Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer
File: YmHXJNC9IPWdDi44xn6JVKbUy98.cer (raw, json)
Hash identifier: APi18KY2gTVCzo88X5Io7Vn5aoVfgstQTA0lGcKaEns=
Subject key identifier: 62:61:D7:24:D0:BD:20:F5:9D:0E:2E:38:C6:7E:89:54:A6:D4:CB:DF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CBD
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:00:39 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328949
IP: 102.218.160.0/22
IP: 2c0f:7300::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11453 (0x2cbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:00:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3610DE1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8f:46:35:ff:f8:96:c0:42:da:c0:fb:37:14:
5e:e4:cd:e1:ee:98:2c:05:65:f6:5f:4b:cc:ea:b1:
7e:51:4d:9d:a3:c5:d6:ca:d5:6f:65:70:f5:71:39:
ed:c1:5f:35:7f:46:ca:f0:9a:8f:f1:0f:ef:e5:b7:
e0:71:53:48:d8:5c:86:df:98:46:22:48:99:77:6a:
a9:53:f9:1d:8a:ef:bb:8b:cf:2b:d9:c1:ad:46:58:
6f:24:a0:ea:d2:17:11:55:e8:56:f8:e3:bc:07:3e:
0b:0c:fd:c2:c3:39:09:b2:c1:dd:0c:de:17:d8:2c:
c4:4b:0c:9d:5b:b6:22:3a:a1:4e:cc:b7:d1:ef:1e:
49:84:55:19:8c:be:98:90:de:ef:2c:b2:73:64:7c:
70:59:f7:39:72:24:da:01:08:1b:f1:ae:68:d4:83:
7a:0e:b6:0c:74:08:10:43:cc:28:e7:13:d4:f9:5b:
fc:5b:0c:0e:15:79:07:64:8b:c4:93:86:a2:20:8d:
99:ed:0a:7d:02:fe:56:56:69:7a:b2:56:93:53:c1:
94:b0:e7:78:e4:da:c3:5c:4d:89:45:17:cd:f4:fa:
d6:25:63:e7:a6:da:2e:74:a6:55:d7:97:75:95:d4:
c8:ac:4f:35:9e:05:81:b4:c3:e7:6c:ea:97:3e:fa:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:61:D7:24:D0:BD:20:F5:9D:0E:2E:38:C6:7E:89:54:A6:D4:CB:DF
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328949
sbgp-ipAddrBlock: critical
IPv4:
102.218.160.0/22
IPv6:
2c0f:7300::/32
Signature Algorithm: sha256WithRSAEncryption
78:83:11:aa:95:c2:0c:0a:c3:ae:83:84:da:c6:35:96:53:37:
f2:0c:aa:f1:49:ee:55:ba:a5:e5:f9:94:fd:15:a8:1b:0b:4f:
97:ec:e7:14:4f:a6:54:c4:17:20:04:15:83:08:d7:52:f6:4b:
74:53:43:ea:a7:ba:ba:f6:77:89:57:58:d4:7a:cd:a2:47:8d:
25:b9:c7:56:ea:a1:59:c9:da:73:a4:0d:f4:a9:0f:c4:6c:2a:
35:94:06:3f:2c:d6:69:3b:f4:99:02:fe:f6:07:89:bf:3b:fb:
7b:69:38:4e:86:17:02:ec:b9:e8:89:ca:e0:35:20:eb:11:c1:
75:91:29:b8:f4:81:9c:2c:99:1a:9f:ec:dd:43:69:a8:4a:a8:
d4:a3:b3:ed:68:46:02:61:e8:eb:61:55:8d:e7:b4:d8:b7:7d:
14:b6:7c:06:ff:a6:f6:f0:0f:58:5b:8f:19:0e:1e:5e:b6:6f:
be:76:e9:f6:7e:8f:95:3b:47:c8:21:a0:18:fd:a3:ee:ee:0a:
19:40:0c:ae:50:ce:31:ea:cc:c8:75:d5:b0:62:43:42:ff:6d:
2d:ae:24:30:4a:dc:e6:c3:d6:59:5d:de:01:8c:aa:32:53:f6:
78:72:a5:90:01:11:fd:d7:54:5d:e3:e8:6f:f9:69:1a:28:64:
99:80:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:52:18 2025 by rpki-client