Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
File: MU_85UKRThk8fBoqA8c1dGLqGBY.cer (raw, json)
Hash identifier: 2izU368Ci/XSxk9+eYRs6U4M0ettpGkpltyhSv18aaw=
Subject key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E09
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:15:14 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 19676
AS: 21280
AS: 33768
AS: 36942
IP: 41.60.0.0/16
IP: 41.72.192.0/19
IP: 41.77.144.0/21
IP: 41.79.132.0/22
IP: 41.84.128.0/19
IP: 41.160.0.0/12
IP: 41.190.128.0/19
IP: 41.191.224.0/21
IP: 41.215.248.0/22
IP: 41.216.96.0/19
IP: 41.220.224.0/19
IP: 41.222.0.0/21
IP: 41.223.224.0/22
IP: 154.120.192.0/18
IP: 196.12.128.0/19
IP: 196.27.96.0/19
IP: 196.46.124.0/22
IP: 196.201.1.0/24
IP: 196.201.16.0/21
IP: 196.201.228.0/22
IP: 196.216.64.0/19
IP: 197.155.64.0/19
IP: 197.155.224.0/20
IP: 197.211.192.0/18
IP: 2001:4238::/32
IP: 2001:42a8::/32
IP: 2001:4328::/32
IP: 2001:43b8::/32
IP: 2c0f:f830::/32
IP: 2c0f:f8f0::/32
IP: 2c0f:fa10::/32
IP: 2c0f:fe30::/32
IP: 2c0f:fe40::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11785 (0x2e09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:15:14 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3668037AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:37:4b:7b:fc:f9:41:3e:68:f7:77:32:7a:
a9:de:58:b6:94:20:05:13:91:87:94:7d:b4:6e:4a:
26:e6:6b:1e:2f:57:8e:53:1a:6a:43:d3:88:ab:94:
20:db:7d:a3:c4:e1:64:91:5b:33:24:e7:59:36:d6:
fd:f3:60:03:22:71:9b:1a:37:cc:d3:9c:a2:5b:50:
fe:a3:6f:7c:38:8f:f9:53:0b:f0:a4:dc:2b:5b:7a:
6b:a7:1d:19:1b:63:36:2e:31:56:36:ff:26:22:83:
21:04:28:69:fe:70:5a:3c:e4:24:b7:f3:ba:c7:24:
8c:f3:01:99:af:6b:06:19:42:3d:01:44:bf:1a:5c:
02:82:27:1f:d2:3c:79:07:5c:5b:68:72:80:42:47:
9c:1e:b1:db:7b:21:46:07:59:d6:46:ed:bf:de:54:
8b:b9:d5:8e:58:b2:32:ea:82:0e:ad:3d:f0:75:b7:
48:55:80:b9:50:8a:39:86:37:e4:52:99:64:6c:a8:
68:35:46:b8:86:15:d1:ad:0f:b4:30:3a:10:a4:2e:
44:b5:be:f5:f1:25:ee:f6:3c:4f:21:33:c7:ec:a4:
ce:d5:ae:3f:01:8c:54:ad:d5:cf:43:fa:c6:dd:af:
b6:22:65:75:46:33:0b:a5:ce:39:d5:82:bc:ba:3b:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19676
21280
33768
36942
sbgp-ipAddrBlock: critical
IPv4:
41.60.0.0/16
41.72.192.0/19
41.77.144.0/21
41.79.132.0/22
41.84.128.0/19
41.160.0.0/12
41.190.128.0/19
41.191.224.0/21
41.215.248.0/22
41.216.96.0/19
41.220.224.0/19
41.222.0.0/21
41.223.224.0/22
154.120.192.0/18
196.12.128.0/19
196.27.96.0/19
196.46.124.0/22
196.201.1.0/24
196.201.16.0/21
196.201.228.0/22
196.216.64.0/19
197.155.64.0/19
197.155.224.0/20
197.211.192.0/18
IPv6:
2001:4238::/32
2001:42a8::/32
2001:4328::/32
2001:43b8::/32
2c0f:f830::/32
2c0f:f8f0::/32
2c0f:fa10::/32
