Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
File: PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer (raw, json)
Hash identifier: q12X6D68074QhRnkenC5Pwv2RwGBqV5Q2ac9Xww3jAw=
Subject key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3002
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:57:56 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37098
IP: 41.77.8.0/21
IP: 41.216.228.0/22
IP: 154.66.120.0/21
IP: 2c0f:f9a0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12290 (0x3002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:57:56 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B33A4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:7f:ca:52:b9:76:41:74:9a:18:53:79:e9:
14:0b:b6:a2:34:61:32:e9:7b:04:67:40:db:a6:63:
09:bb:80:b3:d0:8a:08:bb:78:62:91:af:18:c5:01:
84:28:bc:04:9d:5e:fa:28:67:b9:3e:38:9c:ce:05:
cd:e5:db:96:65:5c:f1:9b:84:d0:ed:df:36:33:da:
0f:d0:43:51:d6:a3:bf:cd:20:84:fa:43:34:ab:96:
ce:36:ce:cb:7a:70:58:72:42:a0:d2:48:6e:d4:a2:
2d:6e:8d:c3:14:ff:20:6d:df:df:9f:0a:47:fd:56:
8c:e1:09:9b:7f:41:1c:eb:ea:a1:cf:4a:4c:83:08:
6b:62:9b:02:77:65:f1:7b:99:71:18:52:82:5d:95:
40:42:8b:e2:18:8d:5b:89:37:7e:72:1f:fa:6b:ec:
47:28:ac:41:bf:5f:99:cc:c7:54:b6:b9:78:ed:1b:
af:ee:6b:9f:22:42:9c:25:b4:45:9b:60:28:01:8a:
08:81:9a:e6:64:c8:55:d8:e3:28:fe:58:be:a8:fc:
ba:90:d1:bf:21:9c:bf:a1:81:70:af:79:3a:ee:bc:
ca:8f:07:aa:09:9b:a9:6b:e0:6b:da:a8:95:89:3e:
27:59:c0:e1:23:fc:68:00:d6:e7:91:e6:ed:59:d3:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37098
sbgp-ipAddrBlock: critical
IPv4:
41.77.8.0/21
41.216.228.0/22
154.66.120.0/21
IPv6:
2c0f:f9a0::/32
Signature Algorithm: sha256WithRSAEncryption
b8:e8:f4:22:25:df:fa:5c:c2:08:8f:2d:14:e1:c5:71:55:0d:
bb:cc:26:71:e4:f5:ac:1c:00:6a:fd:08:df:8d:58:a2:b4:15:
34:dc:f6:36:1d:74:30:38:37:55:48:d1:bd:80:33:93:1d:fd:
36:0f:63:c9:a4:b9:49:c7:ff:af:4f:a8:c8:ed:8a:19:38:7a:
75:aa:75:67:ea:36:e5:9d:81:c7:cd:26:56:11:4e:fa:1a:4a:
89:29:4e:61:6b:df:a7:18:c1:ef:e7:db:ec:09:00:67:d5:96:
a8:a6:c9:a4:53:6d:88:98:2c:3e:6f:7d:de:fa:9b:60:57:f3:
1e:f9:5e:01:e6:15:bf:e4:3e:e5:1e:39:95:cb:52:88:ba:9c:
ea:ba:74:e0:85:d5:69:88:5a:50:07:15:4f:35:df:e7:37:59:
05:7a:52:35:56:b4:b2:50:eb:1d:45:38:d1:d8:0a:e1:5a:f9:
24:12:19:f4:d5:3c:94:87:f5:67:3e:b4:26:aa:70:15:e4:10:
e1:26:e9:49:b6:4c:1b:12:7a:62:1c:24:36:12:b4:ea:1d:1b:
08:a4:37:87:bc:e8:72:76:4b:78:d0:8a:43:70:e0:1b:0e:28:
ab:4d:b6:3e:a4:8a:d6:2e:f5:4b:56:34:03:b1:8d:04:de:c9:
4f:04:5d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:56:26 2025 by rpki-client