Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer
File: 9e2RvGqsS_b5N0e41TmTDZwMAis.cer (raw, json)
Hash identifier: Ir/P5BM3U2q2bnZOJthOBMpbO4qL1g7U8mhLXXO78YY=
Subject key identifier: F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3627
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 08 Sep 2025 20:08:18 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 20928
IP: 41.187.0.0/16
IP: 197.246.0.0/16
IP: 2001:43c8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13863 (0x3627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Sep 8 20:08:18 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36E558EAF, serialNumber=F5ED91BC6AAC4BF6F93747B8D539930D9C0C022B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:1a:44:89:1e:6b:9f:6c:f0:d0:0e:95:4b:
e7:08:8f:df:fc:9f:1d:dc:4d:62:d3:6a:3a:19:11:
88:54:f4:c0:f2:10:07:b7:8f:9c:e9:05:2a:63:ee:
d3:2d:61:a0:90:c5:61:ae:9e:c4:fc:ff:85:dc:6e:
db:e9:3f:00:2e:cc:fc:4b:2c:51:4d:ef:82:4d:d6:
4c:b3:fc:91:de:cd:f2:43:aa:87:03:85:4a:4f:25:
42:6d:1a:c4:c7:64:43:17:1c:01:2e:8a:94:de:08:
f7:d4:f0:ff:a0:fc:ce:70:e5:3e:e3:91:d5:a8:e8:
a5:52:34:84:16:d2:fc:12:81:f9:9f:88:c9:a8:d0:
8a:c2:c2:c3:d8:2a:27:6b:a1:75:ad:a5:a2:0e:0f:
97:8f:a3:66:3c:12:7f:40:dd:16:cb:8c:74:64:69:
6f:7b:32:8e:17:bd:29:6d:c3:e3:d8:50:75:07:47:
12:9d:15:48:05:2e:a6:a5:d2:ff:cc:47:81:0d:83:
e9:ef:53:3d:3a:c3:79:fd:eb:bf:f5:04:41:33:41:
b0:ce:c5:0b:76:9a:dd:a8:9e:69:02:6f:90:01:3e:
a9:11:a5:ea:5c:b8:3a:4c:af:b7:98:7a:48:51:54:
3d:fb:1e:d2:db:fa:8a:e9:db:93:ab:78:6a:fd:7b:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20928
sbgp-ipAddrBlock: critical
IPv4:
41.187.0.0/16
197.246.0.0/16
IPv6:
2001:43c8::/32
Signature Algorithm: sha256WithRSAEncryption
55:50:8c:3f:13:3b:96:28:47:f8:1c:da:76:29:43:bc:7e:de:
71:d9:41:68:77:74:20:91:c0:2c:aa:85:b9:97:c2:c5:8d:65:
6e:d5:f1:db:f2:1c:74:cd:ab:4f:f4:51:68:d7:a8:4a:c0:96:
89:2e:e8:d6:92:05:46:09:16:67:9a:2f:4e:55:92:28:90:e8:
39:df:8e:c9:58:43:0e:bb:2e:a6:67:a4:32:e5:9f:95:ec:84:
c7:d3:17:4a:65:29:9b:4f:e6:4e:87:2c:08:1c:a6:c4:51:12:
27:00:34:24:b1:aa:4a:89:e1:ab:f0:5a:11:0c:a8:44:3c:6f:
51:dc:ef:66:f5:c0:a1:2d:54:9f:73:35:0e:c2:8f:96:33:12:
17:ed:0e:e7:ea:4b:e2:dd:65:dd:fe:40:c5:41:86:ce:ac:b8:
4e:16:c1:05:64:88:cf:91:fb:13:9b:a0:04:5f:8d:9d:75:f6:
db:c6:37:a5:2b:37:fb:0a:91:73:35:87:1d:86:7c:c4:92:f5:
eb:67:36:91:b3:c2:ad:f7:03:e8:7b:91:4f:40:86:90:b3:57:
3b:bb:e9:27:26:be:c6:c5:09:8e:34:8c:99:8e:24:49:24:30:
5c:63:74:8f:4c:a4:d0:d3:1e:7d:b6:ff:5a:96:2f:e5:29:66:
5d:e3:65:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:24:38 2025 by rpki-client