$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: EVjUY90kvCM9Zz6az5pIkzdoRwSSVtl8CA9oIGVx47E= Subject key identifier: E4:76:FF:82:0A:7E:69:75:03:C3:2D:2A:B0:0C:3D:B5:E0:54:9B:30 Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 021F Signing time: Wed 05 Nov 2025 02:16:50 +0000 Manifest this update: Wed 05 Nov 2025 02:16:49 +0000 Manifest next update: Wed 12 Nov 2025 02:16:49 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: cOrtXRXBx3J0JDRyP1liBm3tam9A2/BkMWg+8ELNQF8=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: MPBXfbZCyqMb6fDvtDouYAKXgZIENFo3o8Zo6D/vFQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Nov 5 02:16:49 2025 GMT Not After : Nov 12 02:16:49 2025 GMT Subject: CN=690ab391-0815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:d7:c6:fb:23:f3:40:ca:5e:fd:6f:b7:c9: 58:0c:a6:41:7e:84:bf:40:0f:62:94:3f:90:f1:cb: 7f:6c:0b:51:01:34:2d:82:1a:9b:f8:be:d9:bd:af: 2a:76:95:61:e0:bf:8f:0f:f8:ce:1d:c7:45:49:e3: 40:2b:a1:ef:d9:84:f7:06:07:54:61:bb:7d:fc:39: 5c:36:e5:38:1b:a4:24:09:6f:76:3c:bc:ec:01:d5: 1b:f8:c0:37:d1:a8:fa:fc:cb:dd:3d:66:a7:9a:72: 9f:a6:73:69:0b:d0:1f:ea:2b:e1:cc:2a:eb:50:0d: 10:8c:6b:57:a2:96:10:8e:1c:fc:ef:25:9f:cd:f7: 21:b5:9d:6c:34:a0:63:e6:fa:1f:78:05:39:ff:19: 41:fb:eb:05:0e:1b:4d:66:28:25:56:bf:4e:19:8e: 6f:8b:8a:3f:ee:82:2a:d3:e1:0d:7d:f6:98:24:65: a4:3a:11:e0:08:f2:fc:a6:ea:67:21:24:ef:32:4a: d7:3a:55:5e:d5:df:35:81:f8:29:d4:02:51:e0:ae: b9:28:1f:51:c1:7b:63:01:7b:7a:76:b3:06:fa:56: 70:b6:82:cc:1c:30:2f:36:c1:f1:1a:b3:32:42:a9: a8:9a:16:5a:4a:24:d5:34:ce:3f:8d:7b:21:4d:ac: 1f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:76:FF:82:0A:7E:69:75:03:C3:2D:2A:B0:0C:3D:B5:E0:54:9B:30 X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:c9:72:5c:37:1a:5d:c0:4a:1f:64:8b:2b:89:01:cf:3f:38: ec:3c:99:92:71:8c:15:9f:39:d1:db:d8:9d:55:01:52:93:a8: 06:4e:ee:e8:86:d2:7f:93:a5:ed:82:76:32:91:b9:09:8f:d5: 70:84:fb:d2:63:7b:d7:b7:ae:33:72:2e:60:bd:4c:b2:7e:29: c3:58:c3:d5:12:28:7e:5b:cd:8b:8c:a0:64:6d:4e:92:25:6b: a0:d8:91:d7:f7:c8:80:4b:91:28:6c:d0:22:c5:6a:d6:18:78: ae:b5:5b:31:ff:ca:b0:b0:19:7a:ab:87:fd:53:8a:a8:c6:b2: 88:b9:52:00:09:19:95:f3:29:d6:29:11:ba:5d:29:47:49:d6: 55:9d:74:d5:5c:f0:77:7f:fb:06:10:eb:36:23:d2:67:aa:bb: 3a:30:9b:7c:45:cc:88:9d:9c:7d:65:7d:77:67:52:74:30:3a: 5d:1a:b3:0f:63:f4:b9:bc:e6:8b:27:9b:c9:c2:16:88:db:db: b8:0f:b8:60:98:4a:40:4e:a2:18:a3:7e:5f:b6:68:be:2c:98: e1:df:3a:32:38:e1:2d:3c:dc:70:01:28:31:e0:2c:e7:d6:58: 67:ec:ad:9e:9b:95:c8:f5:99:a5:24:4c:a6:45:16:f8:7d:cc: f7:9e:40:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjUxMTA1MDIxNjQ5WhcNMjUxMTEyMDIxNjQ5WjAYMRYwFAYD VQQDEw02OTBhYjM5MS0wODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRDXxvsj80DKXv1vt8lYDKZBfoS/QA9ilD+Q8ct/bAtRATQtghqb+L7Zva8q dpVh4L+PD/jOHcdFSeNAK6Hv2YT3BgdUYbt9/DlcNuU4G6QkCW92PLzsAdUb+MA3 0aj6/MvdPWanmnKfpnNpC9Af6ivhzCrrUA0QjGtXopYQjhz87yWfzfchtZ1sNKBj 5vofeAU5/xlB++sFDhtNZiglVr9OGY5vi4o/7oIq0+ENffaYJGWkOhHgCPL8pupn ISTvMkrXOlVe1d81gfgp1AJR4K65KB9RwXtjAXt6drMG+lZwtoLMHDAvNsHxGrMy QqmomhZaSiTVNM4/jXshTawfLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOR2/4IK fml1A8MtKrAMPbXgVJswMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnyXJcNxpdwEofZIsriQHPPzjsPJmScYwVnznR29idVQFSk6gGTu7o htJ/k6XtgnYykbkJj9VwhPvSY3vXt64zci5gvUyyfinDWMPVEih+W82LjKBkbU6S JWug2JHX98iAS5EobNAixWrWGHiutVsx/8qwsBl6q4f9U4qoxrKIuVIACRmV8ynW KRG6XSlHSdZVnXTVXPB3f/sGEOs2I9Jnqrs6MJt8RcyInZx9ZX13Z1J0MDpdGrMP Y/S5vOaLJ5vJwhaI29u4D7hgmEpATqIYo35ftmi+LJjh3zoyOOEtPNxwASgx4Czn 1lhn7K2em5XI9ZmlJEymRRb4fcz3nkD7 -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:52 2025 by rpki-client