$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: 4uA0rKKxbaAzwyojR1Mfxe9G6Iq5Ju5kjkm7hQSLdio= Subject key identifier: 64:4A:A0:82:7A:BC:21:1D:24:E9:05:67:41:25:CB:E3:B0:DD:B7:31 Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 01B8 Signing time: Sun 13 Apr 2025 02:09:22 +0000 Manifest this update: Sun 13 Apr 2025 02:09:21 +0000 Manifest next update: Sun 20 Apr 2025 02:09:21 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: fterHdctN/OF50HtNJwlKgabddATeKHIjwUJ+aFth0Y=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: MPBXfbZCyqMb6fDvtDouYAKXgZIENFo3o8Zo6D/vFQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 02:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Apr 13 02:09:21 2025 GMT Not After : Apr 20 02:09:21 2025 GMT Subject: CN=67fb1cd2-4578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:86:bb:43:99:8a:de:b1:90:c2:97:47:45: 2f:75:61:d5:3d:c7:6b:b6:f6:15:94:93:3d:15:08: 31:3e:d6:a7:80:aa:ed:8e:05:94:fc:e6:48:11:15: 64:f0:7d:ce:ae:ae:4c:c2:59:b0:7e:c6:fe:32:83: c5:7c:92:1c:87:70:90:45:b8:30:49:2f:a8:ba:0f: 9e:b1:94:35:dc:8a:78:1c:2e:41:ce:6b:8c:74:2e: 45:12:5d:fc:f7:9b:7c:b0:28:58:7a:45:16:9b:42: 9b:8a:96:0c:92:53:8c:a2:55:e4:f5:86:8a:a6:7a: 9c:a2:e7:8a:2a:66:e9:33:82:b4:93:52:29:e4:d0: 0b:06:92:8b:e7:7c:f4:b6:f7:3e:0f:50:ec:a1:b5: f6:0b:ca:90:4e:84:22:b4:16:74:ae:cf:41:79:5f: 2e:76:38:ac:4b:79:86:f9:34:8e:d2:5e:d9:db:0a: 92:23:0f:04:f4:e8:5c:36:15:d6:da:52:3f:9e:04: 99:9a:2c:d0:4d:6c:73:72:89:2b:db:5c:68:92:22: 9f:22:1a:2b:1e:fa:6e:cb:da:ad:d4:7d:28:db:f6: ab:76:a2:f1:92:b6:f7:20:c9:86:cb:45:68:8a:5d: 4a:cf:0a:68:98:fd:12:5d:21:ea:34:c0:8b:2f:f7: b1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4A:A0:82:7A:BC:21:1D:24:E9:05:67:41:25:CB:E3:B0:DD:B7:31 X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:b6:03:34:ed:0e:2f:a8:d3:d9:8f:c4:e9:c4:c5:56:1a:66: cb:8b:85:52:8d:75:eb:28:a7:a9:c4:b6:a2:4f:92:8a:a7:c1: 3a:32:ba:82:0b:61:38:c8:c4:22:dd:b9:e7:66:b1:45:47:89: 53:5f:38:0f:a8:34:07:85:19:a1:69:83:b9:eb:a8:83:42:53: c5:f9:a6:f8:d0:c0:e5:58:01:f6:28:81:f4:5e:a8:ad:9c:ea: 88:cc:04:24:1e:e4:68:96:02:92:fd:1a:04:ee:6b:ff:37:38: 6f:d4:e0:77:03:67:ef:23:97:25:a3:8b:ec:4f:f6:ad:4e:58: c2:27:59:39:17:34:88:a5:b5:13:3c:5b:41:de:46:08:c3:c8: de:83:8b:5d:3d:36:3c:67:73:f1:f5:fb:86:51:6e:2d:71:97: 2a:5a:bf:72:bd:25:ca:24:5d:b8:c9:e9:b4:46:4c:0d:7c:de: a8:d7:6c:5d:6f:98:40:44:c7:f4:b1:ed:ef:e5:19:2c:d1:34: de:28:8e:18:51:4b:ba:9e:12:ce:db:b0:ed:25:53:40:49:76: 5b:96:0f:de:3b:3d:9d:53:9d:1f:45:98:99:a7:0e:2d:39:53: ee:60:ba:1a:f0:9f:46:b8:1a:68:1f:62:1b:7d:42:d3:5d:26: 4a:e3:ae:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjUwNDEzMDIwOTIxWhcNMjUwNDIwMDIwOTIxWjAYMRYwFAYD VQQDEw02N2ZiMWNkMi00NTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOaGu0OZit6xkMKXR0UvdWHVPcdrtvYVlJM9FQgxPtangKrtjgWU/OZIERVk 8H3Orq5Mwlmwfsb+MoPFfJIch3CQRbgwSS+oug+esZQ13Ip4HC5BzmuMdC5FEl38 95t8sChYekUWm0KbipYMklOMolXk9YaKpnqcoueKKmbpM4K0k1Ip5NALBpKL53z0 tvc+D1DsobX2C8qQToQitBZ0rs9BeV8udjisS3mG+TSO0l7Z2wqSIw8E9OhcNhXW 2lI/ngSZmizQTWxzcokr21xokiKfIhorHvpuy9qt1H0o2/ardqLxkrb3IMmGy0Vo il1KzwpomP0SXSHqNMCLL/exXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRKoIJ6 vCEdJOkFZ0Ely+Ow3bcxMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGtgM07Q4vqNPZj8TpxMVWGmbLi4VSjXXrKKepxLaiT5KKp8E6MrqC C2E4yMQi3bnnZrFFR4lTXzgPqDQHhRmhaYO566iDQlPF+ab40MDlWAH2KIH0Xqit nOqIzAQkHuRolgKS/RoE7mv/Nzhv1OB3A2fvI5clo4vsT/atTljCJ1k5FzSIpbUT PFtB3kYIw8jeg4tdPTY8Z3Px9fuGUW4tcZcqWr9yvSXKJF24yem0RkwNfN6o12xd b5hARMf0se3v5Rks0TTeKI4YUUu6nhLO27DtJVNASXZblg/eOz2dU50fRZiZpw4t OVPuYLoa8J9GuBpoH2IbfULTXSZK464f -----END CERTIFICATE-----Generated at Sun Apr 13 05:57:50 2025 by rpki-client