
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
File: Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer (raw, json)
Hash identifier: xEdnglhptp/A66rbO3ehXQ0eIK+N1m+i4JPbpHvFoIk=
Subject key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 361D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 04 Sep 2025 06:36:58 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329530
IP: 102.205.248.0/22
IP: 2c0f:5cc0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13853 (0x361d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Sep 4 06:36:58 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:90:37:3c:e8:a0:09:77:ce:23:06:99:05:
64:36:ff:95:bd:d1:67:f1:46:50:91:06:ab:a2:b8:
a1:9a:8e:51:8c:77:51:17:15:c9:1e:69:e9:dc:7d:
e2:f7:6c:91:bf:19:55:a5:69:fa:7b:53:79:41:cc:
a0:f0:25:aa:f7:c6:94:3b:da:1a:cf:d0:7b:20:e1:
06:08:6b:41:54:fa:e2:4f:8e:d3:a1:0a:e6:69:41:
98:d1:c6:7b:14:e7:f1:8f:5b:3d:2c:97:d9:d8:d3:
0b:29:1a:11:ec:a3:90:5f:5d:eb:c1:f6:17:23:ee:
9a:bd:55:50:a2:51:05:f9:6a:ae:ba:26:17:d4:50:
eb:71:6b:e7:59:78:37:93:66:99:c5:39:bb:20:c3:
97:60:04:ff:4b:34:6b:38:d5:ab:4d:ec:48:63:08:
fa:e9:bf:13:9a:97:20:ef:a1:e9:b4:02:3e:da:f6:
8f:16:a4:07:7c:7a:33:92:0d:6e:b8:05:53:ae:3f:
a8:3e:6a:bd:50:a7:4e:79:fe:33:73:e7:b6:2c:7f:
68:45:92:10:e4:bd:f8:e4:40:2d:a0:9f:43:9b:da:
c0:7b:d8:d8:80:5d:d8:9a:a1:1b:c0:98:5f:1d:62:
02:71:b1:bd:42:de:b5:96:88:d5:a5:c5:45:04:23:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329530
sbgp-ipAddrBlock: critical
IPv4:
102.205.248.0/22
IPv6:
2c0f:5cc0::/32
Signature Algorithm: sha256WithRSAEncryption
8d:ab:78:6c:54:27:79:15:11:bf:83:54:c6:8e:dd:d2:e9:c0:
b7:50:ab:7c:4b:41:de:42:60:bc:a7:ff:8f:fb:29:9a:ff:c8:
c1:6d:0b:00:88:cc:d1:bc:85:2c:23:dd:3f:1f:9c:40:41:f6:
fa:de:22:82:8a:6a:cf:d5:80:1a:03:d9:c7:ac:81:7d:0b:b3:
d2:fa:81:27:08:5a:e8:6e:17:7e:a2:05:b2:c7:9f:4a:04:ef:
be:ba:a4:eb:22:5b:fb:9a:31:c7:c6:c8:7d:63:95:82:dc:24:
71:54:e3:de:8c:2f:c6:0a:75:33:58:49:1e:cb:59:82:d4:ef:
3b:c4:7f:6c:e8:ad:fc:3e:f3:c6:e5:b0:02:30:16:8e:c7:6c:
2d:5a:c0:36:c4:4b:8f:78:08:a8:66:d2:a3:19:3f:f8:59:c5:
44:10:7d:5e:b6:ef:48:5f:c9:6d:b8:18:3f:b0:be:01:1d:21:
5b:80:c1:43:27:40:e6:ae:2b:56:fb:2c:be:5a:a9:8b:9c:86:
90:95:00:38:79:7e:4c:41:54:d6:b5:6a:d8:f2:bf:12:f2:35:
25:01:a2:62:b7:98:86:c7:b4:26:12:e9:4d:4b:3e:a9:fc:b2:
5c:d5:d2:36:64:72:c2:39:14:7e:23:b3:a6:48:e6:24:52:df:
69:29:b1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:26:05 2025 by rpki-client