Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer
File: WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer (raw, json)
Hash identifier: LCJs5gdBmAOtuZKs8wnAHCF4HxkCORW9/TeCCm6At4U=
Subject key identifier: 5A:46:7B:B4:93:7E:AC:6B:EF:B9:6B:4F:4F:E3:5B:D7:FD:2A:40:FA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CE3
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:09:45 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37215
IP: 41.70.0.0/17
IP: 2c0e:7e80::/28
IP: 2c0f:ea60::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11491 (0x2ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:09:45 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36152D2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:c1:ae:12:bc:1f:68:e5:1d:93:a5:e9:cb:
83:90:62:07:e8:11:00:6e:ed:dc:f5:a2:0d:02:5a:
01:d3:ef:66:22:c5:ce:0e:c0:d0:f9:23:90:f7:83:
81:ab:ea:f2:4d:71:4e:0e:2f:f0:fb:73:8b:5a:33:
f4:89:af:02:c6:b7:7f:ae:c6:38:43:0e:53:db:7f:
61:7c:cc:53:ee:b5:25:79:bd:bc:98:0e:1e:0f:f3:
c0:55:9f:4c:38:56:ce:34:27:f0:13:41:96:ac:08:
7c:9c:b9:35:8a:8a:c6:82:eb:17:5f:2d:77:f3:6c:
5f:63:dc:0d:4a:7c:b2:99:b5:7f:32:c4:09:29:8d:
9b:dd:25:bc:82:50:16:52:e5:3f:a4:aa:d4:90:7e:
2a:6e:b4:a7:6a:11:72:79:5a:02:a7:40:1d:98:43:
5d:23:14:cb:5a:79:5e:87:6c:4c:31:98:39:6b:34:
c2:bb:23:13:bb:e6:13:86:a7:27:ef:ba:fc:61:1d:
9e:a1:af:5b:74:c9:7b:e1:c1:23:38:df:bb:4f:e6:
bf:f6:2d:db:09:0d:1f:d9:b5:b4:1d:49:3a:b0:18:
4c:0e:12:95:65:16:ee:c7:fd:08:b4:85:f6:af:4e:
06:5d:33:b6:e6:2b:44:fd:91:c8:ce:52:f7:73:f0:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:46:7B:B4:93:7E:AC:6B:EF:B9:6B:4F:4F:E3:5B:D7:FD:2A:40:FA
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37215
sbgp-ipAddrBlock: critical
IPv4:
41.70.0.0/17
IPv6:
2c0e:7e80::/28
2c0f:ea60::/32
Signature Algorithm: sha256WithRSAEncryption
ac:4e:1b:ad:db:4b:71:55:8d:c7:35:9e:89:1e:2e:ae:22:54:
b7:01:a4:77:93:0a:6b:5b:7e:54:33:b1:59:da:be:49:23:90:
a9:eb:c9:02:c6:72:f0:b0:30:b7:0b:8a:ab:c9:ee:fa:23:e4:
11:0d:f9:1a:d7:3d:33:86:09:7c:c4:02:87:47:50:b6:62:1a:
60:9d:75:53:60:fa:1f:ab:e3:c2:30:35:44:bb:36:30:c5:27:
47:c3:f1:f1:cc:f7:ef:e4:a3:0c:d2:f1:02:e8:30:83:ed:67:
72:5d:b0:59:d7:09:0d:86:6d:33:a1:ad:5f:ac:0c:f4:21:f8:
2c:5d:d9:d3:d9:7b:62:15:bf:80:91:85:f4:90:41:9a:b1:94:
d6:f8:a7:e1:8b:b5:93:93:54:3c:28:a4:53:7f:fa:40:7d:cb:
42:4b:64:a9:27:26:f5:99:cc:74:21:1b:a1:bf:da:c8:6b:15:
67:ba:21:71:9f:93:15:2a:4d:cc:56:1e:d5:a6:23:1f:d9:d4:
04:57:ca:c4:73:c5:3d:6a:78:c6:49:04:7b:a1:b5:43:e7:80:
65:b6:18:7f:25:93:3b:5c:8c:84:25:cb:e6:74:29:f0:b6:12:
ec:33:e9:dd:82:98:2f:77:85:2c:47:71:60:6e:2d:9f:e4:12:
9a:ec:f8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:56:23 2025 by rpki-client