Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer
File: AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer (raw, json)
Hash identifier: F7tz/5GoPvt+iWQXG2UbcN1WdjDdNpOK4ae+9KkUZgY=
Subject key identifier: 01:9C:57:AF:35:3A:A8:DD:D6:AE:5D:19:B5:51:EE:04:5E:F0:E4:69
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3006
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:58:45 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328920
IP: 102.219.68.0/22
IP: 2c0f:3100::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12294 (0x3006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:58:45 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F367278DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:84:5e:3a:11:64:78:e8:01:1e:fe:e2:88:
61:33:8b:ab:17:09:cb:dd:0a:c8:d3:4a:c3:86:86:
fc:a5:17:57:d3:30:9a:7f:75:8e:9b:8b:c3:a8:19:
9e:e0:39:4e:fa:a8:b5:c5:5f:76:c4:8f:54:fb:4b:
f7:e4:b3:8f:1f:c9:ae:55:5a:8e:14:bd:81:a1:3d:
88:26:83:08:cc:99:28:23:bc:c1:bf:7d:64:99:28:
b2:e1:ba:d3:8d:2d:bb:c0:86:f7:91:d4:b2:07:5b:
26:0f:3a:52:8e:ed:d6:65:44:38:a2:a3:2d:d0:ef:
92:d8:94:f5:a8:a0:8d:ed:08:34:52:ab:2d:1f:0d:
6e:15:7d:7d:66:dd:46:da:c2:25:9c:34:69:29:ad:
dd:34:51:aa:b0:00:db:22:a8:9d:b1:31:9b:af:95:
57:09:43:32:28:de:00:b9:3b:10:05:fc:5c:6a:49:
e0:b5:1f:cb:80:f5:f2:df:94:32:6f:d4:a3:fd:74:
95:b7:c9:bd:93:8d:ee:4e:62:82:0f:14:d9:95:e9:
00:40:ca:03:ec:09:7e:a0:46:29:6e:84:03:2d:77:
98:08:f8:e2:5a:fd:2a:a5:24:eb:04:3a:d4:62:6e:
e4:29:16:7e:34:fb:09:16:7f:61:f0:33:72:2d:67:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9C:57:AF:35:3A:A8:DD:D6:AE:5D:19:B5:51:EE:04:5E:F0:E4:69
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328920
sbgp-ipAddrBlock: critical
IPv4:
102.219.68.0/22
IPv6:
2c0f:3100::/32
Signature Algorithm: sha256WithRSAEncryption
06:4a:08:80:af:55:7a:17:24:60:02:37:35:12:33:05:8e:d6:
31:cd:00:59:f8:78:f3:2e:10:24:ba:20:c9:b9:e5:e1:44:7a:
40:90:99:86:f9:01:16:0f:05:6d:05:86:a1:ad:48:bf:ef:f4:
ab:29:04:25:e6:b2:36:54:07:e4:f7:3f:fe:00:7b:f5:68:f5:
13:63:1a:63:28:e7:1d:e0:4b:45:ec:28:1f:4d:1c:cc:aa:bf:
fe:ed:90:28:82:db:9f:5b:de:c2:d9:e0:ba:0d:cb:d7:4d:20:
f5:41:40:e6:3d:72:a9:ac:48:59:d8:68:e6:c9:94:58:6a:25:
01:d4:b5:3d:cd:3c:09:28:16:62:c5:c4:fd:19:2a:4a:cb:f2:
61:0b:28:bc:a8:a2:49:5d:b6:78:04:9a:50:f4:90:3e:e8:bd:
8b:ed:02:66:39:6c:59:7d:f0:fe:be:70:15:fe:17:47:af:f1:
4b:cd:82:90:f1:50:40:f8:da:52:cb:62:67:ae:0a:73:ac:4b:
0b:07:65:60:dd:d3:53:60:ac:52:8d:f7:9c:49:96:3c:d7:f5:
e1:ab:f3:96:10:c3:5f:b1:02:bd:d4:3e:35:9b:aa:09:70:13:
6a:ef:44:16:fe:8f:f5:77:67:a3:4d:08:16:12:df:df:f1:52:
ef:6a:f8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:52:20 2025 by rpki-client