This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: +ip7nzo5xzasFaLa0JqBnOn/l+NDx4fRO9jACa/RpJ0= Subject key identifier: 12:0D:A9:E2:4E:3C:87:98:60:52:0D:59:D1:61:7C:AF:AD:B7:7F:2D Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 024A Signing time: Sun 25 Jan 2026 01:08:42 +0000 Manifest this update: Sun 25 Jan 2026 01:08:42 +0000 Manifest next update: Sun 01 Feb 2026 01:08:42 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: V/fjtnS2ybEgKOLRCq7EV2RRWg0UPYzh4e5QNodl5Jo=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: 7RkUtzQkZLY5YRqosDZQz/bCds6A9bzXj/NsapvbrFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Jan 25 01:08:42 2026 GMT Not After : Feb 1 01:08:42 2026 GMT Subject: CN=69756d1a-ce1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:43:65:fe:ca:a7:4c:1c:a0:f4:df:56:1f: 67:16:48:92:dc:8e:f2:54:c1:0e:18:8f:c0:ac:a4: 6e:64:b2:50:50:af:ab:ff:60:3c:32:ed:2e:9c:29: c7:02:65:47:30:4e:5f:16:44:11:c2:fa:f9:f3:09: 11:51:21:21:c9:ea:b3:c1:3a:e3:2f:a8:3f:87:da: c8:59:67:95:3c:89:3f:e1:9e:66:3d:1f:45:f4:7c: b0:2a:1b:2b:91:a3:ec:a1:88:25:8d:37:da:57:0a: 10:14:4e:a9:5e:01:d6:a3:8a:f3:21:c9:12:7b:c1: 28:fe:2c:ba:83:04:25:13:88:a5:d2:5f:54:7f:f4: 81:f3:c3:c3:ef:49:47:d7:49:15:8a:d6:77:b2:d6: 43:8c:46:90:0b:2d:b6:70:a4:8b:ab:71:16:19:03: 11:14:33:17:d6:5f:27:ad:3e:cc:9e:03:ee:7d:51: 82:bf:e2:57:ce:da:97:64:11:02:fe:8d:3b:94:9f: be:8f:28:59:55:a0:8c:32:3e:f0:ff:71:e4:c2:b9: 0a:58:66:69:0f:4c:6f:af:60:80:a0:3f:22:ff:7e: 2d:5f:19:a3:c2:a6:78:10:f0:e1:5e:12:2e:f2:a8: 8f:3f:a6:76:52:a9:cd:a0:ca:e4:1c:5a:83:70:97: 84:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0D:A9:E2:4E:3C:87:98:60:52:0D:59:D1:61:7C:AF:AD:B7:7F:2D X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:f5:f6:9b:65:26:1a:ae:4e:d9:1d:5c:eb:8b:e6:d3:0a:9d: db:09:07:48:36:e6:3a:eb:90:f4:3f:8b:3a:fc:23:9a:7a:b1: df:d1:af:e9:63:0f:39:e7:f5:96:59:4d:94:ea:a0:1b:4f:75: de:2d:7c:e7:71:a2:8b:35:33:66:01:92:a6:3e:24:d3:b9:b6: a9:01:50:a6:a2:cf:44:58:16:ea:b6:de:ff:20:0c:c3:54:9d: 0a:b0:f2:2c:cf:6f:a2:6c:9b:87:46:3c:cb:4f:62:4a:37:a1: 7d:71:8f:52:01:5f:8a:6e:f2:bb:26:e0:69:d2:0d:d6:f2:eb: d2:de:0b:a5:1c:87:6e:28:04:1e:f7:8a:5e:bd:ae:54:01:e0: eb:a2:26:dd:55:7f:cc:66:3c:3a:13:5e:0a:8f:fa:36:d7:65: ef:6f:bc:29:de:57:b7:a6:ad:9b:93:76:d4:73:fa:11:df:01: 9b:b1:81:2a:f9:c8:92:9e:23:6e:c2:2d:66:32:95:d1:1e:ff: 31:ab:a9:21:18:51:44:b1:a1:44:01:00:dd:a1:f7:20:18:fa: 2f:3e:a9:b1:c3:1f:fa:0d:b0:79:79:20:dc:32:ad:42:4a:14: d4:a4:71:78:f9:62:2d:52:6a:fc:13:0d:d4:79:a0:5d:f4:b2: f3:8f:66:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjYwMTI1MDEwODQyWhcNMjYwMjAxMDEwODQyWjAYMRYwFAYD VQQDDA02OTc1NmQxYS1jZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0JDZf7Kp0wcoPTfVh9nFkiS3I7yVMEOGI/ArKRuZLJQUK+r/2A8Mu0unCnH AmVHME5fFkQRwvr58wkRUSEhyeqzwTrjL6g/h9rIWWeVPIk/4Z5mPR9F9HywKhsr kaPsoYgljTfaVwoQFE6pXgHWo4rzIckSe8Eo/iy6gwQlE4il0l9Uf/SB88PD70lH 10kVitZ3stZDjEaQCy22cKSLq3EWGQMRFDMX1l8nrT7MngPufVGCv+JXztqXZBEC /o07lJ++jyhZVaCMMj7w/3HkwrkKWGZpD0xvr2CAoD8i/34tXxmjwqZ4EPDhXhIu 8qiPP6Z2UqnNoMrkHFqDcJeESwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBINqeJO PIeYYFINWdFhfK+tt38tMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC9fabZSYark7ZHVzri+bTCp3bCQdINuY665D0P4s6/COaerHf0a/p Yw855/WWWU2U6qAbT3XeLXzncaKLNTNmAZKmPiTTubapAVCmos9EWBbqtt7/IAzD VJ0KsPIsz2+ibJuHRjzLT2JKN6F9cY9SAV+KbvK7JuBp0g3W8uvS3gulHIduKAQe 94peva5UAeDroibdVX/MZjw6E14Kj/o212Xvb7wp3le3pq2bk3bUc/oR3wGbsYEq +ciSniNuwi1mMpXRHv8xq6khGFFEsaFEAQDdofcgGPovPqmxwx/6DbB5eSDcMq1C ShTUpHF4+WItUmr8Ew3UeaBd9LLzj2ae -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:13 2026 by rpki-client