$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: s5ZOd4GKLKtvtq8UHf9zWQHWm9uP01jP2MHIx8iZgGY= Subject key identifier: 62:49:5E:23:C0:07:1C:14:C7:CC:F2:B4:BB:3C:BA:5B:EB:A1:E5:38 Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 0207 Signing time: Wed 17 Sep 2025 02:50:41 +0000 Manifest this update: Wed 17 Sep 2025 02:50:41 +0000 Manifest next update: Wed 24 Sep 2025 02:50:40 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: +lvoGYc67v43jEMNRBGIvU/73eHk4Y9q0CWfW+evz/E=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: MPBXfbZCyqMb6fDvtDouYAKXgZIENFo3o8Zo6D/vFQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Sep 17 02:50:41 2025 GMT Not After : Sep 24 02:50:40 2025 GMT Subject: CN=68ca2201-dc9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:61:88:05:ab:c3:7b:24:4b:31:cc:0e:c8: 4d:09:31:2d:5f:c4:f6:94:d3:74:e9:e9:3b:48:f6: a4:7d:e7:26:51:bd:17:94:2b:c6:4d:f5:fe:1c:d4: 14:68:97:f0:a6:84:c1:8b:23:eb:8a:3f:f1:ce:e5: e8:ec:cd:23:ad:0e:41:d8:f1:cf:86:ed:71:61:81: 07:49:5f:4e:e1:17:a3:a9:b3:68:0f:21:b2:06:b8: 4e:1d:4f:8e:39:7f:7d:b5:d7:9b:13:c5:fa:b4:6d: 23:5a:4c:37:1b:97:f1:60:87:a6:99:9c:a0:02:c5: 3c:ea:36:3c:17:42:23:89:19:b5:d2:b8:76:d2:9d: 43:fb:2e:07:6f:11:d5:9c:12:88:fc:f4:03:59:d5: 10:fc:43:95:ae:e7:e7:71:a6:83:ee:46:15:fc:c9: de:d2:c8:30:fa:5f:2c:af:ee:39:fd:f4:8e:7e:4a: d4:68:c4:26:c5:aa:85:41:dc:62:0a:b7:5c:f7:4b: a0:4d:cd:62:27:da:a3:36:31:a7:b2:3d:a0:4f:c2: 16:ec:d2:37:e5:de:38:c9:9c:3a:90:48:09:f2:c4: ae:ce:30:06:ff:2d:a7:ba:4c:3f:40:6b:85:f9:d4: 67:4c:51:4b:a2:76:29:07:63:4f:60:1c:82:6d:d8: 0e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:49:5E:23:C0:07:1C:14:C7:CC:F2:B4:BB:3C:BA:5B:EB:A1:E5:38 X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:2f:5f:83:b4:c6:18:08:cb:d7:d3:8f:1e:a5:c9:8b:46:ad: 91:f0:76:23:77:cd:1c:67:de:84:bd:ef:ea:14:24:dd:05:1b: aa:21:c2:ec:24:99:f2:a1:f2:c6:6a:18:c1:ea:73:fa:7b:d0: f3:42:9d:63:9b:19:17:e3:0b:e4:3b:f8:35:92:f4:97:41:1a: 5c:78:19:a2:46:5c:92:0b:48:21:eb:5b:cb:66:4d:4c:01:e2: 9c:de:b0:c2:d0:8e:f8:5f:0c:2d:08:e8:bb:70:4a:38:61:96: 1a:15:18:23:2a:ac:89:95:2b:78:17:44:e7:0b:25:de:ed:d8: b3:d3:35:a7:4d:55:d0:fa:db:84:73:ed:c2:66:24:c6:12:64: ef:7c:1b:20:46:6a:61:14:66:6b:8a:90:a6:0d:26:1a:a7:e8: 00:1d:01:4a:5b:0e:18:8a:d1:99:dd:7b:18:a4:b2:26:19:d5: bb:a2:c5:97:2f:db:f5:e0:14:09:cf:cd:75:7f:09:97:10:b2: a4:cf:9d:5d:93:14:3c:99:6c:76:56:17:a7:dc:ad:bb:ce:79: de:91:ff:80:1c:5d:e6:95:81:8d:7a:c4:80:9f:7a:cf:fc:68: dd:0a:e1:b1:5e:56:f7:7b:ba:ca:3c:60:2b:a2:b6:f7:25:a3: 5f:ca:a8:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjUwOTE3MDI1MDQxWhcNMjUwOTI0MDI1MDQwWjAYMRYwFAYD VQQDEw02OGNhMjIwMS1kYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApE9hiAWrw3skSzHMDshNCTEtX8T2lNN06ek7SPakfecmUb0XlCvGTfX+HNQU aJfwpoTBiyPrij/xzuXo7M0jrQ5B2PHPhu1xYYEHSV9O4RejqbNoDyGyBrhOHU+O OX99tdebE8X6tG0jWkw3G5fxYIemmZygAsU86jY8F0IjiRm10rh20p1D+y4HbxHV nBKI/PQDWdUQ/EOVrufncaaD7kYV/Mne0sgw+l8sr+45/fSOfkrUaMQmxaqFQdxi Crdc90ugTc1iJ9qjNjGnsj2gT8IW7NI35d44yZw6kEgJ8sSuzjAG/y2nukw/QGuF +dRnTFFLonYpB2NPYByCbdgOuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJJXiPA BxwUx8zytLs8ulvroeU4MB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2L1+DtMYYCMvX048epcmLRq2R8HYjd80cZ96Eve/qFCTdBRuqIcLs JJnyofLGahjB6nP6e9DzQp1jmxkX4wvkO/g1kvSXQRpceBmiRlySC0gh61vLZk1M AeKc3rDC0I74XwwtCOi7cEo4YZYaFRgjKqyJlSt4F0TnCyXe7diz0zWnTVXQ+tuE c+3CZiTGEmTvfBsgRmphFGZripCmDSYap+gAHQFKWw4YitGZ3XsYpLImGdW7osWX L9v14BQJz811fwmXELKkz51dkxQ8mWx2Vhen3K27znnekf+AHF3mlYGNesSAn3rP /GjdCuGxXlb3e7rKPGArorb3JaNfyqi0 -----END CERTIFICATE-----Generated at Fri Sep 19 00:41:23 2025 by rpki-client