$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: rpcllR8u77CJ8aAhj2hRPbHq0qRaS57tulpmuYz/xyQ= Subject key identifier: 76:90:BB:3B:D5:4A:6F:18:1C:C0:C1:93:21:6C:D1:22:7D:51:45:2F Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 02A7 Signing time: Thu 23 Jul 2026 02:42:16 +0000 Manifest this update: Thu 23 Jul 2026 02:42:16 +0000 Manifest next update: Thu 30 Jul 2026 02:42:16 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: H06aKt14Br7c18looxecItjTvrAQgJXtDzL/KZCawbY=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: qTMcD52pvUMM/WCWaNI81abZP7wM1l8RWKy8BwN+uGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Jul 23 02:42:16 2026 GMT Not After : Jul 30 02:42:16 2026 GMT Subject: CN=6a617f88-ede8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:67:6e:df:d0:bd:48:e2:8f:18:64:34:0f: a6:ee:83:b0:0d:a8:89:09:78:60:50:86:0b:4a:30: 22:0b:52:17:b0:dc:21:87:22:4b:7d:a8:30:07:b9: dd:c6:11:98:60:7b:01:2c:02:b7:94:ae:fd:b1:ad: 72:42:95:ba:b4:2e:a3:00:df:ba:26:4b:c8:37:f1: af:a2:af:ae:ef:e2:da:50:b2:cf:9b:a6:0f:ad:e9: 6d:b9:08:6f:f0:5b:c9:6b:e2:5c:67:2b:f3:98:21: ea:86:ec:e6:91:c4:c6:9b:cd:72:e4:67:e9:5a:1d: 4d:98:29:05:e0:8b:fc:39:24:a2:29:88:70:2e:99: cb:31:e2:7a:48:76:7b:73:e9:0b:2e:ad:03:a8:89: 26:09:a2:06:00:17:af:a7:ae:40:e4:39:38:10:f5: 13:13:27:01:2c:75:fb:36:5e:c2:e7:54:66:5d:3c: 15:36:9a:ac:38:66:0a:08:88:ff:ac:80:d4:1d:6b: 5a:19:2a:52:6d:83:0b:1c:99:b2:17:50:b6:82:4a: 62:a4:df:11:4a:36:f8:35:b8:58:a7:95:82:fb:46: 6d:da:82:e6:ec:7b:12:cc:20:96:ef:1e:6b:49:4f: 74:6f:6e:c8:f7:45:03:ad:fd:3d:9e:07:ee:7c:d1: 71:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:90:BB:3B:D5:4A:6F:18:1C:C0:C1:93:21:6C:D1:22:7D:51:45:2F X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:9c:c7:bc:d2:d7:6c:10:9f:8b:c6:b1:ed:39:ac:09:16:0a: 41:f1:fe:8b:b4:a7:7f:60:d2:31:9c:37:af:a3:1f:aa:99:90: 0a:73:58:76:86:a8:aa:9e:51:91:e0:32:dd:c1:ea:6a:8e:53: ce:65:83:10:f8:91:c4:5a:88:52:41:ef:31:51:1e:49:2b:e7: 5a:e1:b2:05:3c:c1:6d:02:c1:9f:84:82:c2:21:c6:17:ca:03: 0f:81:6b:f0:2f:97:df:8b:89:3d:80:4f:fe:73:ba:fd:00:43: c9:2e:ba:37:40:5a:dd:07:c5:91:87:3c:b7:0d:a2:0e:0b:c8: 5b:75:c2:ff:ec:92:8d:18:83:d6:24:ae:ff:81:e6:d7:36:27: 12:ed:77:80:f8:99:d2:46:54:e7:b7:ee:3b:4c:ee:86:63:7f: 38:7f:b2:dc:ac:7a:a9:a4:02:7e:df:e8:88:78:06:38:18:4f: 71:e0:e2:3b:cd:64:7c:94:33:b0:b8:51:4e:31:00:cb:0a:70: 87:9c:af:62:db:e8:6b:33:f0:1c:ba:0b:6a:2b:f9:f5:47:04: 94:d1:4d:25:68:a6:5e:e0:36:ce:04:fe:d9:98:70:ca:49:9d: c1:f2:56:8f:1e:6b:da:83:ba:95:95:46:ab:26:f6:6c:c6:97: a4:77:e4:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjYwNzIzMDI0MjE2WhcNMjYwNzMwMDI0MjE2WjAYMRYwFAYD VQQDEw02YTYxN2Y4OC1lZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+xnbt/QvUjijxhkNA+m7oOwDaiJCXhgUIYLSjAiC1IXsNwhhyJLfagwB7nd xhGYYHsBLAK3lK79sa1yQpW6tC6jAN+6JkvIN/Gvoq+u7+LaULLPm6YPreltuQhv 8FvJa+JcZyvzmCHqhuzmkcTGm81y5GfpWh1NmCkF4Iv8OSSiKYhwLpnLMeJ6SHZ7 c+kLLq0DqIkmCaIGABevp65A5Dk4EPUTEycBLHX7Nl7C51RmXTwVNpqsOGYKCIj/ rIDUHWtaGSpSbYMLHJmyF1C2gkpipN8RSjb4NbhYp5WC+0Zt2oLm7HsSzCCW7x5r SU90b27I90UDrf09ngfufNFxVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHaQuzvV Sm8YHMDBkyFs0SJ9UUUvMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKZzHvNLXbBCfi8ax7TmsCRYKQfH+i7Snf2DSMZw3r6MfqpmQCnNYdoaoqp5R keAy3cHqao5TzmWDEPiRxFqIUkHvMVEeSSvnWuGyBTzBbQLBn4SCwiHGF8oDD4Fr 8C+X34uJPYBP/nO6/QBDyS66N0Ba3QfFkYc8tw2iDgvIW3XC/+ySjRiD1iSu/4Hm 1zYnEu13gPiZ0kZU57fuO0zuhmN/OH+y3Kx6qaQCft/oiHgGOBhPceDiO81kfJQz sLhRTjEAywpwh5yvYtvoazPwHLoLaiv59UcElNFNJWimXuA2zgT+2ZhwykmdwfJW jx5r2oO6lZVGqyb2bMaXpHfkqg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:38:50 2026 by rpki-client