$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: qFIEkaLdWe444WC+r7A40XcGwjITNNdPvdTOZ7QGENY= Subject key identifier: D0:ED:FE:A8:D3:DB:B9:BE:FE:2E:83:2F:AA:35:78:D1:4C:11:72:0C Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 029B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 0293 Signing time: Sat 13 Jun 2026 01:48:28 +0000 Manifest this update: Sat 13 Jun 2026 01:48:28 +0000 Manifest next update: Sat 20 Jun 2026 01:48:28 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: SF1+58v05yxH/nUeXCE3cQnoF7X5J/+BzMmO7rkpuVE=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: qTMcD52pvUMM/WCWaNI81abZP7wM1l8RWKy8BwN+uGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 01:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Jun 13 01:48:28 2026 GMT Not After : Jun 20 01:48:28 2026 GMT Subject: CN=6a2cb6ec-e838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:69:d1:38:88:52:36:a9:4f:81:02:ff:ef: cd:47:a3:33:16:26:67:1a:ed:cd:2f:5f:42:7d:cf: 67:a8:c2:3a:69:be:24:d9:cf:8e:64:f0:52:38:72: 73:41:58:01:19:20:45:9d:69:12:15:50:84:3c:10: a7:00:65:42:5b:f3:ee:7d:a3:59:4c:a3:c9:6c:99: 0f:47:4c:43:0f:5a:e1:09:76:7e:77:e3:0b:df:47: a5:c4:3f:06:a6:a1:0b:69:99:ba:2b:09:38:6f:c0: 96:23:8c:f2:98:1f:9f:fd:92:88:97:c3:19:c6:5a: 17:f9:6c:9d:fc:cd:75:0d:62:9c:e3:d6:1d:10:f6: f1:34:39:18:5b:b2:c8:a1:ba:ca:d4:33:10:b0:79: ed:d4:d6:48:d4:77:9e:1c:e7:5b:a2:34:fe:96:7e: 06:f4:bc:0c:04:ab:13:9e:a9:df:5b:32:36:73:29: 30:24:53:c3:c5:8f:38:a1:80:bf:ba:a8:14:db:3a: 93:8c:33:42:1e:91:ac:d3:c9:0b:c8:6c:26:ad:89: 4e:8b:1c:21:fc:05:59:73:dc:56:73:bd:65:42:e6: 28:96:65:5c:0a:58:7d:d5:87:41:03:fb:b1:7f:bd: ae:40:a5:75:ff:b3:bb:1f:7f:bd:ae:b9:30:ca:1e: fe:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:ED:FE:A8:D3:DB:B9:BE:FE:2E:83:2F:AA:35:78:D1:4C:11:72:0C X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:cc:c0:80:ba:85:0a:12:f0:ef:f9:cd:a8:29:a7:32:ab:13: 37:a1:3a:d8:7b:15:ae:bc:6d:d3:5e:51:15:4e:36:ad:0c:c0: 4d:11:ba:07:a6:e5:ca:fb:cd:76:5a:a3:85:d0:2e:5d:5b:f4: 37:59:26:da:d2:e3:21:de:dd:27:16:16:fd:73:44:21:a3:a8: f4:7a:09:0d:97:1f:89:d5:02:0d:24:19:30:5d:8c:ac:f3:aa: 99:91:a7:03:d9:c6:c6:da:5c:bc:a8:d8:f3:24:57:1c:58:5c: 7a:34:7c:83:a2:fe:75:79:5b:2c:2f:5c:bc:77:0a:32:0a:e7: 47:28:8d:9e:c9:37:b8:83:c7:07:82:d2:b8:ff:08:3a:81:e8: 2f:33:4d:ab:59:69:f3:a0:92:80:55:7b:02:e5:78:4b:ee:b5: b0:84:ee:83:04:d2:84:11:ba:c2:1b:d0:4c:b5:6a:20:68:76: 43:17:41:d8:d8:1c:0b:a3:5d:d5:88:2b:91:c7:88:fa:6e:18: b0:79:2b:ec:66:d0:41:5a:bb:9e:32:b2:92:08:1d:99:a5:7b: 47:ad:00:6e:86:c3:32:79:5e:a1:b4:65:8c:39:75:6b:08:8d: c5:1f:f3:c5:44:a8:f1:80:d9:b5:b2:44:1a:b2:5b:ad:be:09: 94:90:5a:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjYwNjEzMDE0ODI4WhcNMjYwNjIwMDE0ODI4WjAYMRYwFAYD VQQDEw02YTJjYjZlYy1lODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3Np0TiIUjapT4EC/+/NR6MzFiZnGu3NL19Cfc9nqMI6ab4k2c+OZPBSOHJz QVgBGSBFnWkSFVCEPBCnAGVCW/PufaNZTKPJbJkPR0xDD1rhCXZ+d+ML30elxD8G pqELaZm6Kwk4b8CWI4zymB+f/ZKIl8MZxloX+Wyd/M11DWKc49YdEPbxNDkYW7LI obrK1DMQsHnt1NZI1HeeHOdbojT+ln4G9LwMBKsTnqnfWzI2cykwJFPDxY84oYC/ uqgU2zqTjDNCHpGs08kLyGwmrYlOixwh/AVZc9xWc71lQuYolmVcClh91YdBA/ux f72uQKV1/7O7H3+9rrkwyh7+mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDt/qjT 27m+/i6DL6o1eNFMEXIMMB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ8zAgLqFChLw7/nNqCmnMqsTN6E62HsVrrxt015RFU42rQzATRG6B6blyvvN dlqjhdAuXVv0N1km2tLjId7dJxYW/XNEIaOo9HoJDZcfidUCDSQZMF2MrPOqmZGn A9nGxtpcvKjY8yRXHFhcejR8g6L+dXlbLC9cvHcKMgrnRyiNnsk3uIPHB4LSuP8I OoHoLzNNq1lp86CSgFV7AuV4S+61sITugwTShBG6whvQTLVqIGh2QxdB2NgcC6Nd 1YgrkceI+m4YsHkr7GbQQVq7njKykggdmaV7R60AbobDMnleobRljDl1awiNxR/z xUSo8YDZtbJEGrJbrb4JlJBa9A== -----END CERTIFICATE-----Generated at Sat Jun 13 09:56:12 2026 by rpki-client