Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
File: MU_85UKRThk8fBoqA8c1dGLqGBY.cer (raw, json)
Hash identifier: vcbSI6/hSyMBhKe/+VpNRjY0pd5+bkaH1jH1zvvva50=
Subject key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 257D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:34:55 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 19676
AS: 21280
AS: 33768
AS: 36942
IP: 41.60.0.0/16
IP: 41.72.192.0/19
IP: 41.77.144.0/21
IP: 41.79.132.0/22
IP: 41.84.128.0/19
IP: 41.160.0.0/12
IP: 41.190.128.0/19
IP: 41.191.224.0/21
IP: 41.215.248.0/22
IP: 41.216.96.0/19
IP: 41.220.224.0/19
IP: 41.222.0.0/21
IP: 41.223.224.0/22
IP: 154.120.192.0/18
IP: 196.12.128.0/19
IP: 196.27.96.0/19
IP: 196.46.124.0/22
IP: 196.201.1.0/24
IP: 196.201.16.0/21
IP: 196.201.228.0/22
IP: 196.216.64.0/19
IP: 197.155.64.0/19
IP: 197.155.224.0/20
IP: 197.211.192.0/18
IP: 2001:4238::/32
IP: 2001:42a8::/32
IP: 2001:4328::/32
IP: 2001:43b8::/32
IP: 2c0f:f830::/32
IP: 2c0f:f8f0::/32
IP: 2c0f:fa10::/32
IP: 2c0f:fe30::/32
IP: 2c0f:fe40::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9597 (0x257d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 02:34:55 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:37:4b:7b:fc:f9:41:3e:68:f7:77:32:7a:
a9:de:58:b6:94:20:05:13:91:87:94:7d:b4:6e:4a:
26:e6:6b:1e:2f:57:8e:53:1a:6a:43:d3:88:ab:94:
20:db:7d:a3:c4:e1:64:91:5b:33:24:e7:59:36:d6:
fd:f3:60:03:22:71:9b:1a:37:cc:d3:9c:a2:5b:50:
fe:a3:6f:7c:38:8f:f9:53:0b:f0:a4:dc:2b:5b:7a:
6b:a7:1d:19:1b:63:36:2e:31:56:36:ff:26:22:83:
21:04:28:69:fe:70:5a:3c:e4:24:b7:f3:ba:c7:24:
8c:f3:01:99:af:6b:06:19:42:3d:01:44:bf:1a:5c:
02:82:27:1f:d2:3c:79:07:5c:5b:68:72:80:42:47:
9c:1e:b1:db:7b:21:46:07:59:d6:46:ed:bf:de:54:
8b:b9:d5:8e:58:b2:32:ea:82:0e:ad:3d:f0:75:b7:
48:55:80:b9:50:8a:39:86:37:e4:52:99:64:6c:a8:
68:35:46:b8:86:15:d1:ad:0f:b4:30:3a:10:a4:2e:
44:b5:be:f5:f1:25:ee:f6:3c:4f:21:33:c7:ec:a4:
ce:d5:ae:3f:01:8c:54:ad:d5:cf:43:fa:c6:dd:af:
b6:22:65:75:46:33:0b:a5:ce:39:d5:82:bc:ba:3b:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19676
21280
33768
36942
sbgp-ipAddrBlock: critical
IPv4:
41.60.0.0/16
41.72.192.0/19
41.77.144.0/21
41.79.132.0/22
41.84.128.0/19
41.160.0.0/12
41.190.128.0/19
41.191.224.0/21
41.215.248.0/22
41.216.96.0/19
41.220.224.0/19
41.222.0.0/21
41.223.224.0/22
154.120.192.0/18
196.12.128.0/19
196.27.96.0/19
196.46.124.0/22
196.201.1.0/24
196.201.16.0/21
196.201.228.0/22
196.216.64.0/19
197.155.64.0/19
197.155.224.0/20
197.211.192.0/18
IPv6:
2001:4238::/32
2001:42a8::/32
2001:4328::/32
2001:43b8::/32
2c0f:f830::/32
2c0f:f8f0::/32
2c0f:fa10::/32
2c0f:fe30::/32
2c0f:fe40::/32
