$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: qnB/0oAfBJF6pCE8+X9TqpaM9p3+CU2C0bgN6JI3cPY= Subject key identifier: 11:13:1F:0F:98:9E:A7:4E:4C:02:7C:E6:00:9E:89:09:9A:DB:DF:57 Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 021E Signing time: Mon 03 Nov 2025 02:08:46 +0000 Manifest this update: Mon 03 Nov 2025 02:08:45 +0000 Manifest next update: Mon 10 Nov 2025 02:08:45 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: Hineefx9g8BWVWucyBjzOX5yTXV32KohBiij7y8uu1g=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: MPBXfbZCyqMb6fDvtDouYAKXgZIENFo3o8Zo6D/vFQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Nov 3 02:08:45 2025 GMT Not After : Nov 10 02:08:45 2025 GMT Subject: CN=69080eae-317a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:c2:d1:3a:71:c6:72:d7:6a:c3:25:a6:3f: 5d:0a:ca:34:74:29:3e:7e:98:3f:38:63:a3:6b:68: e8:dc:3e:cc:87:7f:c8:39:87:b4:cb:81:dc:95:3f: b1:ab:92:d5:40:5e:80:15:8e:81:bc:a8:55:f3:15: 30:d1:b1:54:d6:c9:f9:b2:0a:37:86:09:83:d5:e1: 44:8a:1e:be:f6:d9:2d:ff:e4:da:08:f3:1e:0b:91: 64:fe:8f:e1:2f:5a:75:1e:83:0c:62:b3:45:67:2f: ab:ec:2f:de:3c:05:cc:66:bf:1c:1e:79:6c:25:86: 97:9a:54:07:0a:c7:67:9c:b2:7d:29:63:be:8c:32: b0:a8:2f:ef:16:c9:84:49:c1:e8:d7:b7:c0:4a:d4: 55:79:62:35:97:16:c2:9e:b7:19:9b:16:0c:03:c8: d1:c3:67:1f:04:2d:e8:82:eb:e5:26:3f:79:bc:1b: 1a:63:4f:5c:07:56:3c:87:1a:0a:f7:9b:6e:26:53: 8c:ab:e6:9b:04:d3:fe:15:e5:09:80:47:46:35:bd: 47:51:de:f3:3f:e5:82:c4:bd:d0:18:27:8f:d2:fc: 79:c4:18:4a:a6:3d:18:29:f4:69:93:ff:3b:c8:58: 07:0b:81:24:37:77:b7:08:cb:da:75:40:3c:b1:cd: 43:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:13:1F:0F:98:9E:A7:4E:4C:02:7C:E6:00:9E:89:09:9A:DB:DF:57 X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:01:a3:20:73:07:d6:4f:1f:06:16:41:67:8d:1c:a7:6a:c0: 4b:3a:52:9f:40:fe:34:02:41:51:12:96:b8:04:84:3e:fa:bc: d6:b5:4d:d8:7b:be:a6:ab:11:de:08:11:84:db:db:54:5f:63: dd:ba:84:2a:25:b6:70:2b:67:59:17:b3:af:35:c6:dd:4d:55: 61:fb:c7:bb:6a:fa:1e:85:26:c0:88:c3:ff:a9:07:95:a6:72: 6e:f8:70:b8:eb:ac:63:62:fe:2c:63:d4:3c:c0:d8:e8:47:d7: ad:4f:30:43:9c:2b:ed:89:48:02:e2:38:af:42:b7:db:54:a6: 00:98:ad:eb:be:f1:f6:cf:5e:36:5b:70:ff:e3:46:a2:a0:22: 57:ee:46:b3:29:ab:94:1f:51:b8:9f:63:19:ea:85:13:18:70: bd:53:2f:70:3a:0d:ed:d0:4f:a6:6b:ec:f8:e6:74:ed:47:5f: 05:65:88:b4:a1:c5:5c:f1:08:ab:c8:80:ad:c6:24:fc:28:05: a1:4d:b2:d6:d5:d1:cc:db:a2:f7:e3:e4:d5:2d:e7:3f:c9:b1: 41:75:83:5e:8d:70:3d:d8:0e:a3:30:f1:8e:43:46:a0:fe:9c: 40:a1:b2:b4:7c:da:12:72:5b:47:3f:d4:8f:ac:16:b6:38:ee: 9f:03:80:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjUxMTAzMDIwODQ1WhcNMjUxMTEwMDIwODQ1WjAYMRYwFAYD VQQDEw02OTA4MGVhZS0zMTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsh3C0TpxxnLXasMlpj9dCso0dCk+fpg/OGOja2jo3D7Mh3/IOYe0y4HclT+x q5LVQF6AFY6BvKhV8xUw0bFU1sn5sgo3hgmD1eFEih6+9tkt/+TaCPMeC5Fk/o/h L1p1HoMMYrNFZy+r7C/ePAXMZr8cHnlsJYaXmlQHCsdnnLJ9KWO+jDKwqC/vFsmE ScHo17fAStRVeWI1lxbCnrcZmxYMA8jRw2cfBC3oguvlJj95vBsaY09cB1Y8hxoK 95tuJlOMq+abBNP+FeUJgEdGNb1HUd7zP+WCxL3QGCeP0vx5xBhKpj0YKfRpk/87 yFgHC4EkN3e3CMvadUA8sc1DnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBETHw+Y nqdOTAJ85gCeiQma299XMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWAaMgcwfWTx8GFkFnjRynasBLOlKfQP40AkFREpa4BIQ++rzWtU3Y e76mqxHeCBGE29tUX2PduoQqJbZwK2dZF7OvNcbdTVVh+8e7avoehSbAiMP/qQeV pnJu+HC466xjYv4sY9Q8wNjoR9etTzBDnCvtiUgC4jivQrfbVKYAmK3rvvH2z142 W3D/40aioCJX7kazKauUH1G4n2MZ6oUTGHC9Uy9wOg3t0E+ma+z45nTtR18FZYi0 ocVc8QiryICtxiT8KAWhTbLW1dHM26L34+TVLec/ybFBdYNejXA92A6jMPGOQ0ag /pxAobK0fNoScltHP9SPrBa2OO6fA4CE -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:22 2025 by rpki-client