$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: 6W/EwMCVf8sDEbx1ow6d1o5H75rqXUOo6Qhz+V/UGdo= Subject key identifier: 75:17:F8:F8:14:AD:A6:20:AD:5B:DF:6C:FB:92:2C:87:46:26:6D:5C Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 01CF Signing time: Sat 31 May 2025 02:39:34 +0000 Manifest this update: Sat 31 May 2025 02:39:34 +0000 Manifest next update: Sat 07 Jun 2025 02:39:34 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: ag7SDxEps7jQ9INtAaQrcxbGlDfAF7dguVo+3JAasPo=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: MPBXfbZCyqMb6fDvtDouYAKXgZIENFo3o8Zo6D/vFQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: May 31 02:39:34 2025 GMT Not After : Jun 7 02:39:34 2025 GMT Subject: CN=683a6be6-4647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:99:ce:7c:67:43:3a:cc:84:0f:62:fb:97:09: c3:48:38:1d:8b:c6:b3:6f:dd:0c:98:87:06:a5:da: 77:de:3b:e0:05:54:d3:05:02:5e:4a:e5:aa:a5:e3: f2:41:05:bc:32:41:9b:68:95:9f:c1:60:f7:5a:f5: 01:0b:54:6f:80:42:dd:f6:d9:3a:22:ba:db:ad:27: ee:96:25:aa:06:3e:90:c2:77:a6:26:54:06:2a:a3: d9:cd:57:bd:83:5f:e6:48:83:a6:76:f7:6a:d3:f7: cc:c4:c8:a2:9c:69:6b:82:85:da:95:54:4e:38:b1: 43:27:4b:a1:e6:8a:a5:7e:72:5e:aa:62:e7:87:fb: b3:0f:df:ef:eb:74:53:9c:81:3b:c5:86:69:fa:ed: 35:68:06:56:65:e8:40:f6:be:79:a3:57:4d:01:a0: e7:a4:24:7b:c2:32:e1:69:06:29:e7:7e:2c:ec:af: d6:bf:76:c5:9d:8b:b7:3d:3a:b5:1b:2a:7f:e9:5b: c9:65:23:54:3d:27:5b:e0:b8:3d:e5:71:9e:4e:01: 72:94:e8:74:bd:24:d4:9d:d4:c4:ea:d2:db:d4:da: 46:dc:71:46:90:6e:49:eb:08:9a:b1:5a:12:5c:ca: aa:60:27:19:db:c6:48:1e:78:23:b9:e4:27:b9:f1: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:17:F8:F8:14:AD:A6:20:AD:5B:DF:6C:FB:92:2C:87:46:26:6D:5C X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:fa:a2:01:d3:b2:33:a4:21:13:d4:d2:b5:31:29:d7:f9:84: b8:46:9b:0e:cd:c7:02:33:23:9e:48:89:de:33:9f:35:81:38: 86:a5:c0:1f:17:75:20:88:c3:9e:74:07:4e:3b:55:a7:2f:46: 52:d9:99:c1:95:97:a9:6d:5a:17:da:a9:4a:21:9e:82:ff:4f: d6:42:45:34:08:44:e7:63:2e:b6:e6:8c:88:d7:70:a4:41:33: 09:76:46:a4:84:b4:fc:ff:f9:ca:a0:83:2b:09:31:0d:d5:99: 19:1c:b1:77:05:c0:e3:ea:c0:05:87:ed:f2:44:8e:44:a5:25: dc:3d:76:a8:f7:4e:16:c7:68:cf:77:b4:29:17:1b:75:b6:67: 39:e4:42:53:87:6d:9f:9e:61:6f:01:ba:99:4b:04:59:77:ac: 38:37:9e:73:ae:1e:c7:a0:76:73:4c:50:3c:8b:91:db:3b:df: 9a:02:bb:f8:1c:0b:83:40:19:1b:1e:55:f3:3a:11:b2:95:95: c5:61:32:18:b5:04:91:9b:fc:ab:e0:30:f6:bd:9f:d3:f2:c9: 32:08:84:2e:96:54:14:af:2f:37:f4:a4:07:24:7d:35:93:9a: 1a:e6:67:6e:3b:d5:a2:52:5a:b8:1a:78:22:f7:7e:82:c7:eb: 5b:02:52:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjUwNTMxMDIzOTM0WhcNMjUwNjA3MDIzOTM0WjAYMRYwFAYD VQQDEw02ODNhNmJlNi00NjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65nOfGdDOsyED2L7lwnDSDgdi8azb90MmIcGpdp33jvgBVTTBQJeSuWqpePy QQW8MkGbaJWfwWD3WvUBC1RvgELd9tk6IrrbrSfuliWqBj6QwnemJlQGKqPZzVe9 g1/mSIOmdvdq0/fMxMiinGlrgoXalVROOLFDJ0uh5oqlfnJeqmLnh/uzD9/v63RT nIE7xYZp+u01aAZWZehA9r55o1dNAaDnpCR7wjLhaQYp534s7K/Wv3bFnYu3PTq1 Gyp/6VvJZSNUPSdb4Lg95XGeTgFylOh0vSTUndTE6tLb1NpG3HFGkG5J6wiasVoS XMqqYCcZ28ZIHngjueQnufFsQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUX+PgU raYgrVvfbPuSLIdGJm1cMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0+qIB07IzpCET1NK1MSnX+YS4RpsOzccCMyOeSIneM581gTiGpcAf F3UgiMOedAdOO1WnL0ZS2ZnBlZepbVoX2qlKIZ6C/0/WQkU0CETnYy625oyI13Ck QTMJdkakhLT8//nKoIMrCTEN1ZkZHLF3BcDj6sAFh+3yRI5EpSXcPXao904Wx2jP d7QpFxt1tmc55EJTh22fnmFvAbqZSwRZd6w4N55zrh7HoHZzTFA8i5HbO9+aArv4 HAuDQBkbHlXzOhGylZXFYTIYtQSRm/yr4DD2vZ/T8skyCIQullQUry839KQHJH01 k5oa5mduO9WiUlq4Gngi936Cx+tbAlI5 -----END CERTIFICATE-----Generated at Sat May 31 17:40:59 2025 by rpki-client