Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/tn7LFjhxCvMebiqPvdVTlXUlz_Q.cer
File: tn7LFjhxCvMebiqPvdVTlXUlz_Q.cer (raw, json)
Hash identifier: L+zW9ZLSDFQOeBaC0exF3FBzg0DDQ/t3wqc642Fe2pg=
Subject key identifier: B6:7E:CB:16:38:71:0A:F3:1E:6E:2A:8F:BD:D5:53:95:75:25:CF:F4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 35B9
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 24 Jul 2025 08:45:13 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37404
IP: 41.78.8.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13753 (0x35b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jul 24 08:45:13 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F364563FAF, serialNumber=B67ECB1638710AF31E6E2A8FBDD553957525CFF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:4f:02:8c:6c:e3:b1:2d:23:25:73:ad:0a:
c4:15:fc:ba:c3:7e:62:80:72:82:09:2d:36:e2:18:
53:b6:6f:91:d6:86:c0:06:e1:81:ec:0e:ab:38:be:
5d:5c:7d:24:9b:9d:d9:86:da:ed:f1:3b:88:b4:b5:
e3:3c:cd:81:5d:bc:50:e5:5f:15:65:f1:5a:3d:8c:
af:3d:b2:e9:37:6b:a6:5b:5b:e0:cb:e7:9c:3f:27:
36:3d:a3:27:9b:49:b7:3b:f0:92:1b:13:cc:10:02:
79:95:04:0a:03:cd:fb:2a:bd:57:e3:c9:82:f7:f2:
18:bd:06:14:21:d9:e7:89:53:b4:86:af:27:78:d7:
db:1a:8f:68:4e:1c:c6:7f:40:03:13:66:85:cf:d2:
b4:a8:b1:6d:20:4c:e2:04:82:ca:71:f0:fd:d6:ef:
ab:f0:1c:c1:37:16:d3:6f:b4:49:0c:31:4b:78:4d:
6e:53:47:9e:8f:5f:ec:e1:9d:11:af:75:3f:6b:ac:
e6:d6:77:28:55:f3:a3:26:8c:74:23:a9:ea:bc:f3:
b7:b1:eb:5f:4b:f9:4a:40:96:3e:1a:7c:c4:5c:ce:
51:43:1b:ed:3e:32:4f:64:95:09:09:c3:c3:15:38:
ba:1d:17:82:bc:00:1a:65:ad:fa:4b:ed:eb:21:85:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7E:CB:16:38:71:0A:F3:1E:6E:2A:8F:BD:D5:53:95:75:25:CF:F4
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37404
sbgp-ipAddrBlock: critical
IPv4:
41.78.8.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:91:c8:e1:b3:58:d6:08:b6:2d:7b:de:d5:81:9a:ad:00:a9:
22:95:ea:ea:9e:00:34:8b:71:f8:33:08:0a:f2:bd:e9:64:fd:
1d:ff:68:62:73:60:2d:bf:94:84:21:de:f7:ef:d0:7d:e6:09:
90:37:df:10:c4:44:9a:d9:86:04:f9:f0:04:ee:d2:86:35:29:
be:bb:c8:d1:3b:b2:38:13:96:40:db:0b:cf:b0:2b:c0:8a:5d:
a4:f7:2c:d4:98:22:05:84:61:66:60:aa:8c:46:7e:b6:4a:e6:
47:22:91:d6:79:88:26:8f:9c:a6:d2:8f:4b:c2:b5:18:38:cc:
3f:3b:f5:f0:65:f3:44:f4:28:1c:90:db:2c:18:d4:9d:5e:41:
35:f9:0f:80:42:fd:3c:3e:19:bd:ae:63:70:b5:35:57:f7:21:
06:18:b4:22:bf:26:59:55:d1:8e:59:f4:02:fe:95:65:47:c7:
10:83:37:4e:fb:ee:9a:94:ac:d9:58:f3:e1:52:e5:1f:6b:dc:
74:ee:c6:a7:8b:4c:3b:d1:ac:29:09:c5:54:a5:20:a1:56:92:
8f:f4:e2:d5:01:b6:91:7f:e7:b6:59:e9:02:41:cd:95:5d:8b:
e0:fa:b7:2b:2e:b5:02:70:60:91:d9:a9:1e:31:11:db:3e:4c:
b7:9a:8c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:39:17 2025 by rpki-client