$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: gwAj+ZXH3wSbw2Fax75ZEFncyH9r1Gk9vw4lrICV1jk= Subject key identifier: 34:BD:83:23:9B:FA:2C:3E:45:BD:60:6E:50:74:18:93:D9:06:D1:69 Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 01EA Signing time: Wed 23 Jul 2025 02:53:33 +0000 Manifest this update: Wed 23 Jul 2025 02:53:33 +0000 Manifest next update: Wed 30 Jul 2025 02:53:32 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: 1F7J03GA/lVtv0XreT21+4v+KbvmCvQok633mKffjOI=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: MPBXfbZCyqMb6fDvtDouYAKXgZIENFo3o8Zo6D/vFQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 02:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Jul 23 02:53:33 2025 GMT Not After : Jul 30 02:53:32 2025 GMT Subject: CN=68804ead-8e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b7:b9:fe:cc:f8:b4:85:40:74:42:b6:9c:ce: 6e:94:e6:4e:e9:25:5d:20:8d:e7:41:50:6b:b1:59: ae:23:e8:57:a9:19:3b:42:e4:42:41:a9:ed:15:1d: 2d:aa:0b:5d:b9:0a:1f:b0:ed:67:85:a4:3f:31:1a: 2e:ff:5e:2b:c6:c5:dc:65:dc:0b:85:32:b6:86:ae: 62:bd:4f:dc:67:fa:a5:14:7a:8e:f8:c0:b6:46:cd: 2b:ef:03:1e:0d:e9:89:67:b2:7c:31:5b:50:9f:54: ce:31:17:ed:52:0e:9e:b9:b8:a0:ac:da:bb:0d:8d: 35:f1:df:e8:3c:b9:ce:6e:f1:5d:5e:ce:04:b7:81: bb:07:98:5f:7a:27:d5:64:e5:7d:8f:36:d4:51:89: cd:b6:cd:f3:f1:bb:b9:15:d0:a5:ff:58:b0:6f:7f: f7:c9:59:36:97:5a:33:18:94:18:51:7b:42:57:9e: 39:d8:ec:e5:fd:9e:67:82:9c:20:63:b0:8c:55:9c: 38:18:db:9e:7a:37:e9:f5:3d:e4:45:bf:e9:7c:b7: b7:2a:05:d6:25:c1:9b:da:9a:57:a2:80:cc:5c:e3: 03:3e:09:7b:04:a8:63:d0:23:5f:a3:0a:97:9e:b1: 55:db:93:47:97:52:e2:52:93:a4:6a:13:91:3d:31: f9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BD:83:23:9B:FA:2C:3E:45:BD:60:6E:50:74:18:93:D9:06:D1:69 X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:da:47:2f:10:e5:67:ef:67:fa:d3:bb:82:52:b5:a5:bd:5a: af:09:5e:dd:e5:5b:c2:14:67:9e:93:66:ed:52:d7:e2:a7:ec: d9:1c:19:71:c2:bf:2d:55:16:2f:af:1d:e4:63:04:f3:a0:0c: d9:09:b7:fc:1e:9b:b6:43:da:ab:e4:31:bd:ca:c9:c8:82:33: 51:32:fb:68:0f:e0:87:da:e7:1b:3f:11:4f:28:a7:20:11:0c: 7b:c3:a6:ff:e4:ab:ad:18:c5:32:04:27:07:55:62:74:65:cf: 5c:cd:dc:ef:1d:ad:db:04:56:2b:c6:1e:96:05:0f:fa:1a:98: c7:83:45:6e:20:11:81:60:32:c1:90:93:24:53:fe:e7:88:1c: 0b:42:c7:6a:9d:a9:bf:dc:ba:45:f7:f3:36:90:48:99:a3:a7: b1:31:41:03:89:b0:ab:bb:c4:a6:24:27:8a:9d:cf:c1:c5:53: 87:12:89:6f:b3:8e:51:0a:20:e7:3e:02:a7:70:83:b0:5a:e1: 44:a6:70:8c:85:6b:ff:90:ef:a7:0f:ef:50:42:73:d2:56:24: 93:a0:58:72:e3:ec:9d:5e:32:52:23:ca:51:4a:48:dc:fd:ab: f0:ec:7e:9c:f6:59:a0:97:8c:58:3c:7f:dd:8a:e2:50:da:89: 9d:b5:bb:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjUwNzIzMDI1MzMzWhcNMjUwNzMwMDI1MzMyWjAYMRYwFAYD VQQDEw02ODgwNGVhZC04ZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0be5/sz4tIVAdEK2nM5ulOZO6SVdII3nQVBrsVmuI+hXqRk7QuRCQantFR0t qgtduQofsO1nhaQ/MRou/14rxsXcZdwLhTK2hq5ivU/cZ/qlFHqO+MC2Rs0r7wMe DemJZ7J8MVtQn1TOMRftUg6eubigrNq7DY018d/oPLnObvFdXs4Et4G7B5hfeifV ZOV9jzbUUYnNts3z8bu5FdCl/1iwb3/3yVk2l1ozGJQYUXtCV5452Ozl/Z5ngpwg Y7CMVZw4GNueejfp9T3kRb/pfLe3KgXWJcGb2ppXooDMXOMDPgl7BKhj0CNfowqX nrFV25NHl1LiUpOkahORPTH5tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDS9gyOb +iw+Rb1gblB0GJPZBtFpMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDM2kcvEOVn72f607uCUrWlvVqvCV7d5VvCFGeek2btUtfip+zZHBlx wr8tVRYvrx3kYwTzoAzZCbf8Hpu2Q9qr5DG9ysnIgjNRMvtoD+CH2ucbPxFPKKcg EQx7w6b/5KutGMUyBCcHVWJ0Zc9czdzvHa3bBFYrxh6WBQ/6GpjHg0VuIBGBYDLB kJMkU/7niBwLQsdqnam/3LpF9/M2kEiZo6exMUEDibCru8SmJCeKnc/BxVOHEolv s45RCiDnPgKncIOwWuFEpnCMhWv/kO+nD+9QQnPSViSToFhy4+ydXjJSI8pRSkjc /avw7H6c9lmgl4xYPH/diuJQ2omdtbuG -----END CERTIFICATE-----Generated at Thu Jul 24 00:28:51 2025 by rpki-client