Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft
File:                     KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json)
Hash identifier:          pMJ4TCSvbr5U08dlb+Y6OJTLJx17jBI/5bH8peeS+XM=
Subject key identifier:   DF:7B:D5:C0:FC:47:37:98:03:66:D3:8B:A7:8F:FA:EC:57:36:9D:DD
Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E
Certificate issuer:       /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E
Certificate serial:       027F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft
Manifest number:          0277
Signing time:             Fri 17 Apr 2026 01:48:30 +0000
Manifest this update:     Fri 17 Apr 2026 01:48:30 +0000
Manifest next update:     Fri 24 Apr 2026 01:48:30 +0000
Files and hashes:         1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: PpgBw5fh4BaeZ7ElnN3CM6LAthSxWbwuuTScQvNwD3g=)
                          2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: qTMcD52pvUMM/WCWaNI81abZP7wM1l8RWKy8BwN+uGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl
                          rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E
        Validity
            Not Before: Apr 17 01:48:30 2026 GMT
            Not After : Apr 24 01:48:30 2026 GMT
        Subject: CN=69e1916e-61bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ae:b0:49:a1:2c:a9:d8:d5:11:f3:4b:6b:97:
                    21:65:25:de:ff:c6:29:f0:ee:6d:16:bc:bc:5d:06:
                    11:af:f1:49:70:a1:58:fd:4f:26:0b:68:28:cf:a2:
                    07:36:f4:7c:de:5b:1c:ba:6b:6b:0c:23:2e:6a:56:
                    d1:4b:3e:2a:56:b4:e2:0f:d0:c6:fb:4a:d7:bc:ba:
                    7d:8c:0d:07:4e:68:de:fc:97:45:40:0e:6e:94:96:
                    57:35:40:34:11:3f:95:76:de:9c:76:15:19:fa:f2:
                    a6:d6:fd:4e:fe:c9:63:71:ad:0b:18:73:32:0a:ad:
                    d2:67:05:b2:58:40:38:cc:5c:ec:bb:4c:07:67:1c:
                    fe:45:e5:63:67:b2:9a:ad:16:20:b4:92:e1:3e:0f:
                    68:6e:b4:b2:b1:48:d7:dc:fc:59:a1:2e:4c:7f:bc:
                    5d:cd:3e:e7:c8:72:1b:b7:e0:77:c6:36:9b:40:b9:
                    ae:27:87:fa:b0:64:0b:fd:44:32:32:34:1c:19:b2:
                    c7:b8:12:41:97:d0:5f:26:cd:7e:8b:44:7e:80:f1:
                    31:99:3f:35:e3:ab:8a:14:14:73:74:46:6b:e8:ba:
                    b4:5b:ce:b3:55:d3:b5:25:fd:ba:13:e0:88:16:02:
                    2d:b3:8e:55:fb:3b:d3:1d:49:f4:a9:cd:bd:5f:b8:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7B:D5:C0:FC:47:37:98:03:66:D3:8B:A7:8F:FA:EC:57:36:9D:DD
            X509v3 Authority Key Identifier:
                keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:79:5f:4e:61:68:9b:39:94:26:be:6e:97:22:e8:c4:ec:b7:
         d0:03:18:eb:71:99:b9:20:30:8d:09:eb:93:a8:c1:70:13:06:
         06:0e:4f:e4:c8:76:47:71:e6:f2:79:b2:c7:c0:25:d9:e5:ca:
         3c:41:54:71:9f:b7:42:09:69:2e:89:9a:d3:54:e6:10:42:13:
         ca:15:01:76:e8:4e:7c:01:fb:6e:ac:ab:85:c7:3c:a8:b3:cb:
         bb:3e:5d:8c:38:58:e8:9a:4d:f0:88:de:e6:75:8e:80:e4:5b:
         e3:d6:f2:1a:30:58:04:73:c5:b0:62:2b:42:96:5d:15:28:ef:
         5a:9c:52:bf:d8:a2:1f:fa:05:4b:8b:dd:6b:13:da:91:fb:63:
         0a:0d:ab:eb:c4:72:21:01:b0:78:17:60:a6:49:47:9d:88:5a:
         98:2d:5b:f8:ae:4a:c1:62:e4:97:bf:91:8e:81:db:ba:f9:2f:
         ea:cd:55:2c:d3:08:93:67:1d:c5:d5:10:72:72:8e:db:ec:da:
         f6:e4:07:11:86:21:03:2a:be:1d:3d:0a:ff:98:e8:96:7a:6c:
         03:4a:08:eb:33:e5:41:d7:82:16:81:96:18:d8:4d:93:22:82:
         ff:f4:71:81:43:a4:6b:2f:37:34:02:e2:a8:e6:81:7a:5a:45:
         7d:c3:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:02 2026 by rpki-client