Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer
File: Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer (raw, json)
Hash identifier: B48MyimpPjg0MNEHn/quc3F4n+91JkvS/za3j5e1HX0=
Subject key identifier: 5F:3D:45:48:D0:49:4C:B3:EB:B6:5F:B0:A7:9F:E0:99:A5:A1:2C:EA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3521
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 29 May 2025 09:27:56 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37123
IP: 41.191.232.0/21
IP: 154.119.80.0/20
IP: 2c0f:f0b8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13601 (0x3521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: May 29 09:27:56 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362E278AF, serialNumber=5F3D4548D0494CB3EBB65FB0A79FE099A5A12CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:8a:d2:45:e7:71:f1:8f:ee:57:19:e2:58:
14:e9:77:28:b3:7a:af:d8:d2:d8:88:af:00:4f:da:
65:d8:63:09:07:c6:39:8e:92:dc:bf:b3:a4:ef:99:
56:23:a8:24:aa:7e:12:ee:12:95:5b:89:41:b4:ad:
0e:0d:9f:c1:72:d0:60:a1:93:58:58:c1:e4:ef:2f:
42:27:a7:d5:54:dc:05:e4:70:f2:10:be:86:f9:bf:
ec:4d:6f:0e:fd:30:8f:fc:b7:41:64:c2:90:00:cc:
82:ee:22:44:d7:50:b7:55:85:65:11:e0:3c:09:35:
d5:a0:7c:a9:62:2d:8d:73:d0:ec:e9:e5:84:94:6b:
98:cb:09:d4:9b:03:a8:b0:21:89:56:72:ff:36:eb:
5d:54:3c:c2:9a:2b:01:e4:38:62:56:ea:61:a5:12:
63:9f:26:21:f3:4d:41:e6:e9:f3:de:a4:a4:07:9c:
c1:c7:11:4a:8d:c6:88:f8:fa:cf:c8:fb:14:b1:77:
29:bc:02:4d:fc:a4:ac:61:a0:8a:0b:a2:9a:7a:e9:
43:77:a0:db:96:f6:dc:46:e6:46:91:fe:63:10:50:
76:0a:e8:05:b4:32:aa:f2:5e:70:56:4f:14:f5:2e:
41:7b:36:0b:b9:eb:4f:6b:25:f6:76:57:52:d6:ba:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3D:45:48:D0:49:4C:B3:EB:B6:5F:B0:A7:9F:E0:99:A5:A1:2C:EA
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37123
sbgp-ipAddrBlock: critical
IPv4:
41.191.232.0/21
154.119.80.0/20
IPv6:
2c0f:f0b8::/32
Signature Algorithm: sha256WithRSAEncryption
b9:5d:de:0a:97:aa:2f:a1:be:bf:3c:bf:ad:2d:86:17:42:a8:
b3:b4:0b:d1:4f:92:09:ff:e0:59:89:a0:ab:4f:0d:97:24:1c:
33:93:43:fe:75:30:cc:02:dc:4e:45:9b:1b:dc:ae:57:5b:f8:
3b:15:2b:90:3b:61:5c:9d:5e:20:c4:7a:9f:fb:5b:72:1d:1c:
d7:d8:97:82:3f:54:40:7b:9e:5b:20:e0:ab:e1:cf:2a:e1:73:
38:68:67:db:24:e8:e7:7b:61:2f:cf:74:99:8e:ec:d1:92:8b:
c5:2a:60:e9:97:84:29:6a:84:60:42:fe:11:88:1a:61:c5:8c:
32:eb:d4:f2:6d:99:9b:42:41:95:33:4e:d7:2e:a6:d8:a2:c2:
c7:fc:73:af:8e:6f:28:9a:94:c2:42:ca:fa:a6:d0:61:d4:58:
9f:51:7b:fd:3b:a8:f3:9d:ea:be:6f:1b:78:f1:17:a6:5a:e4:
dc:26:5a:64:34:c9:7a:ea:ad:83:aa:d7:41:a9:58:82:bd:87:
ad:d9:12:74:b7:87:a4:1a:cb:dc:86:d0:6b:da:99:dd:4b:54:
7a:f0:90:49:2a:44:00:b3:ef:ca:a7:66:04:7c:cb:f5:fe:9b:
f0:0e:b4:8f:13:84:a0:aa:7a:b0:cc:06:1e:ce:4f:b3:e2:bc:
7e:df:41:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 6 18:34:58 2025 by rpki-client