$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft File: KurroPAY2-_Rh00iahT7C5SpWH4.mft (raw, json) Hash identifier: 6UGjceCzbf8F+MkWs+WIZElXZ5SjT4DAUzxeZFXlxPM= Subject key identifier: 14:AA:24:31:0F:06:DF:CB:61:D0:DE:00:7A:A5:E8:9D:F2:37:E8:77 Authority key identifier: 2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E Certificate issuer: /CN=A9130BF5/serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft Manifest number: 025D Signing time: Sun 01 Mar 2026 02:54:08 +0000 Manifest this update: Sun 01 Mar 2026 02:54:08 +0000 Manifest next update: Sun 08 Mar 2026 02:54:08 +0000 Files and hashes: 1: KurroPAY2-_Rh00iahT7C5SpWH4.crl (hash: MZU5GWp7faO9EqEoLMcLCE8GT1spxgA/a5lZyVtyMxg=) 2: B2233F6C7FAB11ED834D8D52C4F9AE02.roa (hash: 7RkUtzQkZLY5YRqosDZQz/bCds6A9bzXj/NsapvbrFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130BF5, serialNumber=2AEAEBA0F018DBEFD1874D226A14FB0B94A9587E Validity Not Before: Mar 1 02:54:08 2026 GMT Not After : Mar 8 02:54:08 2026 GMT Subject: CN=69a3aa50-f59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:8e:f3:57:5b:d2:63:8b:41:aa:4c:82:d0: 3d:f6:69:1d:db:32:11:d5:e1:b0:f3:47:83:0f:1f: 5b:c6:58:2d:bb:a7:a2:0a:62:4a:98:91:fa:06:1e: 90:e1:7c:96:fe:57:66:0f:e3:67:55:83:90:2c:fd: c0:3b:09:7a:d7:06:cf:5a:84:e2:85:06:37:d3:75: e9:28:06:a4:94:eb:11:62:d0:3c:23:df:ae:c8:47: e1:a5:fb:de:a4:22:dd:fe:17:84:4a:32:3b:f3:c7: d0:b6:34:3f:95:df:c1:d1:da:4a:84:d2:5a:06:78: 4c:7e:88:ba:8d:5a:65:24:cd:24:2c:ff:a5:20:5d: 75:95:dd:f9:6e:5d:af:31:c7:d0:aa:f7:29:fc:90: 47:82:0d:6b:15:8c:e3:dc:ee:c6:d1:cc:a7:4b:cf: cb:4c:11:75:d6:ce:ec:8a:87:f3:1d:2c:d4:31:d8: ad:fa:c5:8e:2e:a8:20:d0:26:69:38:18:e9:df:2a: 9a:d7:31:d4:a8:fe:a2:5f:9d:53:73:ae:bc:86:f5: 8b:ae:12:a9:c1:46:b4:f6:9e:8a:6c:80:09:dc:41: fb:46:a4:fd:f7:7a:bb:75:47:b0:23:cc:5f:6b:df: e8:8f:ea:0b:6b:52:c7:0e:51:22:20:fc:a9:e3:48: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AA:24:31:0F:06:DF:CB:61:D0:DE:00:7A:A5:E8:9D:F2:37:E8:77 X509v3 Authority Key Identifier: keyid:2A:EA:EB:A0:F0:18:DB:EF:D1:87:4D:22:6A:14:FB:0B:94:A9:58:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KurroPAY2-_Rh00iahT7C5SpWH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BF5/6FC641347FA911ED9A3A4252C4F9AE02/KurroPAY2-_Rh00iahT7C5SpWH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:97:f4:e1:60:8f:38:f7:71:2f:8c:55:05:f7:49:c1:18:16: 