$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: q3Eea8mTfABuIdlGLLiECWpnE+4bXDw1bCWk9q6bc3Y= Subject key identifier: E0:2E:86:1D:F8:24:5A:0C:57:6C:CD:C3:4E:86:4C:BF:40:57:8D:F8 Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 0283 Signing time: Mon 11 May 2026 01:57:14 +0000 Manifest this update: Mon 11 May 2026 01:57:14 +0000 Manifest next update: Mon 18 May 2026 01:57:14 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: /+DihiPPwggpZrFBkfF7VVqLYY26uFMIV34/8j3AAl8=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: qTMcD52pvUMM/WCWaNI81abZP7wM1l8RWKy8BwN+uGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 01:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: May 11 01:57:14 2026 GMT Not After : May 18 01:57:14 2026 GMT Subject: CN=6a01377a-ce04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:61:cd:13:74:be:0b:0e:bb:e3:df:71:aa:40: b9:d3:c0:57:60:95:44:74:8b:38:e7:74:42:98:b8: 77:35:b8:9e:e7:98:40:03:3d:32:e4:16:5b:7e:05: f9:58:14:bc:65:37:94:aa:3b:bd:bb:82:6a:fa:c7: 0c:c6:b8:d1:71:2f:e6:54:28:3d:3b:a5:26:22:b0: a3:a4:c7:02:e2:89:72:e3:f2:09:21:cb:96:e7:06: 52:e2:0e:c8:67:c0:f1:0f:5a:f3:a2:fe:09:ed:74: 0b:88:fa:eb:f1:bf:1c:a0:86:f8:bd:28:17:af:3d: b1:84:33:1e:b0:9c:97:f2:87:80:06:aa:5c:8f:a7: 8c:fe:1f:2c:81:14:0b:09:b5:bf:d9:40:86:56:6e: 33:18:85:48:fc:84:40:1f:54:5e:f6:6d:fc:23:18: b6:f7:84:94:90:f9:ee:62:3b:4c:df:73:60:8e:9f: 63:10:c6:21:5c:1f:3b:5d:ca:37:84:1f:84:f0:2a: b2:31:97:59:e4:df:b4:63:42:cd:51:82:b2:0f:5c: c5:66:04:e7:74:b6:88:67:71:85:a4:a3:37:26:1e: 08:f4:d1:cc:35:80:e4:34:fb:e1:fd:fd:11:dd:cb: 1a:ee:ea:58:bb:4b:e2:ad:9d:4e:c5:61:91:49:ec: d6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2E:86:1D:F8:24:5A:0C:57:6C:CD:C3:4E:86:4C:BF:40:57:8D:F8 X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:22:15:29:e5:89:76:48:5b:cc:bb:47:0e:1b:5d:74:0f:39: 02:70:03:72:84:44:02:8f:d9:a3:61:1a:e8:a0:f9:46:11:8f: c1:15:8a:d8:40:61:b4:d6:dd:45:72:fe:61:88:e5:5b:6c:de: 03:f7:f0:da:47:09:fd:73:db:79:da:ac:5a:93:0d:c4:bd:5a: b6:e1:40:d7:fe:8f:f2:af:25:bd:f8:1c:a3:6a:3b:38:44:87: 2f:0c:53:6c:15:69:f2:fe:22:4e:3f:15:be:0c:28:9c:4f:a8: e5:d3:14:3d:a9:33:ac:99:19:a7:4f:63:6a:ce:60:f3:c3:6c: 82:e3:c7:0f:0a:11:58:86:e4:4a:7a:01:1d:47:18:b6:fb:3c: a8:4d:87:3d:1f:66:3a:00:ea:ef:4e:9f:d1:62:17:1e:1f:62: e3:58:15:7f:0b:75:99:1c:ba:3a:f5:9f:25:8f:77:c2:ae:c3: 8f:7f:b0:20:d3:a5:a9:7c:77:16:7d:b8:b8:ee:23:32:c6:65: 21:9f:07:b2:4f:f6:b0:25:87:11:2a:dc:44:52:00:6e:b2:37: 44:f2:d4:30:d3:d5:8f:05:23:d5:34:40:57:d3:40:56:05:9f: 58:a4:0b:e9:92:29:5e:7c:77:11:f3:bc:30:67:09:f4:ad:28: 76:51:59:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjYwNTExMDE1NzE0WhcNMjYwNTE4MDE1NzE0WjAYMRYwFAYD VQQDEw02YTAxMzc3YS1jZTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjmHNE3S+Cw67499xqkC508BXYJVEdIs453RCmLh3Nbie55hAAz0y5BZbfgX5 WBS8ZTeUqju9u4Jq+scMxrjRcS/mVCg9O6UmIrCjpMcC4oly4/IJIcuW5wZS4g7I Z8DxD1rzov4J7XQLiPrr8b8coIb4vSgXrz2xhDMesJyX8oeABqpcj6eM/h8sgRQL CbW/2UCGVm4zGIVI/IRAH1Re9m38Ixi294SUkPnuYjtM33Ngjp9jEMYhXB87Xco3 hB+E8CqyMZdZ5N+0Y0LNUYKyD1zFZgTndLaIZ3GFpKM3Jh4I9NHMNYDkNPvh/f0R 3csa7upYu0virZ1OxWGRSezWXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOAuhh34 JFoMV2zNw06GTL9AV434MB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyCIVKeWJdkhbzLtHDhtddA85AnADcoREAo/Zo2Ea6KD5RhGPwRWK2EBhtNbd RXL+YYjlW2zeA/fw2kcJ/XPbedqsWpMNxL1atuFA1/6P8q8lvfgco2o7OESHLwxT bBVp8v4iTj8VvgwonE+o5dMUPakzrJkZp09jas5g88NsguPHDwoRWIbkSnoBHUcY tvs8qE2HPR9mOgDq706f0WIXHh9i41gVfwt1mRy6OvWfJY93wq7Dj3+wINOlqXx3 Fn24uO4jMsZlIZ8Hsk/2sCWHESrcRFIAbrI3RPLUMNPVjwUj1TRAV9NAVgWfWKQL 6ZIpXnx3EfO8MGcJ9K0odlFZ9g== -----END CERTIFICATE-----Generated at Wed May 13 02:54:00 2026 by rpki-client