Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer
File: 9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer (raw, json)
Hash identifier: 4zVfvoMuNbcMewQSnjIBUTZj7kHmgueXgS8QPzSuq90=
Subject key identifier: F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 335E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:01:49 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327688
IP: 41.57.0.0/18
IP: 41.57.128.0/18
IP: 2c0f:fd68::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13150 (0x335e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:01:49 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36EED3EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:8f:f1:96:6f:13:7a:e3:4d:cf:39:ed:4d:
86:4b:5c:00:0f:1f:f1:e7:ae:bf:fd:e0:1e:7d:3f:
cc:f3:f6:d1:2e:68:c1:da:6b:e9:b8:0b:44:6f:ed:
2e:5b:d6:06:9e:31:15:3b:d0:83:23:f1:e7:10:00:
07:72:1c:65:85:ed:78:d6:1f:97:bb:00:40:82:ea:
0c:66:7a:f4:f8:05:e8:ef:1a:c1:db:dc:13:28:a5:
ea:2f:4c:19:28:27:b9:e4:67:4f:a8:34:c2:1f:6d:
11:77:73:14:57:ba:0a:ed:22:23:c6:aa:a7:86:f5:
b8:d2:84:c4:f6:ad:89:5f:26:1d:2e:3d:92:99:65:
fb:4f:ee:29:7c:72:89:e7:79:33:0c:81:57:42:1e:
fe:05:43:0a:e1:fc:75:11:1e:67:0c:b7:00:bf:b8:
ac:72:80:3d:f1:41:93:50:d5:6c:04:7e:76:86:be:
93:4c:cc:0b:fb:03:58:c9:9f:2b:d2:f3:54:f7:97:
ad:f0:d1:ef:77:4e:1d:60:db:5d:c3:37:cc:04:ab:
f0:df:7c:e1:53:8d:e5:ff:97:dd:f1:70:c3:fd:0b:
ae:7f:25:79:c9:e9:48:94:4c:54:78:3c:3f:d0:10:
e2:d2:b2:f6:2d:de:e5:70:7a:d9:92:59:e1:fa:1a:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327688
sbgp-ipAddrBlock: critical
IPv4:
41.57.0.0/18
41.57.128.0/18
IPv6:
2c0f:fd68::/32
Signature Algorithm: sha256WithRSAEncryption
a3:b3:2a:d0:e7:fb:81:bf:ff:cd:d8:0d:96:5b:d3:1b:38:ed:
bc:87:f0:7f:04:ae:ce:ab:95:77:a2:09:42:44:30:cd:92:41:
cd:fd:62:b3:c6:89:d6:7b:d0:44:ec:d9:c6:29:f6:de:72:85:
e5:3b:f0:d1:c2:a3:23:68:10:00:4e:18:a3:84:fc:75:89:29:
d7:1b:c0:19:14:55:da:66:db:d8:3f:45:9b:a0:8d:30:a5:93:
52:3a:1b:6a:ad:9a:78:95:2e:53:05:be:3d:88:f6:51:0c:53:
bd:fc:8f:6d:c0:4a:3e:10:ad:ec:ee:41:e6:8a:c1:31:73:0f:
b0:bd:a8:f9:ee:23:04:3f:fa:43:3a:26:d3:fa:39:a7:3d:a3:
3d:7e:18:e5:d6:3b:66:07:f4:d2:94:b8:d9:09:a6:8c:79:a5:
97:12:6d:b1:9a:47:3d:02:fc:1c:e4:38:73:8f:e6:d9:ed:f5:
de:8c:a1:f0:1d:1f:04:0a:69:e9:a8:4d:95:d0:26:7c:6a:e6:
3b:11:15:73:39:f8:3f:c2:1e:12:7a:da:c9:a8:48:86:99:ae:
80:5d:1a:1a:d4:0e:35:a5:34:e7:d7:c4:c9:67:8f:a4:b4:e0:
f9:b4:5e:42:96:c8:84:01:86:55:d4:cd:58:8d:f6:cd:7f:8f:
de:ac:52:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:54:22 2025 by rpki-client