Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft
File:                     KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json)
Hash identifier:          7w0KP8xi/Ay8dGFLC7hO4jp1OIlLwm3l9je12JMgQFg=
Subject key identifier:   49:E5:C9:11:01:D3:2F:97:31:A0:00:48:50:50:EA:9C:0E:8E:51:6A
Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E
Certificate issuer:       /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E
Certificate serial:       025D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft
Manifest number:          0257
Signing time:             Thu 19 Feb 2026 01:07:11 +0000
Manifest this update:     Thu 19 Feb 2026 01:07:11 +0000
Manifest next update:     Thu 26 Feb 2026 01:07:11 +0000
Files and hashes:         1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: Jt8NxkggI1SDHfb9JQSdXRpNuy/MtIHi/jxxc+EVG0k=)
                          2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: 7RkUtzQkZLY5YRqosDZQz/bCds6A9bzXj/NsapvbrFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl
                          rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E
        Validity
            Not Before: Feb 19 01:07:11 2026 GMT
            Not After : Feb 26 01:07:11 2026 GMT
        Subject: CN=6996623f-593b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:83:bd:92:e4:c1:fd:80:a8:2e:b3:64:4c:81:
                    68:02:31:ff:c4:d6:f7:d3:7b:d9:ff:56:8c:e8:3a:
                    80:a2:f9:52:35:b1:ec:89:11:02:6e:7d:8b:26:aa:
                    9b:af:47:1a:35:8e:6c:6b:d9:0d:2f:a3:89:5b:10:
                    f5:d5:c0:09:fe:17:f1:d6:0c:ad:96:21:56:2b:ef:
                    c1:f1:8e:68:f9:c0:a5:1b:58:43:44:24:24:5a:f7:
                    1e:53:8f:40:ad:3f:3b:88:72:ef:4c:75:d3:99:f6:
                    2e:9c:43:87:f8:78:fe:0c:93:1c:f0:59:b7:0d:78:
                    5c:e4:38:11:ea:0d:a5:46:6a:b1:1b:93:03:cf:6a:
                    6c:26:26:15:62:30:10:c4:8d:09:ef:3e:66:d8:1e:
                    fd:a8:01:8e:17:9a:65:27:ca:f0:ea:5d:41:13:9b:
                    a0:43:9f:64:56:99:89:3b:26:30:02:79:03:d8:b7:
                    6f:c5:bd:bc:6a:6f:21:4d:e6:c4:ab:30:8b:ee:dc:
                    4c:6a:59:1b:84:58:98:50:24:5f:08:67:16:61:71:
                    58:79:bd:4b:07:67:de:c0:14:6b:f9:bc:af:83:52:
                    f8:e5:cc:59:e3:55:10:86:4e:9b:72:4c:55:90:16:
                    2d:0d:36:5c:cd:51:f0:d3:4a:f7:a0:0b:a9:b8:0a:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:C9:11:01:D3:2F:97:31:A0:00:48:50:50:EA:9C:0E:8E:51:6A
            X509v3 Authority Key Identifier:
                keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ba:2b:38:7b:65:ef:5a:64:79:79:dd:40:f7:7d:90:ce:3d:
         44:18:7d:55:00:92:2a:8d:d4:cd:36:c5:f1:3e:af:b9:1f:5d:
         c5:f3:87:38:ba:6a:74:ec:1f:02:fb:ed:fd:89:54:e1:ab:ff:
         5c:c4:59:c2:1c:e7:2a:59:40:6b:be:be:8a:20:ee:c0:3d:6e:
         70:05:ef:92:4f:6e:75:c8:73:f4:f2:cc:22:fe:dd:a9:16:f8:
         6f:6a:f0:42:a9:f1:ba:ec:0c:8e:f9:8d:33:4b:32:78:47:40:
         43:7c:63:f7:0b:6e:af:42:19:74:f1:a3:7e:96:56:6d:73:b9:
         a8:a9:37:98:bb:02:ab:d7:3b:76:13:e7:45:94:ae:31:8a:35:
         60:e1:d5:e0:f1:35:3a:ca:ec:fe:65:f8:f1:65:63:c5:5f:20:
         b1:be:bd:b3:8d:3a:77:a4:1f:3d:28:34:e1:0a:c3:f0:87:0b:
         d2:21:1c:1f:c4:a8:f0:04:cc:fb:e9:8c:00:ae:b9:d4:2b:44:
         67:9b:1c:f0:19:22:b0:61:b8:6c:e1:68:0d:7f:d6:50:b6:db:
         7b:79:db:92:5f:97:4f:d3:0d:b3:2a:46:d4:27:e9:cf:f7:10:
         42:58:26:9a:7c:2c:b8:56:54:d7:65:30:84:ba:3d:81:b6:36:
         61:e5:37:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:27 2026 by rpki-client