8a:11:ac:3c:8b:ee:d2:2d:8c:81:14:e7:24:33:44:35:3e:6f: 4b:1b:4b:cb:b4:92:19:bf:46:40:21:1b:6a:59:4d:c3:3d:3f: 0e:e0:90:d9:fe:a9:a1:9e:cc:9a:35:7e:a0:36:98:63:bc:b5: 26:c8:38:ed:73:7e:17:95:e4:d9:8b:11:78:ff:39:c8:8f:c0: 0d:78:cf:e7:fb:04:2f:5f:23:9e:4d:78:a1:8b:8f:5e:7b:a1: 73:e6:18:5d:33:91:84:3e:40:71:14:65:d4:7a:97:65:21:88: d0:68:79:db:4f:2c:d2:ea:7e:13:29:48:3e:a0:57:39:43:47: 7d:0e:d0:ae:25:02:c2:38:94:ae:7a:81:e8:51:15:1c:6c:00: ea:7f:42:67:ac:38:8f:52:ca:94:63:e2:9f:e1:bf:7d:a8:67: 48:44:2a:fd:5a:fc:b4:1d:21:c2:9b:76:ef:fc:cf:29:65:7b: 63:d2:bb:83:b5:45:72:84:00:c2:f2:7c:c2:fd:b6:e6:45:c4: 71:c6:08:72:60:3b:f0:2c:1f:34:ae:1a:62:7d:ec:fa:cd:3f: 20:c2:e5:46:fc:da:6c:77:4a:f1:bd:10:af:cf:d6:3c:02:63: 8b:d9:1d:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBCRjUxMTAvBgNVBAUTKDJBRUFFQkEwRjAxOERCRUZEMTg3NEQyMjZBMTRGQjBC OTRBOTU4N0UwHhcNMjYwMzAxMDI1NDA4WhcNMjYwMzA4MDI1NDA4WjAYMRYwFAYD VQQDDA02OWEzYWE1MC1mNTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy2O81db0mOLQapMgtA99mkd2zIR1eGw80eDDx9bxlgtu6eiCmJKmJH6Bh6Q 4XyW/ldmD+NnVYOQLP3AOwl61wbPWoTihQY303XpKAaklOsRYtA8I9+uyEfhpfve pCLd/heESjI788fQtjQ/ld/B0dpKhNJaBnhMfoi6jVplJM0kLP+lIF11ld35bl2v McfQqvcp/JBHgg1rFYzj3O7G0cynS8/LTBF11s7siofzHSzUMdit+sWOLqgg0CZp OBjp3yqa1zHUqP6iX51Tc668hvWLrhKpwUa09p6KbIAJ3EH7RqT993q7dUewI8xf a9/oj+oLa1LHDlEiIPyp40gYkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBSqJDEP Bt/LYdDeAHql6J3yN+h3MB8GA1UdIwQYMBaAFCrq66DwGNvv0YdNImoU+wuUqVh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEJGNS82RkM2NDEzNDdG QTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTItX1JoMDBpYWhUN0M1U3BX SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1cnJvUEFZMi1fUmgwMGlhaFQ3QzVTcFdINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEJGNS82RkM2NDEzNDdGQTkxMUVEOUEzQTQyNTJDNEY5QUUwMi9LdXJyb1BBWTIt X1JoMDBpYWhUN0M1U3BXSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs5f04WCPOPdxL4xVBfdJwRgWihGsPIvu0i2MgRTnJDNENT5vSxtLy7SSGb9G QCEballNwz0/DuCQ2f6poZ7MmjV+oDaYY7y1Jsg47XN+F5Xk2YsReP85yI/ADXjP 5/sEL18jnk14oYuPXnuhc+YYXTORhD5AcRRl1HqXZSGI0Gh5208s0up+EylIPqBX OUNHfQ7QriUCwjiUrnqB6FEVHGwA6n9CZ6w4j1LKlGPin+G/fahnSEQq/Vr8tB0h wpt27/zPKWV7Y9K7g7VFcoQAwvJ8wv225kXEccYIcmA78CwfNK4aYn3s+s0/IMLl RvzabHdK8b0Qr8/WPAJji9kd1A== -----END CERTIFICATE-----Generated at Mon Mar 2 04:02:44 2026 by rpki-client