$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: mZGILrb49by+G0z6/NyK8/AOKXewvRvkAe4/Gsjq6sE= Subject key identifier: 5E:B6:F7:A7:B3:E4:17:30:61:6E:07:C3:02:3F:05:A3:C1:86:6A:61 Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 0217 Signing time: Sun 19 Oct 2025 04:31:44 +0000 Manifest this update: Sun 19 Oct 2025 04:31:43 +0000 Manifest next update: Sun 26 Oct 2025 04:31:43 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: vbMHQEHnw9zL8oU6UnSaHQ5EQUDwol2B6YD8J3O1q7Q=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: MPBXfbZCyqMb6fDvtDouYAKXgZIENFo3o8Zo6D/vFQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Oct 19 04:31:43 2025 GMT Not After : Oct 26 04:31:43 2025 GMT Subject: CN=68f469af-8db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:16:fb:48:88:e9:3f:a9:ac:88:e9:72:c6:93: 3e:da:fd:71:1f:72:45:2a:3a:83:90:a2:05:72:9d: f1:f8:31:cd:cc:dc:3a:56:c5:5c:79:d7:11:f6:dd: 1d:85:2b:a9:8d:2f:49:5a:d5:68:22:89:03:1f:88: 7e:f1:89:68:84:8d:20:99:b2:4d:41:4d:95:10:f6: 6a:f9:7c:eb:cd:e2:b9:76:c5:ee:25:bf:bd:a7:2d: f1:80:36:3d:f9:2c:ed:0d:47:3d:63:4b:71:13:0d: 87:4d:7e:e2:e9:78:a6:5f:c8:c4:76:a3:5e:b9:a9: 20:63:ae:d6:ff:88:fb:16:c7:7d:65:17:88:ef:1c: f1:fc:a5:aa:0f:5d:26:c2:7b:a5:51:ac:ee:91:0d: 08:8f:6a:75:8e:f2:35:8b:f5:64:07:c6:31:65:76: 63:f1:f0:f7:e9:29:8d:65:72:96:a8:d3:25:91:45: ed:3b:37:45:fd:71:3c:9f:52:a4:5a:68:0c:44:20: 01:02:ad:79:98:05:fb:e9:e3:1e:86:38:a8:45:d6: c6:d7:67:10:8a:f4:1c:bd:4d:bc:8e:60:15:21:8e: 18:f2:30:93:0e:0d:29:19:0e:86:c2:36:e3:36:3b: de:44:67:9e:a5:4e:4f:e2:d0:83:b3:c3:5a:09:5f: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B6:F7:A7:B3:E4:17:30:61:6E:07:C3:02:3F:05:A3:C1:86:6A:61 X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:82:0a:4e:f3:1c:f1:74:11:67:77:b4:3f:45:c8:d4:94:bf: b5:01:56:f4:66:a3:84:57:55:bf:36:df:35:4e:22:28:b4:dd: 3c:e2:bb:28:bf:d4:e0:52:bd:ac:bf:6e:6c:2c:81:a4:fb:93: dc:b2:2f:23:2a:81:5f:3b:77:87:ae:cd:f2:d4:ea:16:c6:a7: 8a:ef:b7:cd:24:89:47:bc:1b:eb:6b:4e:22:21:fe:86:9c:f9: e4:1e:ce:bf:62:25:04:bc:f9:21:e5:ca:bd:e0:b2:23:97:13: c8:30:4d:2d:22:0a:81:d4:54:74:37:f7:6a:08:58:3a:c7:df: c7:42:3a:ee:3a:fd:4c:93:b5:a4:e9:e3:44:52:bc:82:3c:17: 1a:76:4d:5b:22:c1:c1:42:5b:ce:0d:61:6e:86:e3:85:9c:65: 67:41:eb:5d:43:0e:13:7a:03:dd:65:75:83:d8:12:74:d4:92: af:84:e1:55:eb:c9:5b:25:ae:a2:20:54:f5:b1:34:38:18:49: 56:fa:ff:b9:04:09:e4:00:d2:b4:43:e1:91:6d:f6:bb:54:fa: 73:67:74:5c:ca:f9:7b:eb:81:98:c1:2e:2d:98:3b:d5:9c:73: 53:07:21:bb:df:6a:2b:cf:c9:e4:3d:16:c7:b8:b8:c1:6d:b3: 77:aa:bc:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjUxMDE5MDQzMTQzWhcNMjUxMDI2MDQzMTQzWjAYMRYwFAYD VQQDEw02OGY0NjlhZi04ZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRb7SIjpP6msiOlyxpM+2v1xH3JFKjqDkKIFcp3x+DHNzNw6VsVcedcR9t0d hSupjS9JWtVoIokDH4h+8YlohI0gmbJNQU2VEPZq+XzrzeK5dsXuJb+9py3xgDY9 +SztDUc9Y0txEw2HTX7i6XimX8jEdqNeuakgY67W/4j7Fsd9ZReI7xzx/KWqD10m wnulUazukQ0Ij2p1jvI1i/VkB8YxZXZj8fD36SmNZXKWqNMlkUXtOzdF/XE8n1Kk WmgMRCABAq15mAX76eMehjioRdbG12cQivQcvU28jmAVIY4Y8jCTDg0pGQ6Gwjbj NjveRGeepU5P4tCDs8NaCV89zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6296ez 5BcwYW4HwwI/BaPBhmphMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+ggpO8xzxdBFnd7Q/RcjUlL+1AVb0ZqOEV1W/Nt81TiIotN084rso v9TgUr2sv25sLIGk+5Pcsi8jKoFfO3eHrs3y1OoWxqeK77fNJIlHvBvra04iIf6G nPnkHs6/YiUEvPkh5cq94LIjlxPIME0tIgqB1FR0N/dqCFg6x9/HQjruOv1Mk7Wk 6eNEUryCPBcadk1bIsHBQlvODWFuhuOFnGVnQetdQw4TegPdZXWD2BJ01JKvhOFV 68lbJa6iIFT1sTQ4GElW+v+5BAnkANK0Q+GRbfa7VPpzZ3Rcyvl764GYwS4tmDvV nHNTByG732orz8nkPRbHuLjBbbN3qrwo -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:44 2025 by rpki-client