Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
File: aMXkutXc1WSiVidTyay2Mr0ky1A.cer (raw, json)
Hash identifier: FS6aoopF1+k2kGiX/IqfZEXkhnv9WWBX3fe/K/oIkyI=
Subject key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F66
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:26:31 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 36969
IP: 41.87.0.0/19
IP: 41.221.96.0/20
IP: 2c0e:7800::/24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12134 (0x2f66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:26:31 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36DE46FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:70:76:d3:ed:65:bf:e4:28:17:71:f2:2c:
ef:21:dd:0e:3e:d7:3d:c5:1a:7e:5e:17:b5:4f:e0:
a6:c9:9f:38:59:d6:a1:b4:6d:72:e4:75:c2:6f:11:
db:3e:69:0c:19:88:ef:64:54:93:7e:4f:72:0a:d9:
da:51:5e:16:41:07:d4:98:cd:23:49:4d:c2:02:82:
1f:13:ec:c6:c3:0c:61:49:03:40:a8:d3:3f:a3:63:
bd:ed:a6:78:31:81:48:43:e9:a7:e7:92:1a:b8:9f:
34:fa:ff:7e:83:4c:30:cf:79:c7:c7:f3:d6:38:2f:
40:63:5f:a3:2f:b1:42:ed:cb:6c:f5:6f:fc:2f:d6:
18:49:e1:44:9b:5b:b0:4b:53:e1:82:4f:39:e5:3a:
22:b2:a1:35:9c:bb:c4:8c:2e:6f:db:8e:25:67:f7:
3f:ca:70:f3:36:d6:19:31:b1:92:80:2c:36:3e:02:
ff:90:63:c8:38:4d:f3:fe:67:ba:2c:fa:df:0c:d0:
0f:4e:dd:47:b8:17:aa:d9:ff:d2:d0:1a:b2:00:c4:
2b:84:21:54:85:0c:cf:be:34:48:16:60:c0:5b:79:
7f:40:8e:3b:09:b9:82:d8:c1:e5:db:21:db:25:8a:
9f:02:84:e0:2d:00:b2:85:fd:18:82:3d:74:7f:95:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36969
sbgp-ipAddrBlock: critical
IPv4:
41.87.0.0/19
41.221.96.0/20
IPv6:
2c0e:7800::/24
Signature Algorithm: sha256WithRSAEncryption
7b:3a:90:60:3b:c6:3e:ea:dd:23:7e:12:d4:0f:bf:5a:fb:79:
45:16:a2:32:ef:9a:d2:9c:d0:a7:b4:eb:1c:28:20:44:e9:2f:
24:4c:62:27:90:5a:c4:f6:d5:fd:0b:57:17:21:45:b2:f8:56:
fb:a9:3a:a1:68:b8:6e:71:4a:b6:6a:12:8b:e5:94:b6:75:4b:
ad:f0:08:ec:be:85:bc:ad:2b:6d:b2:b5:d3:6e:2b:be:a7:14:
86:96:71:72:c0:4a:07:d7:15:75:3f:b1:8e:56:4b:b8:61:f5:
b0:47:33:4a:46:e8:f8:9e:ae:51:21:83:09:2f:f9:3e:c6:05:
e3:20:b6:d1:df:b5:9b:75:bd:87:26:cd:7e:46:06:c3:21:83:
e3:ea:5e:95:d4:8b:bd:e9:46:95:85:84:c7:64:f9:b0:1a:02:
52:8e:b0:07:2a:cc:bd:79:50:db:a1:9e:57:f2:74:36:63:bd:
30:76:ab:ef:25:c0:67:4d:d6:27:ab:65:1f:07:05:e4:58:46:
f2:d7:dd:fc:39:a8:7a:8f:df:c6:c0:d7:26:bc:74:c8:74:6a:
52:75:83:f5:c1:ae:47:72:49:ea:53:63:97:1e:67:72:2b:43:
1b:c4:1f:7c:15:0d:3d:cf:23:7a:1f:06:da:61:22:18:b8:83:
be:b8:12:3a
-----BEGIN CERTIFICATE-----
MIIGKjCCBRKgAwIBAgICL2YwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMjI2MzFaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkRFNDZGQUYxMTAvBgNVBAUTKDY4QzVFNEJBRDVEQ0Q1NjRBMjU2Mjc1
M0M5QUNCNjMyQkQyNENCNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrEnB20+1lv+QoF3HyLO8h3Q4+1z3FGn5eF7VP4KbJnzhZ1qG0bXLkdcJvEds+
aQwZiO9kVJN+T3IK2dpRXhZBB9SYzSNJTcICgh8T7MbDDGFJA0Co0z+jY73tpngx
gUhD6afnkhq4nzT6/36DTDDPecfH89Y4L0BjX6MvsULty2z1b/wv1hhJ4USbW7BL
U+GCTznlOiKyoTWcu8SMLm/bjiVn9z/KcPM21hkxsZKALDY+Av+QY8g4TfP+Z7os
+t8M0A9O3Ue4F6rZ/9LQGrIAxCuEIVSFDM++NEgWYMBbeX9AjjsJuYLYweXbIdsl
ip8ChOAtALKF/RiCPXR/lZC9AgMBAAGjggMfMIIDGzAdBgNVHQ4EFgQUaMXkutXc
1WSiVidTyay2Mr0ky1AwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZERTQ2Ri9FQjQ5MzRDQ0Q1RkUx
MUU5OTUyODE5M0JGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2REU0NkYvRUI0OTM0Q0NENUZFMTFFOTk1MjgxOTNCRjhBRUEyMjgvYU1Ya3V0
WGMxV1NpVmlkVHlheTJNcjBreTFBLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkGkwMwYIKwYBBQUHAQcBAf8EJDAiMBIEAgABMAwDBAUpVwADBAQp3WAwDAQC
AAIwBgMEACwOeDANBgkqhkiG9w0BAQsFAAOCAQEAezqQYDvGPurdI34S1A+/Wvt5
RRaiMu+a0pzQp7TrHCggROkvJExiJ5BaxPbV/QtXFyFFsvhW+6k6oWi4bnFKtmoS
i+WUtnVLrfAI7L6FvK0rbbK1024rvqcUhpZxcsBKB9cVdT+xjlZLuGH1sEczSkbo
+J6uUSGDCS/5PsYF4yC20d+1m3W9hybNfkYGwyGD4+peldSLvelGlYWEx2T5sBoC
Uo6wByrMvXlQ26GeV/J0NmO9MHar7yXAZ03WJ6tlHwcF5FhG8tfd/Dmoeo/fxsDX
Jrx0yHRqUnWD9cGuR3JJ6lNjlx5ncitDG8QffBUNPc8jeh8G2mEiGLiDvrgSOg==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:39:28 2025 by rpki-client