Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
File: XyKMRr7ytMupTLKfEMNoDuKIPbM.cer (raw, json)
Hash identifier: FX97Z+dlhT6wA8SOSXDWLLUCRQeiKFaj0FBNmlanyQA=
Subject key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 31B8
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:29:29 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37613
IP: 41.242.112.0/22
IP: 2c0f:f170::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12728 (0x31b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:29:29 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36A41A0AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:cf:87:f2:47:21:85:f6:87:0f:d0:dd:35:
5e:e0:52:da:77:bc:64:11:11:d0:9d:55:b0:e1:ca:
74:e9:07:be:74:60:47:aa:6f:65:98:28:a6:d2:27:
2a:c9:49:2b:c1:b8:d6:38:d4:ed:a6:f9:1b:e0:47:
4a:59:42:5d:1e:8d:b6:10:6e:ce:92:eb:f1:e5:de:
e0:dc:4b:41:fa:91:ea:45:e0:70:4e:51:07:4f:6a:
e4:e8:ac:95:81:e9:23:bc:c9:5c:30:b3:7f:79:50:
84:02:d9:5c:ae:12:82:09:8d:bb:47:1e:ae:a4:16:
52:9f:c9:ba:f9:a2:f1:a0:4d:06:8f:31:a0:3c:ac:
f3:44:92:87:62:1c:0d:89:5f:2e:0f:50:b3:be:fd:
ce:81:5b:a7:e9:a1:de:79:a6:63:f2:31:74:88:d4:
0e:31:e4:46:c7:17:17:50:2e:08:91:4b:18:a6:92:
5b:c0:e7:3d:f5:7e:24:50:b4:d7:e6:b7:93:7e:49:
dd:1f:d7:d7:40:01:13:88:c4:59:1a:4f:e3:40:55:
5e:df:7f:36:8b:ca:66:21:60:62:0e:78:6c:e2:e5:
ef:dd:e4:82:58:8d:e7:7e:ae:89:56:84:a4:83:43:
c7:7f:97:d6:ca:bd:97:31:2d:45:9b:f1:b6:5c:2f:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37613
sbgp-ipAddrBlock: critical
IPv4:
41.242.112.0/22
IPv6:
2c0f:f170::/32
Signature Algorithm: sha256WithRSAEncryption
13:73:b9:23:d5:ce:d9:47:ab:be:14:07:10:d3:39:51:85:75:
64:55:09:bc:d4:7f:cd:ce:1d:32:e3:4e:dc:e9:a4:bf:6f:cc:
d7:20:78:87:72:5c:af:bf:12:b1:a9:3f:cf:96:fa:60:25:5b:
ca:08:7e:08:33:ea:5b:a1:d2:bc:2b:af:7b:d8:59:3c:62:a9:
4e:0a:bd:31:71:9d:e1:1f:b6:39:27:08:67:00:2c:1a:ff:d0:
ad:20:5e:85:e0:97:17:74:6d:d2:6b:d7:71:8f:51:e1:f4:28:
63:08:27:f8:4f:62:ee:d7:de:ee:94:1a:71:e2:ee:0e:05:94:
02:aa:cf:8b:c8:89:5d:ea:4b:84:63:2a:19:b4:88:47:35:bb:
3f:8e:4d:fb:35:f2:fc:b8:0d:0b:1d:f2:6a:8b:c9:b9:29:c8:
dd:12:b1:3f:74:66:cf:61:56:f3:8d:f7:cc:7e:15:d5:f5:fd:
13:4c:d4:40:d6:02:8a:e3:99:52:76:cb:35:d9:05:87:5f:05:
d2:13:11:63:ff:4e:f0:db:87:11:5b:40:e9:33:91:bc:88:e3:
03:d2:fc:bf:41:e9:e9:d5:d7:2a:5c:a5:8d:0b:14:da:8e:85:
0d:c8:a0:e7:24:c4:2a:d2:ae:3a:22:f9:04:cc:aa:10:ca:a0:
dd:39:0b:8b
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICMbgwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNDI5MjlaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkE0MUEwQUYxMTAvBgNVBAUTKDVGMjI4QzQ2QkVGMkI0Q0JBOTRDQjI5
RjEwQzM2ODBFRTI4ODNEQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDTs+H8kchhfaHD9DdNV7gUtp3vGQREdCdVbDhynTpB750YEeqb2WYKKbSJyrJ
SSvBuNY41O2m+RvgR0pZQl0ejbYQbs6S6/Hl3uDcS0H6kepF4HBOUQdPauTorJWB
6SO8yVwws395UIQC2VyuEoIJjbtHHq6kFlKfybr5ovGgTQaPMaA8rPNEkodiHA2J
Xy4PULO+/c6BW6fpod55pmPyMXSI1A4x5EbHFxdQLgiRSximklvA5z31fiRQtNfm
t5N+Sd0f19dAAROIxFkaT+NAVV7ffzaLymYhYGIOeGzi5e/d5IJYjed+rolWhKSD
Q8d/l9bKvZcxLUWb8bZcLxS1AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUXyKMRr7y
tMupTLKfEMNoDuKIPbMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBNDFBMC9GMDYzQ0UzMjBBOTcx
MUVFQjlCNDI1MjM0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTQxQTAvRjA2M0NFMzIwQTk3MTFFRUI5QjQyNTIzNEFEOUU2RkMvWHlLTVJy
N3l0TXVwVExLZkVNTm9EdUtJUGJNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAku0wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIp8nAwDQQCAAIwBwMF
ACwP8XAwDQYJKoZIhvcNAQELBQADggEBABNzuSPVztlHq74UBxDTOVGFdWRVCbzU
f83OHTLjTtzppL9vzNcgeIdyXK+/ErGpP8+W+mAlW8oIfggz6luh0rwrr3vYWTxi
qU4KvTFxneEftjknCGcALBr/0K0gXoXglxd0bdJr13GPUeH0KGMIJ/hPYu7X3u6U
GnHi7g4FlAKqz4vIiV3qS4RjKhm0iEc1uz+OTfs18vy4DQsd8mqLybkpyN0SsT90
Zs9hVvON98x+FdX1/RNM1EDWAorjmVJ2yzXZBYdfBdITEWP/TvDbhxFbQOkzkbyI
4wPS/L9B6enV1ypcpY0LFNqOhQ3IoOckxCrSrjoi+QTMqhDKoN05C4s=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:39:29 2025 by rpki-client