
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer
File: 9quAr34JmFsP46OzgjMPLIk1jNg.cer (raw, json)
Hash identifier: qQwEiJ2ZMWndBk8eEaoaGwkKxOlto0/Asczrt4mLEPk=
Subject key identifier: F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3386
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:12:11 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328180
IP: 2001:43f8:d80::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13190 (0x3386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:12:11 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F5D39AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:fb:d7:36:3a:ad:f2:c9:59:6c:fc:08:13:
43:07:8d:20:08:db:4e:37:96:89:68:bc:5d:0d:07:
e9:fe:4d:61:f5:08:dc:35:fb:8b:b7:61:70:5f:f1:
ff:ca:04:d9:10:da:6e:99:e8:70:75:5c:21:c1:1e:
b9:5d:25:fb:04:72:38:e2:9b:a7:f8:1f:fe:0c:52:
3f:10:ba:d0:8a:36:f9:14:d4:eb:7e:a9:3a:ae:56:
f1:f7:91:75:f0:fb:47:94:22:77:af:a1:3c:17:21:
1e:92:03:c7:a1:2f:50:e8:66:7a:ce:5e:79:72:bd:
64:87:95:5d:f5:4c:23:8b:8a:30:1a:73:40:5d:4c:
73:8e:58:32:d0:6f:b0:2d:55:77:99:d7:19:85:39:
73:03:b8:9c:71:ee:1e:ff:a4:3f:db:9d:aa:38:ae:
0e:31:7b:38:a9:52:38:3c:9a:5a:0e:0f:20:ba:7f:
2c:22:bb:33:67:13:35:6a:7b:2e:03:b2:c9:86:ed:
1c:11:a2:5f:37:04:1e:99:49:f0:4a:50:b3:cd:73:
9e:4b:67:b5:3d:76:29:86:79:10:09:57:17:56:6c:
66:a4:5b:54:57:01:ac:f7:32:bb:ed:a0:c5:6d:8b:
d3:8c:52:62:6b:06:ca:09:4b:47:64:5e:de:ac:ea:
1d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328180
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:d80::/48
Signature Algorithm: sha256WithRSAEncryption
0b:36:71:a9:ad:50:75:59:c4:1b:ea:0d:33:50:2d:59:53:fd:
98:ae:fc:79:ee:30:03:b3:58:0d:c3:5c:0b:3d:20:e9:25:39:
62:4f:ad:b5:f7:02:7b:18:5d:86:e2:cb:8c:ad:52:6d:27:7d:
4d:67:ab:dc:6a:cc:2e:40:c5:3d:4e:bc:eb:e6:d6:db:04:17:
de:25:12:a4:73:86:63:cf:cc:d7:16:a6:b7:a9:67:65:f7:0d:
20:9e:74:e6:48:c7:8a:a1:2c:8a:55:8f:66:1c:88:3e:4a:fc:
8d:9b:37:9f:ec:a6:f4:2a:0e:c3:1f:61:91:d0:50:12:0d:e3:
bd:a7:56:c9:57:f2:9e:08:08:6c:5e:55:2c:00:74:fe:06:fd:
99:6e:a6:e6:3c:47:e1:55:6c:95:a4:41:fb:a1:43:6d:96:ef:
87:6e:ed:f9:0a:4c:94:4f:e8:b5:a1:41:86:f0:ab:3f:da:40:
ed:75:db:b6:3e:6f:b3:1c:aa:c4:82:8a:8e:1f:a7:d9:40:eb:
93:88:fb:89:b9:31:e4:6e:2c:e2:94:90:6f:b9:aa:52:85:9a:
81:08:ed:2e:5c:2f:4f:65:21:cb:3b:90:86:ec:ba:0b:07:49:
80:12:de:65:eb:84:db:fb:26:2e:db:c0:e2:e4:8b:2d:46:5c:
84:aa:c7:aa
-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgICM4YwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNjEyMTFaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkY1RDM5QUYxMTAvBgNVBAUTKEY2QUI4MEFGN0UwOTk4NUIwRkUzQTNC
MzgyMzMwRjJDODkzNThDRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCoqfvXNjqt8slZbPwIE0MHjSAI2043lolovF0NB+n+TWH1CNw1+4u3YXBf8f/K
BNkQ2m6Z6HB1XCHBHrldJfsEcjjim6f4H/4MUj8QutCKNvkU1Ot+qTquVvH3kXXw
+0eUInevoTwXIR6SA8ehL1DoZnrOXnlyvWSHlV31TCOLijAac0BdTHOOWDLQb7At
VXeZ1xmFOXMDuJxx7h7/pD/bnao4rg4xezipUjg8mloODyC6fywiuzNnEzVqey4D
ssmG7RwRol83BB6ZSfBKULPNc55LZ7U9dimGeRAJVxdWbGakW1RXAaz3MrvtoMVt
i9OMUmJrBsoJS0dkXt6s6h0xAgMBAAGjggMOMIIDCjAdBgNVHQ4EFgQU9quAr34J
mFsP46OzgjMPLIk1jNgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGNUQzOS8yNjI0QjhBNDgyRTAx
MUVFQjg3RTUwMjY0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjVEMzkvMjYyNEI4QTQ4MkUwMTFFRUI4N0U1MDI2NEFEOUU2RkMvOXF1QXIz
NEptRnNQNDZPemdqTVBMSWsxak5nLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAfQwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DYAwDQYJKoZI
hvcNAQELBQADggEBAAs2camtUHVZxBvqDTNQLVlT/Ziu/HnuMAOzWA3DXAs9IOkl
OWJPrbX3AnsYXYbiy4ytUm0nfU1nq9xqzC5AxT1OvOvm1tsEF94lEqRzhmPPzNcW
prepZ2X3DSCedOZIx4qhLIpVj2YciD5K/I2bN5/spvQqDsMfYZHQUBIN472nVslX
8p4ICGxeVSwAdP4G/ZlupuY8R+FVbJWkQfuhQ22W74du7fkKTJRP6LWhQYbwqz/a
QO1127Y+b7McqsSCio4fp9lA65OI+4m5MeRuLOKUkG+5qlKFmoEI7S5cL09lIcs7
kIbsugsHSYAS3mXrhNv7Ji7bwOLkiy1GXISqx6o=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:37:34 2025 by rpki-client