$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: LYEL6FREbfoj+yz1ADeNyhRV7Ki0BC0Q9O5aLCLjsYw= Subject key identifier: AA:C0:33:41:70:81:05:25:BB:A4:ED:6E:22:A7:9B:2A:2C:01:B6:6D Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 01BE Signing time: Fri 25 Apr 2025 02:17:10 +0000 Manifest this update: Fri 25 Apr 2025 02:17:10 +0000 Manifest next update: Fri 02 May 2025 02:17:10 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: m0p/ScQ8xScZgerSwAuSNgAaKHijPxi5FlDWcf2MRK4=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: MPBXfbZCyqMb6fDvtDouYAKXgZIENFo3o8Zo6D/vFQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Apr 25 02:17:10 2025 GMT Not After : May 2 02:17:10 2025 GMT Subject: CN=680af0a6-e0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d6:40:44:3b:62:d6:af:62:0e:db:8a:f8:d7: c5:80:6d:c4:4b:40:26:1e:c6:48:82:9e:e6:32:1c: a5:e4:04:3a:e8:53:26:70:1b:d3:67:ea:9b:9f:2c: 73:9f:a9:ef:2c:11:f1:0a:27:18:05:da:61:1a:4b: 20:90:05:f5:05:a0:ad:fd:4a:c5:36:fd:0b:d9:b3: a4:66:f9:3b:0b:df:35:d7:28:a4:dd:f4:ab:a8:a1: 08:f3:61:f1:b5:e2:76:3e:4c:c2:71:b1:68:eb:1d: b3:c9:0f:ef:8c:32:7e:67:9b:88:e1:f0:b4:7d:f4: 05:48:ef:c7:8c:33:ac:26:80:c9:f7:03:0f:51:02: 5e:ed:37:92:90:f0:ed:0e:63:b0:35:1e:6f:36:1f: a4:46:f9:af:8a:72:bc:c3:9b:07:86:6a:f9:f6:87: 18:2a:d8:2e:87:91:e9:8f:ac:77:35:6f:fb:90:06: 82:de:98:03:5d:ff:11:98:84:4b:3a:11:44:8d:d2: 14:db:af:3b:4d:d9:78:9a:96:f2:7a:6d:98:e7:bb: 53:bd:21:fe:8c:3f:95:9d:21:39:59:fb:3b:06:44: 0c:f1:73:bd:59:44:14:0e:3d:21:77:a9:72:c7:8d: 91:9d:5a:b5:5c:8a:90:23:3c:93:06:11:eb:e3:b1: 9b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C0:33:41:70:81:05:25:BB:A4:ED:6E:22:A7:9B:2A:2C:01:B6:6D X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:1d:0d:61:37:62:7a:2f:e2:cc:7f:b8:a4:16:8d:06:b3:d8: 92:b7:c6:d8:1b:24:b6:97:b3:d7:c9:bf:e9:4b:19:11:fa:7f: f1:2f:2b:f3:0e:46:8f:3d:6d:8a:a4:e8:35:6e:ff:cf:d8:47: 61:68:0e:53:de:4f:96:ad:58:62:46:62:72:1b:16:89:1e:dd: b7:a2:2a:13:fd:00:34:c1:6e:60:ab:8c:b7:ac:ec:1c:45:5c: 3d:46:5a:97:5c:a7:d7:df:b8:5f:66:94:9a:50:62:93:b6:77: f9:09:86:6b:eb:de:3c:3e:ae:4c:a6:02:a3:5d:7c:42:e4:eb: 41:26:f5:31:63:46:99:6d:76:97:2e:d6:20:75:c6:0c:80:83: b5:c5:f1:61:9d:db:ff:00:2c:18:1a:64:1c:6a:a1:1e:b3:7b: e6:2a:3b:6d:c2:f4:76:7a:f2:18:4c:49:21:e5:be:44:11:0b: 2a:a2:6c:a2:f6:bd:32:cf:b3:32:97:17:51:da:d4:42:07:8d: 27:ea:46:af:fc:9b:7c:59:1f:ab:46:17:5f:b4:05:96:0a:e8: 30:db:3e:f4:f5:9c:77:38:ba:4b:6b:3f:27:b9:8a:04:3e:e2: ae:55:0f:b3:1a:bb:54:a1:6d:ae:41:2a:3c:3e:05:e8:87:16: 50:39:a8:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjUwNDI1MDIxNzEwWhcNMjUwNTAyMDIxNzEwWjAYMRYwFAYD VQQDEw02ODBhZjBhNi1lMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NZARDti1q9iDtuK+NfFgG3ES0AmHsZIgp7mMhyl5AQ66FMmcBvTZ+qbnyxz n6nvLBHxCicYBdphGksgkAX1BaCt/UrFNv0L2bOkZvk7C9811yik3fSrqKEI82Hx teJ2PkzCcbFo6x2zyQ/vjDJ+Z5uI4fC0ffQFSO/HjDOsJoDJ9wMPUQJe7TeSkPDt DmOwNR5vNh+kRvmvinK8w5sHhmr59ocYKtguh5Hpj6x3NW/7kAaC3pgDXf8RmIRL OhFEjdIU2687Tdl4mpbyem2Y57tTvSH+jD+VnSE5Wfs7BkQM8XO9WUQUDj0hd6ly x42RnVq1XIqQIzyTBhHr47GbFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrAM0Fw gQUlu6TtbiKnmyosAbZtMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWHQ1hN2J6L+LMf7ikFo0Gs9iSt8bYGyS2l7PXyb/pSxkR+n/xLyvz DkaPPW2KpOg1bv/P2EdhaA5T3k+WrVhiRmJyGxaJHt23oioT/QA0wW5gq4y3rOwc RVw9RlqXXKfX37hfZpSaUGKTtnf5CYZr6948Pq5MpgKjXXxC5OtBJvUxY0aZbXaX LtYgdcYMgIO1xfFhndv/ACwYGmQcaqEes3vmKjttwvR2evIYTEkh5b5EEQsqomyi 9r0yz7MylxdR2tRCB40n6kav/Jt8WR+rRhdftAWWCugw2z709Zx3OLpLaz8nuYoE PuKuVQ+zGrtUoW2uQSo8PgXohxZQOahP -----END CERTIFICATE-----Generated at Sat Apr 26 05:28:34 2025 by rpki-client