$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: 4kLf6E215178E76OPE5Y1Q2GTbTHAedoXMwwWSW1wPw= Subject key identifier: C3:1E:53:F9:F4:D2:9C:F3:A8:88:CE:F8:18:CB:C5:DA:72:74:6D:F1 Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 01DF Signing time: Tue 01 Jul 2025 03:09:14 +0000 Manifest this update: Tue 01 Jul 2025 03:09:13 +0000 Manifest next update: Tue 08 Jul 2025 03:09:13 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: hHdsRn6LITORxnB34u/xFXYNJiAm9mTQcbGDcB0Ffjo=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: MPBXfbZCyqMb6fDvtDouYAKXgZIENFo3o8Zo6D/vFQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Jul 1 03:09:13 2025 GMT Not After : Jul 8 03:09:13 2025 GMT Subject: CN=6863515a-8b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7c:7b:33:07:56:84:8f:a0:7e:51:34:62:be: 38:0f:e9:3d:c9:5e:50:ac:09:3f:db:f8:fc:64:6c: 5a:da:78:b4:68:3a:0c:64:3c:d8:21:50:08:2c:ad: ce:dc:63:a7:df:1d:7e:d3:72:b0:28:34:8e:d0:8a: d9:9b:56:01:ab:4b:19:5a:62:91:b6:36:2b:93:69: 22:06:2e:75:18:2a:8a:4e:25:2a:44:70:f4:5e:ea: d8:38:e7:c6:d6:e1:32:a4:54:90:73:47:85:13:75: 39:85:a9:34:18:6f:00:cd:99:b4:1d:30:3a:a1:4b: dc:e1:f5:e9:b1:e4:75:a0:77:38:56:11:c7:92:73: d5:ef:29:2c:1e:74:2f:1f:06:66:d6:db:39:cb:1e: a9:4b:64:08:17:f6:e9:d1:6f:5b:20:05:fb:fb:dd: 4c:74:3d:a0:cc:59:6a:b3:66:5f:0c:db:e8:12:e7: 22:9f:b8:7f:2b:d9:b6:fa:4f:79:fa:6d:d9:c3:34: 62:db:74:3c:bf:5f:f1:b7:a4:d1:9e:14:b8:2c:b7: 72:29:98:cc:9a:e8:8c:ba:2c:2e:65:e2:e1:e7:92: 51:fd:cb:72:77:c4:07:b5:3d:3a:b4:4b:01:56:11: 31:f3:87:94:5e:10:ae:81:61:ef:f2:4d:f6:4d:ea: 52:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1E:53:F9:F4:D2:9C:F3:A8:88:CE:F8:18:CB:C5:DA:72:74:6D:F1 X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:a5:83:0b:14:04:6c:ff:80:a9:b9:38:88:64:91:b0:e7:43: 0b:8a:dd:07:a0:e6:6c:96:12:9d:b5:06:cd:1a:dd:75:b4:76: 2e:42:e3:6a:1e:26:d3:02:24:b3:d6:9c:a1:be:71:bb:10:24: 1f:87:4d:12:29:01:3b:fc:91:a9:89:24:00:49:63:7e:99:2f: c3:66:4a:6a:1b:0a:22:d6:95:73:18:c1:03:bd:1d:99:7d:ef: 07:0f:45:38:0b:bc:6f:6a:56:88:be:ed:b0:1e:b6:48:f8:93: 71:21:bc:e7:6b:fe:17:a1:bc:7f:c9:9d:63:6e:85:4c:a9:c7: cb:b9:f4:57:ed:29:e0:01:80:7d:26:8e:b3:58:f8:79:5d:7f: 2b:51:9c:cd:24:33:cd:45:b7:20:3d:ef:bf:91:6e:e7:8b:30: 1f:06:7c:0d:a3:c0:4a:c4:00:5f:b5:c4:66:d1:20:15:4c:be: 7f:43:c2:03:51:ae:41:62:4d:f6:3e:9f:68:0e:71:07:1e:d2: 6c:f0:fd:b3:8d:3f:f8:8d:e7:29:f6:68:03:d0:f6:af:66:d3: 66:31:62:91:a1:cf:ae:4c:70:a2:6d:22:02:55:3a:73:cb:79: 84:3a:58:1b:50:73:21:2d:90:b2:28:18:4a:4a:64:c7:2f:28: 00:be:86:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjUwNzAxMDMwOTEzWhcNMjUwNzA4MDMwOTEzWjAYMRYwFAYD VQQDEw02ODYzNTE1YS04YjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznx7MwdWhI+gflE0Yr44D+k9yV5QrAk/2/j8ZGxa2ni0aDoMZDzYIVAILK3O 3GOn3x1+03KwKDSO0IrZm1YBq0sZWmKRtjYrk2kiBi51GCqKTiUqRHD0XurYOOfG 1uEypFSQc0eFE3U5hak0GG8AzZm0HTA6oUvc4fXpseR1oHc4VhHHknPV7yksHnQv HwZm1ts5yx6pS2QIF/bp0W9bIAX7+91MdD2gzFlqs2ZfDNvoEucin7h/K9m2+k95 +m3ZwzRi23Q8v1/xt6TRnhS4LLdyKZjMmuiMuiwuZeLh55JR/ctyd8QHtT06tEsB VhEx84eUXhCugWHv8k32TepSmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMeU/n0 0pzzqIjO+BjLxdpydG3xMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSpYMLFARs/4CpuTiIZJGw50MLit0HoOZslhKdtQbNGt11tHYuQuNq HibTAiSz1pyhvnG7ECQfh00SKQE7/JGpiSQASWN+mS/DZkpqGwoi1pVzGMEDvR2Z fe8HD0U4C7xvalaIvu2wHrZI+JNxIbzna/4Xobx/yZ1jboVMqcfLufRX7SngAYB9 Jo6zWPh5XX8rUZzNJDPNRbcgPe+/kW7nizAfBnwNo8BKxABftcRm0SAVTL5/Q8ID Ua5BYk32Pp9oDnEHHtJs8P2zjT/4jecp9mgD0PavZtNmMWKRoc+uTHCibSICVTpz y3mEOlgbUHMhLZCyKBhKSmTHLygAvobq -----END CERTIFICATE-----Generated at Thu Jul 3 03:22:19 2025 by rpki-client