$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: 9nNVz4nUJvEinFatJ8doNSKGMSUrCdp9d3CsVCxv5I8= Subject key identifier: 2D:30:A7:21:EF:57:9F:EE:0E:66:1D:F5:42:A1:49:47:C9:ED:A1:58 Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 0288 Signing time: Thu 21 May 2026 01:55:45 +0000 Manifest this update: Thu 21 May 2026 01:55:44 +0000 Manifest next update: Thu 28 May 2026 01:55:44 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: Rvx97aQwLzmisiRab1Pr7KcXYCmwxhiIsSEdM4NvQlE=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: qTMcD52pvUMM/WCWaNI81abZP7wM1l8RWKy8BwN+uGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: May 21 01:55:44 2026 GMT Not After : May 28 01:55:44 2026 GMT Subject: CN=6a0e6620-6366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1e:e8:32:ec:0a:db:a3:a6:9a:10:e3:66:fc: 7a:28:5b:bd:ed:87:9e:cb:a4:8f:d4:07:20:52:71: bc:d4:c1:68:2c:f6:da:f0:b6:b6:4b:44:d8:24:35: 11:8a:14:c4:37:b7:ec:5e:99:1b:3a:7e:22:17:ab: 7e:89:fb:14:07:cf:6d:47:d0:41:39:ce:d8:32:60: 8f:10:64:6c:7e:81:b9:e4:06:de:3e:c6:d0:39:7b: f1:51:9d:dc:45:a3:ca:49:ff:67:d9:4e:19:27:12: 0a:fd:12:14:f2:45:df:be:e4:9b:1e:c0:51:7e:4a: 36:0c:3d:ad:48:10:9d:08:bd:42:20:b8:67:e4:f0: b7:b6:77:ed:18:20:5c:1c:f9:1e:3c:d0:d3:29:11: e2:7b:64:e4:34:f4:bc:fd:d6:9a:30:59:28:27:7a: 85:55:ec:a2:de:e5:dd:71:45:23:51:25:c6:7e:f7: d9:06:09:35:96:bf:3a:d1:6f:9f:6c:9d:4b:4c:f7: 71:8c:e8:4b:84:1c:b1:63:11:dc:c9:14:1e:46:c6: 6b:99:dd:cb:4f:8a:5c:f4:47:f8:77:f5:a8:74:ef: e0:75:b6:e3:45:9c:1c:c5:d2:5e:cb:40:45:5c:3d: 7b:11:30:df:f3:3c:1c:fb:1d:26:1d:04:72:4f:19: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:30:A7:21:EF:57:9F:EE:0E:66:1D:F5:42:A1:49:47:C9:ED:A1:58 X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5d:3a:99:c1:d9:24:87:19:97:14:24:e5:2e:60:0d:ef:51: db:ba:7a:38:67:a1:17:d9:99:81:8b:40:13:87:f3:f5:b9:0d: 0d:68:d2:eb:b3:57:cf:b7:36:a9:af:2f:22:2e:2d:df:33:4a: 6f:b5:04:66:26:41:df:a9:f8:86:cf:23:66:08:01:22:16:54: 8b:fe:bd:67:6f:e6:94:48:47:bf:7a:71:54:63:cc:a5:6b:37: 6a:01:08:c2:87:93:ae:49:b0:2d:6b:d2:7e:52:f1:55:36:71: f7:b6:fd:d8:23:db:17:d1:80:19:5b:3c:93:e9:75:32:ba:50: 17:27:eb:3e:60:dc:9b:3a:83:49:2a:9a:48:90:ca:7c:df:ce: 3b:2b:d4:df:65:a8:17:9b:2f:ec:f3:7e:e3:b1:00:20:66:d3: 15:03:db:13:b8:03:91:97:3b:89:bd:98:87:b7:a0:cd:1a:10: 50:1d:18:ec:60:ee:01:31:f2:99:9c:64:db:cf:d6:15:de:32: 3a:8b:a9:ee:f3:f6:90:4f:d8:93:23:54:dc:ab:b1:f4:30:48: ac:86:d3:e5:93:06:27:32:a2:65:99:40:9b:2f:60:38:10:c9: 74:a9:89:99:53:ca:45:2c:68:85:a1:48:d0:cd:ac:dd:d6:43: 04:51:99:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjYwNTIxMDE1NTQ0WhcNMjYwNTI4MDE1NTQ0WjAYMRYwFAYD VQQDEw02YTBlNjYyMC02MzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyR7oMuwK26OmmhDjZvx6KFu97Yeey6SP1AcgUnG81MFoLPba8La2S0TYJDUR ihTEN7fsXpkbOn4iF6t+ifsUB89tR9BBOc7YMmCPEGRsfoG55AbePsbQOXvxUZ3c RaPKSf9n2U4ZJxIK/RIU8kXfvuSbHsBRfko2DD2tSBCdCL1CILhn5PC3tnftGCBc HPkePNDTKRHie2TkNPS8/daaMFkoJ3qFVeyi3uXdcUUjUSXGfvfZBgk1lr860W+f bJ1LTPdxjOhLhByxYxHcyRQeRsZrmd3LT4pc9Ef4d/WodO/gdbbjRZwcxdJey0BF XD17ETDf8zwc+x0mHQRyTxnwLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC0wpyHv V5/uDmYd9UKhSUfJ7aFYMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjV06mcHZJIcZlxQk5S5gDe9R27p6OGehF9mZgYtAE4fz9bkNDWjS67NXz7c2 qa8vIi4t3zNKb7UEZiZB36n4hs8jZggBIhZUi/69Z2/mlEhHv3pxVGPMpWs3agEI woeTrkmwLWvSflLxVTZx97b92CPbF9GAGVs8k+l1MrpQFyfrPmDcmzqDSSqaSJDK fN/OOyvU32WoF5sv7PN+47EAIGbTFQPbE7gDkZc7ib2Yh7egzRoQUB0Y7GDuATHy mZxk28/WFd4yOoup7vP2kE/YkyNU3Kux9DBIrIbT5ZMGJzKiZZlAmy9gOBDJdKmJ mVPKRSxohaFI0M2s3dZDBFGZQw== -----END CERTIFICATE-----Generated at Thu May 21 10:15:30 2026 by rpki-client