$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: RVcJQpr9DpdGt5Zy8Z6wIXKHOtMD35wVjt6KUPyYYQ8= Subject key identifier: 9B:50:28:DC:D1:6C:17:0E:A9:60:CF:FE:C5:A7:78:ED:8E:E0:85:DC Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 01FA Signing time: Sat 23 Aug 2025 02:36:00 +0000 Manifest this update: Sat 23 Aug 2025 02:35:59 +0000 Manifest next update: Sat 30 Aug 2025 02:35:59 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: +vjATfCZcux+KjvzLQrX6varBumzqBzOEO6Zs3acS2M=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: MPBXfbZCyqMb6fDvtDouYAKXgZIENFo3o8Zo6D/vFQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Aug 23 02:35:59 2025 GMT Not After : Aug 30 02:35:59 2025 GMT Subject: CN=68a9290f-47e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:43:ab:79:2b:bf:e1:19:c6:38:e4:b9:21: 96:df:34:65:bb:d4:e1:59:81:49:1f:ef:62:c8:5f: a1:73:80:81:d5:c8:e4:1c:ea:ba:bf:e8:ad:da:10: 0a:6a:ae:70:1a:b8:f9:1d:79:0c:d4:c9:8c:ec:1c: 2d:26:5e:5d:0f:ad:c7:37:00:f8:07:77:69:6c:36: 84:04:69:e7:3c:40:ae:ba:8c:a5:c6:05:e1:53:ed: 85:22:86:f2:c1:27:8e:26:22:ab:3b:6f:3a:a9:ce: 61:60:34:fb:5c:d2:24:21:99:c9:21:b9:88:ce:ba: ce:fc:d6:80:2b:3e:53:64:4c:6a:90:ea:52:6a:e4: c9:a0:93:e3:0f:8e:86:47:2f:71:a2:28:76:9b:13: 54:80:28:f2:e8:1b:4c:fa:a3:cf:b7:29:bb:c6:8e: 7c:10:a4:f7:49:cb:ff:9f:da:75:e3:53:8b:32:f6: ca:e7:f6:db:8f:29:fe:ab:4d:e8:a4:29:b5:39:44: 72:0f:5d:10:c1:1d:cb:72:b5:e1:60:b7:49:e8:36: 54:00:db:b1:e1:44:dd:f5:2b:73:62:b7:36:36:13: d4:f1:2d:7f:78:53:40:b1:b0:a4:fa:14:31:18:4c: 0b:51:8e:db:f6:87:ff:78:f6:ef:ad:9b:12:d8:86: 47:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:50:28:DC:D1:6C:17:0E:A9:60:CF:FE:C5:A7:78:ED:8E:E0:85:DC X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:00:80:a8:74:fb:4b:96:7b:58:aa:16:11:0c:69:9b:32:ff: 71:56:56:62:00:dd:c0:c9:ad:c6:3d:7b:1b:c5:bb:fe:3b:ac: 2b:c6:c7:4c:37:09:2c:d0:c1:14:80:8e:3d:d5:a7:53:49:64: 5b:fe:16:f2:2f:d2:4d:05:f1:38:28:bb:a7:03:29:a9:6a:5b: 2a:2a:7e:21:bd:da:05:c9:6e:c8:cf:73:3d:56:e7:8c:ce:76: be:85:f2:bb:b4:54:f3:04:c3:1f:0b:45:78:39:6f:73:ec:7b: 02:1f:b2:ff:a1:5b:e7:55:28:54:bd:6f:cb:eb:83:14:14:f5: 15:8a:7e:10:13:2f:3b:27:bc:3d:93:bd:07:00:b0:8d:a4:ae: 23:83:a7:f2:d7:be:42:30:5e:37:0d:93:f7:b1:ac:7e:3d:df: f0:bd:aa:ee:ee:9c:7c:5c:f3:39:f3:23:0c:98:95:68:11:2e: e2:7b:77:81:f8:d8:d8:05:05:3f:c6:04:3d:46:b4:bc:fc:c5: 39:cc:0b:27:89:3e:95:f7:de:4e:de:9e:c4:a3:c9:c9:01:e5: ea:e9:d1:2a:57:d0:02:36:34:a3:8a:0b:12:18:e5:27:73:4f: 3c:1c:95:3f:df:5f:42:aa:f9:0d:4e:2a:98:86:bc:d0:08:f7: 2e:a9:06:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjUwODIzMDIzNTU5WhcNMjUwODMwMDIzNTU5WjAYMRYwFAYD VQQDEw02OGE5MjkwZi00N2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCZDq3krv+EZxjjkuSGW3zRlu9ThWYFJH+9iyF+hc4CB1cjkHOq6v+it2hAK aq5wGrj5HXkM1MmM7BwtJl5dD63HNwD4B3dpbDaEBGnnPECuuoylxgXhU+2FIoby wSeOJiKrO286qc5hYDT7XNIkIZnJIbmIzrrO/NaAKz5TZExqkOpSauTJoJPjD46G Ry9xoih2mxNUgCjy6BtM+qPPtym7xo58EKT3Scv/n9p141OLMvbK5/bbjyn+q03o pCm1OURyD10QwR3LcrXhYLdJ6DZUANux4UTd9StzYrc2NhPU8S1/eFNAsbCk+hQx GEwLUY7b9of/ePbvrZsS2IZHVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtQKNzR bBcOqWDP/sWneO2O4IXcMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTAICodPtLlntYqhYRDGmbMv9xVlZiAN3Aya3GPXsbxbv+O6wrxsdM Nwks0MEUgI491adTSWRb/hbyL9JNBfE4KLunAympalsqKn4hvdoFyW7Iz3M9VueM zna+hfK7tFTzBMMfC0V4OW9z7HsCH7L/oVvnVShUvW/L64MUFPUVin4QEy87J7w9 k70HALCNpK4jg6fy175CMF43DZP3sax+Pd/wvaru7px8XPM58yMMmJVoES7ie3eB +NjYBQU/xgQ9RrS8/MU5zAsniT6V995O3p7Eo8nJAeXq6dEqV9ACNjSjigsSGOUn c088HJU/319CqvkNTiqYhrzQCPcuqQY9 -----END CERTIFICATE-----Generated at Sun Aug 24 00:47:48 2025 by rpki-client