$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: yEvMFFkYlfjHoMyiJ+1n+LyUw/Tq7Clr/O93vCpm5Uk= Subject key identifier: 7A:85:50:DB:DC:B9:DF:60:46:78:30:74:41:3D:8C:38:78:60:D5:FC Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 02C6 Signing time: Mon 21 Sep 2026 01:21:23 +0000 Manifest this update: Mon 21 Sep 2026 01:21:23 +0000 Manifest next update: Mon 28 Sep 2026 01:21:23 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: hzaWoul9Lh6xNIMp8YeMQwk3vdYJeYmDwmXhaKqqAUY=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: qTMcD52pvUMM/WCWaNI81abZP7wM1l8RWKy8BwN+uGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Sep 21 01:21:23 2026 GMT Not After : Sep 28 01:21:23 2026 GMT Subject: CN=6ab08693-1c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:28:78:bb:8e:2f:aa:71:9c:92:98:51:d0:9e: 2b:8f:52:47:8a:d3:61:e4:16:c7:c6:5d:5a:7c:0d: 3c:1c:ee:2c:53:73:14:ea:d2:4c:3d:dd:f3:16:64: b3:ea:bb:da:c9:32:1e:47:cf:dc:b4:f5:d4:38:fb: ad:a9:08:51:c0:72:97:11:cc:d4:0a:66:b8:d1:38: dd:59:3b:1e:ff:b1:05:a8:df:ce:e0:54:85:60:68: 4d:01:e5:48:9d:b7:d1:6e:b0:03:78:3c:de:a3:f6: 65:a4:73:41:bc:82:4e:db:c3:8b:d2:7e:28:68:fb: 5b:83:2d:b9:19:0e:ec:2c:97:bf:41:3c:b8:55:a0: 3b:13:50:ef:d4:94:1e:0e:0e:c1:e8:b8:9a:de:47: 2c:ab:de:4f:dd:d3:ac:c9:49:71:19:e5:71:42:fa: e6:fc:94:93:70:10:4f:52:48:d0:0b:82:20:9b:af: 36:c2:92:07:b4:fa:82:cc:3a:d2:26:44:c5:d8:bc: 46:8b:64:b9:27:7c:86:1e:7a:28:af:eb:c6:4f:02: de:0e:f1:1d:2a:b5:e1:94:7d:af:ac:e9:6f:10:72: 57:a6:b0:6c:57:f4:33:3d:94:c7:65:b9:59:20:95: d6:07:15:e7:ff:9a:4f:e5:98:1e:42:91:c9:2d:fe: 1c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:85:50:DB:DC:B9:DF:60:46:78:30:74:41:3D:8C:38:78:60:D5:FC X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:63:a1:64:00:2a:94:35:11:8f:1e:0c:4f:17:e7:cb:79:2f: 36:75:4a:a5:42:61:c3:f6:df:8b:8c:38:fe:55:1c:b9:8e:1a: fd:92:b1:8b:af:22:94:96:8d:12:58:68:04:6e:c2:6f:43:e4: f5:5a:ba:8c:aa:3e:a7:8c:67:8f:2c:78:65:64:69:2a:c4:4d: 38:5a:cd:20:dd:80:f9:25:f1:e1:e6:c4:f0:34:00:82:12:f7: 31:9f:9f:1b:58:f9:83:67:87:1e:d0:72:f6:08:70:7c:da:df: c9:ef:18:47:31:02:52:1c:69:db:67:9b:48:4c:49:ce:ae:33: ff:4c:be:f0:07:2d:db:eb:bb:de:7d:be:a7:c4:4e:5b:41:e6: 5f:16:2e:62:1d:75:0c:6e:05:80:f6:ef:af:38:4c:c2:6b:96: 5c:a2:9f:20:f8:b2:fa:50:9c:a3:2b:f8:84:5a:2b:fa:17:da: 8a:2b:98:ec:ff:2e:fb:1b:bd:98:c0:ab:b8:56:11:2d:ea:60: a0:86:cb:84:62:b7:d6:95:58:ff:5d:cb:71:a6:4b:aa:06:df: e2:b4:78:dc:54:3d:ec:84:c1:8c:41:f7:64:ff:ed:40:15:93: 1d:44:34:93:d5:f4:46:2e:95:ab:03:6c:99:3e:a2:0c:33:0a: 19:1c:28:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjYwOTIxMDEyMTIzWhcNMjYwOTI4MDEyMTIzWjAYMRYwFAYD VQQDEw02YWIwODY5My0xYzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSh4u44vqnGckphR0J4rj1JHitNh5BbHxl1afA08HO4sU3MU6tJMPd3zFmSz 6rvayTIeR8/ctPXUOPutqQhRwHKXEczUCma40TjdWTse/7EFqN/O4FSFYGhNAeVI nbfRbrADeDzeo/ZlpHNBvIJO28OL0n4oaPtbgy25GQ7sLJe/QTy4VaA7E1Dv1JQe Dg7B6Lia3kcsq95P3dOsyUlxGeVxQvrm/JSTcBBPUkjQC4Igm682wpIHtPqCzDrS JkTF2LxGi2S5J3yGHnoor+vGTwLeDvEdKrXhlH2vrOlvEHJXprBsV/QzPZTHZblZ IJXWBxXn/5pP5ZgeQpHJLf4cwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqFUNvc ud9gRngwdEE9jDh4YNX8MB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqmOhZAAqlDURjx4MTxfny3kvNnVKpUJhw/bfi4w4/lUcuY4a/ZKxi68ilJaN ElhoBG7Cb0Pk9Vq6jKo+p4xnjyx4ZWRpKsRNOFrNIN2A+SXx4ebE8DQAghL3MZ+f G1j5g2eHHtBy9ghwfNrfye8YRzECUhxp22ebSExJzq4z/0y+8Act2+u73n2+p8RO W0HmXxYuYh11DG4FgPbvrzhMwmuWXKKfIPiy+lCcoyv4hFor+hfaiiuY7P8u+xu9 mMCruFYRLepgoIbLhGK31pVY/13LcaZLqgbf4rR43FQ97ITBjEH3ZP/tQBWTHUQ0 k9X0Ri6VqwNsmT6iDDMKGRwomA== -----END CERTIFICATE-----Generated at Tue Sep 22 10:57:43 2026 by rpki-client