
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft
File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json)
Hash identifier: pMJ4TCSvbr5U08dlb+Y6OJTLJx17jBI/5bH8peeS+XM=
Subject key identifier: DF:7B:D5:C0:FC:47:37:98:03:66:D3:8B:A7:8F:FA:EC:57:36:9D:DD
Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E
Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E
Certificate serial: 027F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft
Manifest number: 0277
Signing time: Fri 17 Apr 2026 01:48:30 +0000
Manifest this update: Fri 17 Apr 2026 01:48:30 +0000
Manifest next update: Fri 24 Apr 2026 01:48:30 +0000
Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: PpgBw5fh4BaeZ7ElnN3CM6LAthSxWbwuuTScQvNwD3g=)
2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: qTMcD52pvUMM/WCWaNI81abZP7wM1l8RWKy8BwN+uGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl
rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E
Validity
Not Before: Apr 17 01:48:30 2026 GMT
Not After : Apr 24 01:48:30 2026 GMT
Subject: CN=69e1916e-61bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ae:b0:49:a1:2c:a9:d8:d5:11:f3:4b:6b:97:
21:65:25:de:ff:c6:29:f0:ee:6d:16:bc:bc:5d:06:
11:af:f1:49:70:a1:58:fd:4f:26:0b:68:28:cf:a2:
07:36:f4:7c:de:5b:1c:ba:6b:6b:0c:23:2e:6a:56:
d1:4b:3e:2a:56:b4:e2:0f:d0:c6:fb:4a:d7:bc:ba:
7d:8c:0d:07:4e:68:de:fc:97:45:40:0e:6e:94:96:
57:35:40:34:11:3f:95:76:de:9c:76:15:19:fa:f2:
a6:d6:fd:4e:fe:c9:63:71:ad:0b:18:73:32:0a:ad:
d2:67:05:b2:58:40:38:cc:5c:ec:bb:4c:07:67:1c:
fe:45:e5:63:67:b2:9a:ad:16:20:b4:92:e1:3e:0f:
68:6e:b4:b2:b1:48:d7:dc:fc:59:a1:2e:4c:7f:bc:
5d:cd:3e:e7:c8:72:1b:b7:e0:77:c6:36:9b:40:b9:
ae:27:87:fa:b0:64:0b:fd:44:32:32:34:1c:19:b2:
c7:b8:12:41:97:d0:5f:26:cd:7e:8b:44:7e:80:f1:
31:99:3f:35:e3:ab:8a:14:14:73:74:46:6b:e8:ba:
b4:5b:ce:b3:55:d3:b5:25:fd:ba:13:e0:88:16:02:
2d:b3:8e:55:fb:3b:d3:1d:49:f4:a9:cd:bd:5f:b8:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7B:D5:C0:FC:47:37:98:03:66:D3:8B:A7:8F:FA:EC:57:36:9D:DD
X509v3 Authority Key Identifier:
keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:79:5f:4e:61:68:9b:39:94:26:be:6e:97:22:e8:c4:ec:b7:
d0:03:18:eb:71:99:b9:20:30:8d:09:eb:93:a8:c1:70:13:06:
06:0e:4f:e4:c8:76:47:71:e6:f2:79:b2:c7:c0:25:d9:e5:ca:
3c:41:54:71:9f:b7:42:09:69:2e:89:9a:d3:54:e6:10:42:13:
ca:15:01:76:e8:4e:7c:01:fb:6e:ac:ab:85:c7:3c:a8:b3:cb:
bb:3e:5d:8c:38:58:e8:9a:4d:f0:88:de:e6:75:8e:80:e4:5b:
e3:d6:f2:1a:30:58:04:73:c5:b0:62:2b:42:96:5d:15:28:ef:
5a:9c:52:bf:d8:a2:1f:fa:05:4b:8b:dd:6b:13:da:91:fb:63:
0a:0d:ab:eb:c4:72:21:01:b0:78:17:60:a6:49:47:9d:88:5a:
98:2d:5b:f8:ae:4a:c1:62:e4:97:bf:91:8e:81:db:ba:f9:2f:
ea:cd:55:2c:d3:08:93:67:1d:c5:d5:10:72:72:8e:db:ec:da:
f6:e4:07:11:86:21:03:2a:be:1d:3d:0a:ff:98:e8:96:7a:6c:
03:4a:08:eb:33:e5:41:d7:82:16:81:96:18:d8:4d:93:22:82:
ff:f4:71:81:43:a4:6b:2f:37:34:02:e2:a8:e6:81:7a:5a:45:
7d:c3:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:02 2026 by rpki-client