Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
File: 5VXdlA8xUBhdWRwtquKfKOrq9XU.cer (raw, json)
Hash identifier: CmlQ0wO5u4robPQ/6h4AUd4XmrK91SGjfxQ1libad5I=
Subject key identifier: E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DF6
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:11:22 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37658
AS: 37670
AS: 327954
IP: 41.77.48.0/21
IP: 154.66.144.0/21
IP: 196.50.1.0/24
IP: 2c0f:fbc0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11766 (0x2df6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:11:22 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3651254AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:b0:24:93:7c:73:0c:8e:cb:ae:66:cd:d7:
79:95:37:db:00:87:71:64:98:a1:52:5c:3b:0d:23:
65:33:b9:f6:ab:90:f2:9b:94:58:51:13:13:a3:13:
8f:fa:c1:52:79:07:02:a6:b2:72:b0:55:84:e7:e9:
26:a5:c1:73:6a:79:a1:1e:bb:b1:4d:17:b0:e8:cb:
2a:0e:19:e4:e8:89:57:18:04:79:50:ac:8d:c6:fe:
7a:54:25:d6:9b:b0:0c:f1:73:ee:9e:27:d0:b9:f3:
7a:53:67:aa:3f:02:76:09:f8:ff:ef:61:ec:7f:55:
fe:b6:8b:e0:59:34:84:a7:d0:62:f6:cd:e9:80:60:
ac:e0:27:15:36:ad:e0:da:69:f2:c4:5c:74:05:d7:
26:2b:3d:30:b8:f7:e3:67:39:40:d8:ed:0a:70:6f:
4d:9d:4a:d7:dd:3e:92:b9:a5:6c:9e:1c:70:ee:92:
31:f3:f6:9b:c1:0b:dd:9c:e6:d7:fb:5d:e3:29:49:
64:65:85:8e:ef:0e:07:ba:8c:73:57:fa:50:d7:66:
3e:92:30:ea:4a:43:39:37:3c:62:d6:05:c8:57:51:
3e:00:14:29:94:c4:d2:5b:c5:4d:a8:cc:01:61:b2:
1e:be:bf:49:b7:13:d3:a0:f3:8f:23:19:d4:ed:13:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37658
37670
327954
sbgp-ipAddrBlock: critical
IPv4:
41.77.48.0/21
154.66.144.0/21
196.50.1.0/24
IPv6:
2c0f:fbc0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:57:b1:09:5b:c4:18:4a:1b:9b:7f:33:9a:9b:39:0e:63:b5:
59:9b:ff:3c:ee:ea:ec:eb:33:e6:fb:ff:10:fa:29:88:54:c4:
8b:0f:d6:4b:76:d8:2e:74:e1:c2:59:e3:f7:62:d4:90:cd:e1:
02:e1:35:6b:67:21:2a:04:98:bf:63:40:1c:6a:a9:07:f5:9d:
f9:8b:1b:55:3a:b5:64:91:ca:14:87:47:e4:58:ac:90:5e:75:
07:91:cc:7f:0c:00:83:96:4d:d6:af:23:a5:24:13:00:7e:fa:
5c:4f:97:08:79:4a:f9:e7:ec:11:1c:93:3c:eb:ae:6c:85:bb:
b5:76:18:3f:aa:52:bf:f2:30:79:c7:f7:b5:2c:45:33:46:39:
68:99:9f:77:f2:3c:bd:93:0a:28:08:17:f4:b1:42:a4:c0:fe:
4e:ba:ab:b3:de:83:25:67:6b:f6:3f:36:79:e1:ce:2d:25:17:
07:d5:14:97:f9:58:0a:54:79:2f:9a:6a:9f:f4:b9:a1:3c:92:
51:38:e5:87:45:f2:cd:34:d4:46:ef:7a:c6:18:3f:d2:f6:f1:
51:cf:b9:dd:0e:2e:ed:ff:80:e3:cd:f1:1d:66:26:cd:c8:f4:
8f:14:b5:bb:6d:46:aa:99:a7:74:db:73:99:06:5f:8d:80:9d:
e4:eb:94:ff
-----BEGIN CERTIFICATE-----
MIIGOzCCBSOgAwIBAgICLfYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMTExMjJaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjUxMjU0QUYxMTAvBgNVBAUTKEU1NTVERDk0MEYzMTUwMTg1RDU5MUMy
REFBRTI5RjI4RUFFQUY1NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDS17Akk3xzDI7LrmbN13mVN9sAh3FkmKFSXDsNI2UzufarkPKblFhRExOjE4/6
wVJ5BwKmsnKwVYTn6SalwXNqeaEeu7FNF7DoyyoOGeToiVcYBHlQrI3G/npUJdab
sAzxc+6eJ9C583pTZ6o/AnYJ+P/vYex/Vf62i+BZNISn0GL2zemAYKzgJxU2reDa
afLEXHQF1yYrPTC49+NnOUDY7Qpwb02dStfdPpK5pWyeHHDukjHz9pvBC92c5tf7
XeMpSWRlhY7vDge6jHNX+lDXZj6SMOpKQzk3PGLWBchXUT4AFCmUxNJbxU2ozAFh
sh6+v0m3E9Og848jGdTtEzHfAgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQU5VXdlA8x
UBhdWRwtquKfKOrq9XUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1MTI1NC9BMUIzMjNFRTAzMzUx
MUU2QTY3NTE5NzRGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTEyNTQvQTFCMzIzRUUwMzM1MTFFNkE2NzUxOTc0RjhBRUEyMjgvNVZYZGxB
OHhVQmhkV1J3dHF1S2ZLT3JxOVhVLm1mdDAkBggrBgEFBQcBCAEB/wQVMBOgETAP
AgMAkxoCAwCTJgIDBQESMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDKU0w
AwQDmkKQAwQAxDIBMA0EAgACMAcDBQAsD/vAMA0GCSqGSIb3DQEBCwUAA4IBAQA9
V7EJW8QYShubfzOamzkOY7VZm/887urs6zPm+/8Q+imIVMSLD9ZLdtgudOHCWeP3
YtSQzeEC4TVrZyEqBJi/Y0AcaqkH9Z35ixtVOrVkkcoUh0fkWKyQXnUHkcx/DACD
lk3WryOlJBMAfvpcT5cIeUr55+wRHJM8665shbu1dhg/qlK/8jB5x/e1LEUzRjlo
mZ938jy9kwooCBf0sUKkwP5Ouquz3oMlZ2v2PzZ54c4tJRcH1RSX+VgKVHkvmmqf
9LmhPJJROOWHRfLNNNRG73rGGD/S9vFRz7ndDi7t/4DjzfEdZibNyPSPFLW7bUaq
mad023OZBl+NgJ3k65T/
-----END CERTIFICATE-----
Generated at Fri Apr 4 09:32:20 2025 by rpki-client