2c0f:fe30::/32
2c0f:fe40::/32
Signature Algorithm: sha256WithRSAEncryption
a5:5d:a7:84:16:72:6f:02:16:84:cb:ca:a8:63:1d:27:56:3e:
80:bc:4d:40:fa:7c:bb:f8:35:6d:1f:a1:90:f4:74:1b:18:e0:
aa:84:2d:5c:98:fe:ae:53:a3:73:51:29:5a:65:97:0e:6f:1b:
04:4e:44:75:ce:fe:8a:40:1d:7b:44:76:09:8d:d2:66:5c:99:
df:1c:fc:8a:30:69:49:f0:2a:b7:c6:fe:6d:4d:56:84:8d:c5:
4f:df:69:f2:f2:22:96:3c:3a:be:68:1d:db:2e:9b:03:ff:c1:
54:0a:61:ac:21:03:7c:19:8c:26:22:9d:d4:52:86:41:00:fd:
b5:a6:d1:27:98:6e:f2:e1:96:e8:f8:5f:4d:b2:c6:f1:6e:a6:
8f:26:1c:55:93:97:23:e8:e8:8e:63:87:df:d0:5f:d7:57:ba:
42:ec:c7:fa:b6:0b:39:10:39:5d:5a:91:62:cf:f4:54:f2:6d:
09:62:04:a1:1b:ba:bd:c2:56:a1:10:66:6c:69:f7:c1:58:22:
c9:48:71:1e:5c:a7:50:c2:f2:53:72:03:84:7b:6f:1d:68:7e:
e6:9e:28:5c:f8:40:5f:8a:4d:97:95:31:fd:cd:f0:bf:58:a7:
b7:7b:57:0e:02:4c:e8:ce:88:5e:1b:8e:67:b9:d4:2a:37:9d:
51:db:db:c9
-----BEGIN CERTIFICATE-----
MIIG9zCCBd+gAwIBAgICLgkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMTE1MTRaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjY4MDM3QUYxMTAvBgNVBAUTKDMxNEZGQ0U1NDI5MTRFMTkzQzdDMUEy
QTAzQzczNTc0NjJFQTE4MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjqzdLe/z5QT5o93cyeqneWLaUIAUTkYeUfbRuSibmax4vV45TGmpD04irlCDb
faPE4WSRWzMk51k21v3zYAMicZsaN8zTnKJbUP6jb3w4j/lTC/Ck3CtbemunHRkb
YzYuMVY2/yYigyEEKGn+cFo85CS387rHJIzzAZmvawYZQj0BRL8aXAKCJx/SPHkH
XFtocoBCR5wesdt7IUYHWdZG7b/eVIu51Y5YsjLqgg6tPfB1t0hVgLlQijmGN+RS
mWRsqGg1RriGFdGtD7QwOhCkLkS1vvXxJe72PE8hM8fspM7Vrj8BjFSt1c9D+sbd
r7YiZXVGMwulzjnVgry6O6QzAgMBAAGjggPsMIID6DAdBgNVHQ4EFgQUMU/85UKR
Thk8fBoqA8c1dGLqGBYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2ODAzNy8yQUIzOTBFMjZEQzcx
MUU2ODI2NTM2MkRGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjgwMzcvMkFCMzkwRTI2REM3MTFFNjgyNjUzNjJERjhBRUEyMjgvTVVfODVV
S1JUaGs4ZkJvcUE4YzFkR0xxR0JZLm1mdDAnBggrBgEFBQcBCAEB/wQYMBagFDAS
AgJM3AICUyACAwCD6AIDAJBOMIHyBggrBgEFBQcBBwEB/wSB4jCB3zCBlQQCAAEw
gY4DAwApPAMEBSlIwAMEAylNkAMEAilPhAMEBSlUgAMDBCmgAwQFKb6AAwQDKb/g
AwQCKdf4AwQFKdhgAwQFKdzgAwQDKd4AAwQCKd/gAwQGmnjAAwQFxAyAAwQFxBtg
AwQCxC58AwQAxMkBAwQDxMkQAwQCxMnkAwQFxNhAAwQFxZtAAwQExZvgAwQGxdPA
MEUEAgACMD8DBQAgAUI4AwUAIAFCqAMFACABQygDBQAgAUO4AwUALA/4MAMFACwP
+PADBQAsD/oQAwUALA/+MAMFACwP/kAwDQYJKoZIhvcNAQELBQADggEBAKVdp4QW
cm8CFoTLyqhjHSdWPoC8TUD6fLv4NW0foZD0dBsY4KqELVyY/q5To3NRKVpllw5v
GwRORHXO/opAHXtEdgmN0mZcmd8c/IowaUnwKrfG/m1NVoSNxU/fafLyIpY8Or5o
HdsumwP/wVQKYawhA3wZjCYindRShkEA/bWm0SeYbvLhluj4X02yxvFupo8mHFWT
lyPo6I5jh9/QX9dXukLsx/q2CzkQOV1akWLP9FTybQliBKEbur3CVqEQZmxp98FY
IslIcR5cp1DC8lNyA4R7bx1ofuaeKFz4QF+KTZeVMf3N8L9Yp7d7Vw4CTOjOiF4b
jme51Co3nVHb28k=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:31:51 2025 by rpki-client