Signature Algorithm: sha256WithRSAEncryption
c5:cd:c3:c8:8d:da:a6:29:58:a0:63:9a:49:6f:92:cb:8f:eb:
ab:e4:5d:f2:eb:f7:0c:26:d3:11:3e:2a:93:a6:96:ae:11:a5:
31:dd:7b:ce:3f:c9:1d:1f:a6:33:bf:2c:24:03:58:e4:e1:39:
20:ea:8c:a5:6f:17:e8:d2:97:6e:63:bb:53:7d:21:70:d0:54:
32:c6:54:8e:d5:58:bc:72:ab:32:91:b6:9f:e1:61:f1:97:31:
2b:c2:91:13:30:ff:f7:fc:3d:58:56:79:45:85:59:09:2d:21:
3f:b4:6d:24:f2:9a:e2:7c:00:ee:14:22:4a:19:6d:52:c9:a5:
55:a8:d4:40:16:7b:bc:f5:a7:bd:ab:a2:3b:f6:c6:51:2a:c0:
b6:e2:b8:4a:d5:27:e9:90:ff:d3:09:53:ea:93:54:ca:99:78:
a5:7b:9f:86:58:36:c3:30:9b:4d:84:83:48:b5:47:97:46:49:
9a:01:61:56:90:22:79:51:fe:f1:85:ac:17:89:b1:2a:17:bf:
f3:3a:45:7c:da:c8:77:db:48:f7:17:00:be:bd:1b:f9:c0:60:
17:53:14:7f:cc:76:f4:e1:b7:d3:78:ac:5d:c7:d8:ac:70:ed:
19:d7:d8:88:25:a4:27:a5:30:c0:3f:79:cb:18:ed:21:2b:03:
37:4c:9f:9c
-----BEGIN CERTIFICATE-----
MIIG9zCCBd+gAwIBAgICJX0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMjM0NTVaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjY4MDM3QUYxMTAvBgNVBAUTKDMxNEZGQ0U1NDI5MTRFMTkzQzdDMUEy
QTAzQzczNTc0NjJFQTE4MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjqzdLe/z5QT5o93cyeqneWLaUIAUTkYeUfbRuSibmax4vV45TGmpD04irlCDb
faPE4WSRWzMk51k21v3zYAMicZsaN8zTnKJbUP6jb3w4j/lTC/Ck3CtbemunHRkb
YzYuMVY2/yYigyEEKGn+cFo85CS387rHJIzzAZmvawYZQj0BRL8aXAKCJx/SPHkH
XFtocoBCR5wesdt7IUYHWdZG7b/eVIu51Y5YsjLqgg6tPfB1t0hVgLlQijmGN+RS
mWRsqGg1RriGFdGtD7QwOhCkLkS1vvXxJe72PE8hM8fspM7Vrj8BjFSt1c9D+sbd
r7YiZXVGMwulzjnVgry6O6QzAgMBAAGjggPsMIID6DAdBgNVHQ4EFgQUMU/85UKR
Thk8fBoqA8c1dGLqGBYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2ODAzNy8yQUIzOTBFMjZEQzcx
MUU2ODI2NTM2MkRGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjgwMzcvMkFCMzkwRTI2REM3MTFFNjgyNjUzNjJERjhBRUEyMjgvTVVfODVV
S1JUaGs4ZkJvcUE4YzFkR0xxR0JZLm1mdDAnBggrBgEFBQcBCAEB/wQYMBagFDAS
AgJM3AICUyACAwCD6AIDAJBOMIHyBggrBgEFBQcBBwEB/wSB4jCB3zCBlQQCAAEw
gY4DAwApPAMEBSlIwAMEAylNkAMEAilPhAMEBSlUgAMDBCmgAwQFKb6AAwQDKb/g
AwQCKdf4AwQFKdhgAwQFKdzgAwQDKd4AAwQCKd/gAwQGmnjAAwQFxAyAAwQFxBtg
AwQCxC58AwQAxMkBAwQDxMkQAwQCxMnkAwQFxNhAAwQFxZtAAwQExZvgAwQGxdPA
MEUEAgACMD8DBQAgAUI4AwUAIAFCqAMFACABQygDBQAgAUO4AwUALA/4MAMFACwP
+PADBQAsD/oQAwUALA/+MAMFACwP/kAwDQYJKoZIhvcNAQELBQADggEBAMXNw8iN
2qYpWKBjmklvksuP66vkXfLr9wwm0xE+KpOmlq4RpTHde84/yR0fpjO/LCQDWOTh
OSDqjKVvF+jSl25ju1N9IXDQVDLGVI7VWLxyqzKRtp/hYfGXMSvCkRMw//f8PVhW
eUWFWQktIT+0bSTymuJ8AO4UIkoZbVLJpVWo1EAWe7z1p72rojv2xlEqwLbiuErV
J+mQ/9MJU+qTVMqZeKV7n4ZYNsMwm02Eg0i1R5dGSZoBYVaQInlR/vGFrBeJsSoX
v/M6RXzayHfbSPcXAL69G/nAYBdTFH/MdvTht9N4rF3H2Kxw7RnX2IglpCelMMA/
ecsY7SErAzdMn5w=
-----END CERTIFICATE-----
Generated at Fri Apr 26 03:50:23 2024 by rpki-client on console-ams.rpki-client.org