$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: rUX3XxYddHAVz2DUSXu1Z2Kek0ahIyJ7fqOEyy09vEM= Subject key identifier: BC:10:5F:91:89:C9:9F:2B:E5:18:75:10:82:A2:93:92:7A:66:C3:42 Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 0113 Signing time: Fri 31 May 2024 06:10:49 +0000 Manifest this update: Fri 31 May 2024 06:10:48 +0000 Manifest next update: Fri 07 Jun 2024 06:10:48 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: OkQV6PGxp4T+m8x/Gx1bKaoaQimG84p05erXwKQGFQE=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: h3f2of4i7rVBSMw55O0R3l5qvKQlQOhO4lCnYkzMVq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: May 31 06:10:48 2024 GMT Not After : Jun 7 06:10:48 2024 GMT Subject: CN=665969e9-c7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a4:b6:45:8c:d1:34:bf:24:72:38:3f:fb:70: 6f:f6:ea:ff:38:e6:9c:9e:74:55:71:8c:27:c1:49: 15:36:f0:39:8c:7a:a9:bc:9c:a9:6d:91:c8:53:ca: a0:5c:56:d7:a5:e6:de:df:78:7d:64:db:51:5b:38: 99:16:7d:00:d9:6b:3c:f8:b3:4f:5a:5a:08:48:14: a3:93:d8:6e:6f:9a:26:d8:b9:f6:d1:21:9d:f3:bd: 01:8e:27:c8:21:d3:b4:0c:5e:cf:f2:ee:a6:f1:e9: 86:49:30:6f:b7:29:f6:ef:de:5e:c3:cd:fe:fe:58: 37:cc:7c:11:52:53:4f:80:46:37:13:5d:ee:c0:2e: 5a:4b:b7:5f:21:38:8a:78:53:c6:81:c9:38:42:10: 8a:51:bb:5b:c6:fd:a9:1d:10:01:1e:07:f8:39:c1: 97:ce:5d:0e:b5:b9:b5:c2:51:31:09:31:1d:df:34: b5:eb:0a:3a:dc:1b:f6:b2:fa:60:7d:ff:a3:9e:73: d1:f9:6a:34:22:ad:b2:3b:b1:4c:f2:53:f0:75:98: 0e:8f:cb:bd:33:8e:75:71:45:76:94:a7:f2:a4:60: 69:41:fe:d9:2b:dc:1e:0e:45:a2:41:3b:3f:71:93: 24:fc:f6:1d:97:fe:07:66:33:f1:0c:d1:2f:fd:6c: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:10:5F:91:89:C9:9F:2B:E5:18:75:10:82:A2:93:92:7A:66:C3:42 X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f3:79:d4:3c:9b:b6:b9:84:05:11:0b:a3:ff:27:75:ca:67: b5:9b:6b:0c:de:08:2b:b7:44:c6:4c:97:42:d0:ea:29:1e:e2: 9e:e6:6e:b1:f3:a4:08:5d:e1:77:46:8f:8d:0f:81:7f:01:e4: 03:a7:f8:1e:e2:fd:0a:72:ce:fc:aa:f0:7e:66:59:08:73:e3: 31:40:41:cc:d9:cc:a2:ea:af:f8:08:0b:a2:96:37:2e:a6:73: 35:e1:b0:92:6f:41:6e:03:83:6a:5e:ab:c6:8e:a8:dc:d0:35: a0:b4:e2:4a:76:10:74:85:ce:6e:02:c2:f5:b2:da:22:df:62: 79:75:78:75:6f:74:bf:54:43:eb:b2:83:a2:55:74:e1:01:0b: 32:aa:68:09:db:4b:38:5d:b1:5c:bb:e6:c7:77:dc:6b:e9:9f: fd:33:ee:93:61:8c:88:a4:a8:30:62:dd:bf:63:53:29:b7:51: 1a:1b:42:de:de:54:04:e7:c2:03:b1:72:cb:d5:7a:bb:f9:6d: d4:2a:5c:0f:ae:2c:a2:d2:f0:c6:cd:80:da:c8:d7:fe:c3:62: 45:66:5d:73:0d:35:77:29:aa:ac:c4:50:d4:fa:00:e9:4d:63: 4f:22:65:1f:d0:d2:64:48:05:51:5b:3e:5b:46:b3:95:60:56: ee:5e:87:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjQwNTMxMDYxMDQ4WhcNMjQwNjA3MDYxMDQ4WjAYMRYwFAYD VQQDEw02NjU5NjllOS1jN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16S2RYzRNL8kcjg/+3Bv9ur/OOacnnRVcYwnwUkVNvA5jHqpvJypbZHIU8qg XFbXpebe33h9ZNtRWziZFn0A2Ws8+LNPWloISBSjk9hub5om2Ln20SGd870BjifI IdO0DF7P8u6m8emGSTBvtyn2795ew83+/lg3zHwRUlNPgEY3E13uwC5aS7dfITiK eFPGgck4QhCKUbtbxv2pHRABHgf4OcGXzl0Otbm1wlExCTEd3zS16wo63Bv2svpg ff+jnnPR+Wo0Iq2yO7FM8lPwdZgOj8u9M451cUV2lKfypGBpQf7ZK9weDkWiQTs/ cZMk/PYdl/4HZjPxDNEv/WzfNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwQX5GJ yZ8r5Rh1EIKik5J6ZsNCMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN83nUPJu2uYQFEQuj/yd1yme1m2sM3ggrt0TGTJdC0OopHuKe5m6x 86QIXeF3Ro+ND4F/AeQDp/ge4v0Kcs78qvB+ZlkIc+MxQEHM2cyi6q/4CAuiljcu pnM14bCSb0FuA4NqXqvGjqjc0DWgtOJKdhB0hc5uAsL1stoi32J5dXh1b3S/VEPr soOiVXThAQsyqmgJ20s4XbFcu+bHd9xr6Z/9M+6TYYyIpKgwYt2/Y1Mpt1EaG0Le 3lQE58IDsXLL1Xq7+W3UKlwPriyi0vDGzYDayNf+w2JFZl1zDTV3KaqsxFDU+gDp TWNPImUf0NJkSAVRWz5bRrOVYFbuXofL -----END CERTIFICATE-----Generated at Fri May 31 06:49:08 2024 by rpki-client on console-ams.rpki-client.org