b:09:98:12:7c:1a:8a:a8:
3b:05:87:53:87:f6:81:c8:fb:de:9b:8d:a0:51:41:
bb:44:41:fd:0c:13:97:e6:8f:6f:fd:65:4d:cf:0b:
d4:9e:9b:8e:ae:47:68:18:e4:b8:8a:22:49:be:ec:
cf:14:aa:0d:89:68:5a:66:7e:c0:a6:23:a3:06:e5:
d5:7c:24:f0:23:55:18:cb:95:f4:e7:d3:01:64:8f:
76:1a:36:86:07:70:e0:13:82:52:57:94:c5:fc:f4:
9b:89:8d:47:30:b6:35:54:2a:2d:75:b6:82:9d:a2:
84:53:2c:1f:ed:26:77:93:4d:08:b2:98:2a:f0:c8:
4a:0b:a4:16:46:4f:f7:f5:e4:71:ad:c9:e1:0f:4a:
d5:6e:75:21:38:f0:ee:c0:4a:30:8b:83:02:1b:df:
76:75:9c:d8:c5:f2:13:dc:f6:98:21:9c:0a:27:7d:
8d:a2:83:e1:36:ce:f0:5d:21:66:e5:51:ea:c0:5b:
83:d6:08:0a:e8:e2:c5:23:6b:1b:f7:9e:f9:63:1b:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6C:02:DA:ED:4D:D2:83:ED:31:FF:07:75:12:D6:EB:8D:5B:A6:53
X509v3 Authority Key Identifier:
keyid:3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:ad:67:79:e5:d7:e5:a1:b9:5e:01:64:12:05:57:5d:2f:a7:
5b:1a:9e:4d:22:0a:40:75:38:e3:a1:05:b0:98:08:0d:b1:00:
74:1e:41:31:b4:c6:72:5d:e3:06:92:1b:76:13:41:f9:94:cb:
20:3d:40:4d:7e:12:33:32:8d:2d:55:66:08:04:62:4e:b2:32:
f5:f7:59:8f:7f:87:32:02:93:dd:39:a0:1c:d5:26:5f:1b:17:
cd:ec:c0:61:ea:cb:12:57:aa:35:ef:fe:2f:19:80:29:f0:b4:
26:64:8d:25:f5:3f:2a:c4:41:c1:cf:cd:73:16:87:0a:02:0e:
d3:b1:2d:fd:63:d8:a8:09:26:9a:1f:c5:7f:bc:83:1c:9d:00:
74:1d:cd:c3:a8:ca:3f:d4:77:9b:d7:c6:6b:ef:ff:a9:33:39:
1b:9a:83:34:2b:42:87:8c:7c:a5:7b:93:a4:a9:89:de:02:af:
fb:a0:ea:2d:d6:74:45:db:29:c9:85:43:4e:9f:a5:26:84:df:
2c:a7:11:ec:c6:0a:3c:36:15:2a:52:2e:c8:2a:16:e6:08:a3:
1d:cf:1d:95:b4:ef:3b:c5:66:3b:11:56:03:6e:04:83:5e:2f:
c6:bd:fb:8b:bc:d7:db:e9:2e:95:1a:85:7b:c9:10:bd:b9:4f:
cb:9d:97:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:30 2026 by rpki-client