
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
File: gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer (raw, json)
Hash identifier: tz0LL5K1M0h7nO71vpwet0WtGY0suvkqo5EjxIXBr/c=
Subject key identifier: 80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E6D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:36:14 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37337
IP: 41.79.48.0/22
IP: 102.223.24.0/22
IP: 2c0f:f840::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11885 (0x2e6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:36:14 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F364744FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:6a:09:1a:cf:4b:28:53:4c:26:6a:12:41:
8c:47:80:4d:09:98:bc:82:c4:28:91:cf:4f:77:0d:
11:ae:a1:51:2d:5a:1b:da:8c:b6:61:4b:df:10:c8:
15:16:b4:cf:45:0c:fd:10:7d:a5:39:10:8c:cd:8e:
04:3a:94:8a:dd:40:2c:6a:14:ea:44:cb:dd:23:0c:
df:fe:b5:3a:6e:e0:f1:69:99:de:e2:a3:23:16:51:
59:4b:21:1d:ac:85:a2:2e:ef:10:80:18:42:cd:d2:
6d:93:9c:02:67:05:3a:59:b9:8b:74:4c:05:c9:9c:
56:e0:a8:4d:99:f2:1e:ec:a5:62:6c:88:23:60:cf:
ee:58:dd:09:c2:3c:04:bc:9f:4b:72:77:13:3f:0d:
dc:e5:13:d5:70:78:e1:43:2d:87:66:94:72:3e:9b:
1b:61:d4:95:0a:a9:5d:62:78:dc:b9:e3:37:88:54:
af:19:69:3b:3b:ed:75:09:1a:a1:49:69:3e:b6:65:
8f:1b:07:58:d9:2c:a3:ac:1b:44:ee:44:86:3d:b4:
86:de:99:96:a5:00:bb:94:ff:05:2d:b8:c1:2a:5b:
d0:77:9e:7c:50:39:a7:3e:e7:33:ff:3d:9e:78:d4:
4b:05:46:02:bd:44:00:79:0f:a3:c6:a7:a9:e0:a2:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37337
sbgp-ipAddrBlock: critical
IPv4:
41.79.48.0/22
102.223.24.0/22
IPv6:
2c0f:f840::/32
Signature Algorithm: sha256WithRSAEncryption
51:27:ab:bf:e8:77:1f:57:58:60:9e:9e:e7:de:b1:50:3c:5c:
32:27:32:fb:a7:d1:91:78:99:ca:bc:c8:33:b0:b5:28:1b:4b:
7b:2b:e1:c3:46:4b:e9:bb:69:c5:6a:30:38:b5:b6:fb:f3:94:
ee:a5:7d:81:1d:e3:70:b7:8a:87:8b:da:4c:b4:b4:fd:44:46:
ec:d5:bc:5e:10:62:e4:02:2c:c4:b2:cd:77:f3:3d:10:34:98:
c3:96:84:81:90:5c:cf:b6:2f:a3:1b:a3:11:0b:b9:2f:1e:e7:
f4:65:6c:38:65:86:12:b7:29:d8:30:1d:95:b4:4b:cc:5a:b6:
1a:41:1b:17:16:81:98:6f:f4:c7:8e:70:ea:7f:41:83:01:6f:
6f:06:71:7e:57:8d:2a:4a:f5:78:a2:d0:80:10:14:00:51:99:
50:09:d6:86:21:06:72:c3:cf:c1:0a:a4:13:f4:13:c2:1e:db:
47:c2:2c:0e:85:b0:bf:b2:9f:0b:38:11:53:40:9f:16:b9:ed:
77:65:3a:9a:43:65:ae:b6:30:67:d9:28:be:28:83:01:66:18:
6a:e7:15:54:ac:b6:72:b4:d9:b6:a6:90:32:13:7e:f6:13:67:
90:9d:50:59:57:37:26:a0:31:7f:67:26:4b:c1:01:29:46:d5:
c4:54:2e:62
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgICLm0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMTM2MTRaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjQ3NDRGQUYxMTAvBgNVBAUTKDgwQUYwNjBFNDY0MEMzMjY1M0QwRjAw
QzMwMjQ1MTRBOUYxNDk1MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCaQWoJGs9LKFNMJmoSQYxHgE0JmLyCxCiRz093DRGuoVEtWhvajLZhS98QyBUW
tM9FDP0QfaU5EIzNjgQ6lIrdQCxqFOpEy90jDN/+tTpu4PFpmd7ioyMWUVlLIR2s
haIu7xCAGELN0m2TnAJnBTpZuYt0TAXJnFbgqE2Z8h7spWJsiCNgz+5Y3QnCPAS8
n0tydxM/DdzlE9VweOFDLYdmlHI+mxth1JUKqV1ieNy54zeIVK8ZaTs77XUJGqFJ
aT62ZY8bB1jZLKOsG0TuRIY9tIbemZalALuU/wUtuMEqW9B3nnxQOac+5zP/PZ54
1EsFRgK9RAB5D6PGp6ngopgvAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUgK8GDkZA
wyZT0PAMMCRRSp8UlTgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0NzQ0Ri8zQjAyRjhCMkFEQzMx
MUVBOEY0MkVGNzdGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDc0NEYvM0IwMkY4QjJBREMzMTFFQThGNDJFRjc3RjhBRUEyMjgvZ0s4R0Rr
WkF3eVpUMFBBTU1DUlJTcDhVbFRnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkdkwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAIpTzADBAJm3xgwDQQC
AAIwBwMFACwP+EAwDQYJKoZIhvcNAQELBQADggEBAFEnq7/odx9XWGCenufesVA8
XDInMvun0ZF4mcq8yDOwtSgbS3sr4cNGS+m7acVqMDi1tvvzlO6lfYEd43C3ioeL
2ky0tP1ERuzVvF4QYuQCLMSyzXfzPRA0mMOWhIGQXM+2L6MboxELuS8e5/RlbDhl
hhK3KdgwHZW0S8xathpBGxcWgZhv9MeOcOp/QYMBb28GcX5XjSpK9Xii0IAQFABR
mVAJ1oYhBnLDz8EKpBP0E8Ie20fCLA6FsL+ynws4EVNAnxa57XdlOppDZa62MGfZ
KL4ogwFmGGrnFVSstnK02bamkDITfvYTZ5CdUFlXNyagMX9nJkvBASlG1cRULmI=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:42:55 2025 by rpki-client