Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
File: M_vh3N40HGSYaNQWvz6gAALE3yA.cer (raw, json)
Hash identifier: GRcyL8X8DE/xmiPwEp4bKHcnH91DkkNaeucBiCOC1VU=
Subject key identifier: 33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F37
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:16:58 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37799
AS: 328442
IP: 102.68.56.0/21
IP: 102.213.120.0/22
IP: 102.216.240.0/22
IP: 196.60.92.0/24
IP: 2001:43ff:6000::/48
IP: 2c0f:ed00::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12087 (0x2f37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:16:58 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F365C754AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:9e:1b:4c:88:4e:e4:47:52:53:68:ff:06:
16:c9:81:5e:ef:70:e6:13:c3:fe:01:e6:38:2d:db:
a6:25:e5:f9:88:8d:ef:63:f5:01:f9:57:dc:4b:dd:
6b:95:3d:85:75:28:64:cf:40:62:45:50:74:91:97:
2e:1d:64:d8:18:0a:57:65:10:7c:9f:3d:04:cd:ce:
42:ba:43:6d:ad:89:78:ce:9f:08:a5:1c:da:79:c6:
92:51:be:3e:f7:46:35:f1:7a:1e:94:61:3d:e1:2f:
2f:ac:94:9a:98:90:c3:d3:f6:bd:f3:c5:1a:b8:46:
0e:7b:d0:c8:ea:17:5c:22:40:36:ee:8f:46:03:23:
6a:f8:3c:63:10:71:ac:2b:d3:ed:c0:7e:39:90:28:
92:29:32:ac:8a:3f:4e:39:76:41:8a:80:63:19:49:
bc:30:26:47:c6:b7:19:09:71:ea:d2:3c:ed:73:4b:
a8:f5:db:57:75:47:a0:25:3d:42:be:b8:1d:13:07:
3d:76:f3:51:4a:b1:4d:5d:f7:b5:41:5c:8c:e8:67:
c5:70:ff:67:73:65:dd:e8:57:0a:2e:58:1a:33:4c:
91:21:0e:2b:6d:42:b6:24:96:50:0f:b7:81:56:34:
3c:26:6d:df:b6:8a:2a:b4:04:9b:88:43:90:e7:df:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37799
328442
sbgp-ipAddrBlock: critical
IPv4:
102.68.56.0/21
102.213.120.0/22
102.216.240.0/22
196.60.92.0/24
IPv6:
2001:43ff:6000::/48
2c0f:ed00::/32
Signature Algorithm: sha256WithRSAEncryption
87:ea:ee:a8:2c:f9:49:d6:01:74:8d:62:e5:c0:d9:a9:67:6a:
a9:e8:b2:1c:8f:d7:89:2a:57:2a:c9:17:3c:9d:56:db:db:dc:
e1:61:64:64:c2:98:4f:61:d4:3e:05:0d:31:49:42:cd:24:d7:
42:80:b7:df:57:d9:b3:3a:f7:cd:fa:10:f9:bc:67:52:0c:6b:
7d:a1:ad:8e:d2:05:2e:9b:20:4f:aa:dc:af:72:29:40:3c:9c:
5c:1a:b6:e3:7f:19:33:f7:02:0a:be:58:29:88:d3:22:69:e0:
86:60:4f:c0:f2:60:ec:2b:4d:d9:26:ea:40:6d:3c:f0:66:0b:
d8:f6:77:2a:86:c6:89:fa:c1:2c:9e:7d:ae:f1:b2:2b:e1:20:
c6:08:1a:21:73:4c:77:8a:45:76:a5:db:0c:b7:6f:6f:51:ed:
a1:7a:10:14:ca:56:c9:8b:be:fb:78:ed:ad:74:34:3e:29:ef:
35:37:18:b8:e0:1a:7b:99:ac:3f:f0:8c:b2:15:5b:59:d1:85:
aa:9c:59:1e:7d:5f:15:4d:16:ee:ce:db:9a:1d:2e:31:06:78:
99:86:09:2d:0a:5d:1f:d5:e5:a4:be:37:0a:69:ad:ec:9b:88:
1a:7a:4b:4a:d2:6b:1d:65:07:d7:92:b0:ab:3c:0b:28:f7:f4:
8a:1c:b0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:50:10 2025 by rpki-client