$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: Pnfv8jpa7NswjyNq/fTsKsbrnS306kV5hMVxshwVlJM= Subject key identifier: C5:E3:4B:DD:75:98:41:5D:0E:7E:6A:91:39:43:AE:37:82:73:17:1C Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 0103 Signing time: Sat 27 Apr 2024 05:28:20 +0000 Manifest this update: Sat 27 Apr 2024 05:28:19 +0000 Manifest next update: Sat 04 May 2024 05:28:19 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: Nb0NqSuTqH0E2XiWzJpJQt/OpKfH0UkGUoyMFEDRHpA=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: h3f2of4i7rVBSMw55O0R3l5qvKQlQOhO4lCnYkzMVq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Apr 27 05:28:19 2024 GMT Not After : May 4 05:28:19 2024 GMT Subject: CN=662c8cf3-c544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8b:ca:85:bc:e5:09:78:e7:9e:41:fe:aa:a6: 35:bb:55:20:9f:54:7f:24:42:a5:c1:b4:6f:18:5b: 5d:25:99:ec:8f:b7:d6:1b:85:29:2d:e5:07:40:81: 02:4a:67:11:34:e2:69:c1:e9:38:ae:ba:23:18:d0: 66:e4:ac:b2:a4:8e:b3:12:b3:51:1a:94:5a:6a:4a: b8:92:58:a1:82:67:83:b6:3e:76:f7:5d:0f:07:3a: 79:c7:41:82:a0:f5:4e:88:36:75:8f:59:4c:13:c3: 4f:c1:84:27:12:5b:d8:f8:48:90:66:83:fb:56:85: a6:4d:c8:90:3b:3a:86:6d:3d:49:41:85:71:81:5f: 10:cf:1a:27:b6:3a:2f:e0:2f:af:96:ef:cb:aa:57: 17:7e:dc:18:e3:ee:f7:b2:b4:95:2e:10:1e:27:61: 83:17:a0:92:e4:cb:9a:5b:f1:80:29:45:c4:e2:ce: 53:23:82:ec:75:47:33:c6:88:29:3c:d9:99:cc:4a: 3e:9c:a8:2e:17:81:58:71:f8:24:56:a4:4d:5e:2f: c2:1c:c7:9b:06:ce:ea:b9:42:49:bb:f4:b1:b3:3f: cb:69:9a:02:46:f3:aa:f9:25:29:8f:35:c8:5d:c4: a9:10:e4:a6:e6:26:52:b2:85:bf:b0:13:64:3e:42: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E3:4B:DD:75:98:41:5D:0E:7E:6A:91:39:43:AE:37:82:73:17:1C X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:5c:15:5b:45:5f:ad:6f:d0:43:1a:d1:2a:e2:02:c9:43:cc: 4a:f4:86:99:46:dd:2e:c5:d2:dc:89:79:0b:ec:3e:c5:03:0f: 04:01:09:5b:d9:01:18:14:ba:6b:81:4a:de:f8:9d:f3:95:ef: c9:21:fc:06:ba:6c:bf:e3:b2:fe:fc:b4:5f:ad:37:f4:08:4c: 02:e1:b7:82:c4:72:93:4f:f8:2b:8e:49:95:2b:65:28:2c:43: 15:84:f7:bd:a7:a6:ac:96:1b:c6:49:51:ce:f8:47:d7:07:4c: 07:63:22:3e:eb:6b:4f:46:da:ba:91:ce:5a:79:3c:d8:9d:a6: b9:96:68:e6:2f:33:1b:62:20:f2:2d:bf:f7:ef:c5:8f:48:f9: 14:cb:b0:c6:8e:4c:b2:f1:3d:1d:a2:3c:d5:d5:e0:92:e9:5e: a4:71:51:53:56:55:dc:5d:bb:9e:e5:dc:ec:7b:4f:38:da:0a: 82:d0:eb:3b:8e:ed:c6:bd:48:ce:b9:37:cf:a4:56:48:b1:43: cb:24:b7:ff:3b:19:00:cc:b8:4c:df:61:8e:ae:6a:76:67:7d: a4:55:7e:a0:ce:6e:13:50:a4:03:8b:45:60:aa:df:bc:fa:9a: b9:be:4d:2a:c1:58:74:63:e0:93:d5:53:d9:f7:40:5f:7d:37: 6d:73:9c:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjQwNDI3MDUyODE5WhcNMjQwNTA0MDUyODE5WjAYMRYwFAYD VQQDEw02NjJjOGNmMy1jNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqovKhbzlCXjnnkH+qqY1u1Ugn1R/JEKlwbRvGFtdJZnsj7fWG4UpLeUHQIEC SmcRNOJpwek4rrojGNBm5KyypI6zErNRGpRaakq4klihgmeDtj52910PBzp5x0GC oPVOiDZ1j1lME8NPwYQnElvY+EiQZoP7VoWmTciQOzqGbT1JQYVxgV8Qzxontjov 4C+vlu/LqlcXftwY4+73srSVLhAeJ2GDF6CS5MuaW/GAKUXE4s5TI4LsdUczxogp PNmZzEo+nKguF4FYcfgkVqRNXi/CHMebBs7quUJJu/Sxsz/LaZoCRvOq+SUpjzXI XcSpEOSm5iZSsoW/sBNkPkJwnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXjS911 mEFdDn5qkTlDrjeCcxccMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5XBVbRV+tb9BDGtEq4gLJQ8xK9IaZRt0uxdLciXkL7D7FAw8EAQlb 2QEYFLprgUre+J3zle/JIfwGumy/47L+/LRfrTf0CEwC4beCxHKTT/grjkmVK2Uo LEMVhPe9p6aslhvGSVHO+EfXB0wHYyI+62tPRtq6kc5aeTzYnaa5lmjmLzMbYiDy Lb/378WPSPkUy7DGjkyy8T0dojzV1eCS6V6kcVFTVlXcXbue5dzse0842gqC0Os7 ju3GvUjOuTfPpFZIsUPLJLf/OxkAzLhM32GOrmp2Z32kVX6gzm4TUKQDi0Vgqt+8 +pq5vk0qwVh0Y+CT1VPZ90BffTdtc5xh -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:38 2024 by rpki-client on console-ams.rpki-client.org