
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
File: xwJ5nqS9Xbo-09BppxkblBtad5o.cer (raw, json)
Hash identifier: PjUiYI2wb/dlgRzrXBTvEe1YxXDyl7U7JwcE4pMdQ1E=
Subject key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2FF1
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:54:15 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37518
IP: 196.48.0.0/16
IP: 196.56.0.0/14
IP: 196.196.0.0/14
IP: 196.240.0.0 -- 196.245.255.255
IP: 196.247.0.0/16
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12273 (0x2ff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:54:15 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F6034AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:75:b6:ce:8d:4f:1a:7b:e1:d8:8b:17:f0:
3b:d0:5c:9b:5a:62:20:47:cf:76:8b:c4:c8:91:d2:
03:d8:4e:be:b7:a5:15:2f:89:0a:f8:88:8d:e5:c5:
b6:2d:68:61:a5:74:d8:07:11:0f:0b:85:0a:4b:46:
06:0f:6c:c0:7b:be:98:86:7a:de:56:22:c7:e7:7f:
3b:42:7b:8f:4f:cf:bf:eb:57:bc:17:8a:1d:74:4b:
86:3e:81:1f:af:0d:ce:ec:6a:cd:30:be:70:ae:bd:
01:47:5c:32:e0:d6:aa:24:37:0f:77:a2:33:6b:e3:
e0:7b:2a:30:47:f6:ec:2c:49:a4:08:f0:9f:9a:56:
7c:58:7a:31:ec:32:d9:83:77:b1:ac:8e:04:1b:ee:
5c:05:01:50:f2:e8:aa:3c:40:c6:b1:2e:bd:b0:46:
45:cb:41:db:97:ea:19:ae:4d:3d:16:b8:52:68:ed:
88:10:f6:4e:3c:d6:48:76:d5:59:72:2d:43:b6:ac:
26:d4:56:27:a0:da:a8:49:f6:5c:0f:36:80:a3:85:
35:40:5f:41:e0:4c:45:98:34:8c:0b:9d:8e:b5:07:
97:8a:6a:8b:d8:b3:ac:45:d7:19:fa:6d:f2:a2:e6:
fd:f0:1a:31:fd:40:52:d7:5f:82:c9:ce:89:e7:e8:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37518
sbgp-ipAddrBlock: critical
IPv4:
196.48.0.0/16
196.56.0.0/14
196.196.0.0/14
196.240.0.0-196.245.255.255
196.247.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:60:8e:21:fe:04:56:73:d6:f9:55:09:af:0c:7a:3c:61:5d:
06:3b:c1:cc:8b:19:c3:8e:b4:42:13:c8:ec:3f:bc:d5:de:4c:
91:36:2f:41:34:29:7c:a7:49:21:da:2a:2c:44:c7:5c:28:3a:
11:55:c5:ae:08:27:7b:9c:f2:ed:d6:fa:8d:34:31:dc:64:f7:
b2:e8:7e:64:46:78:c1:b5:6f:81:0b:ca:20:4e:06:9b:3c:49:
87:ec:ed:03:5c:8a:e4:4c:e4:ba:a1:e2:cf:12:d4:a9:43:93:
3c:e3:f4:2f:2b:bf:2a:ec:9a:ca:c1:c1:e0:99:fe:88:3b:95:
c0:c1:de:2f:68:4e:73:f4:ba:2d:3e:f7:f0:17:9f:a3:b1:e5:
35:5a:a9:1c:69:9e:48:be:4c:83:c9:75:5d:59:49:b1:95:c4:
6e:9a:34:71:a3:b5:fa:29:41:67:47:57:1b:f5:fd:70:7b:18:
03:2c:21:b6:08:49:cb:2a:cd:02:b8:62:9f:c5:aa:7a:ae:a5:
9e:62:fe:80:aa:70:d8:e8:57:9f:c6:a8:95:74:04:c7:78:83:
42:fb:3e:56:70:7d:b1:22:84:27:ae:76:fb:8f:d5:0d:9c:64:
3f:85:6f:41:5e:70:09:68:d2:f9:bf:49:62:17:59:bd:f2:69:
b8:6a:9d:8f
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgICL/EwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMjU0MTVaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkY2MDM0QUYxMTAvBgNVBAUTKEM3MDI3OTlFQTRCRDVEQkEzRUQzRDA2
OUE3MTkxQjk0MUI1QTc3OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDA1HW2zo1PGnvh2IsX8DvQXJtaYiBHz3aLxMiR0gPYTr63pRUviQr4iI3lxbYt
aGGldNgHEQ8LhQpLRgYPbMB7vpiGet5WIsfnfztCe49Pz7/rV7wXih10S4Y+gR+v
Dc7sas0wvnCuvQFHXDLg1qokNw93ojNr4+B7KjBH9uwsSaQI8J+aVnxYejHsMtmD
d7GsjgQb7lwFAVDy6Ko8QMaxLr2wRkXLQduX6hmuTT0WuFJo7YgQ9k481kh21Vly
LUO2rCbUVieg2qhJ9lwPNoCjhTVAX0HgTEWYNIwLnY61B5eKaovYs6xF1xn6bfKi
5v3wGjH9QFLXX4LJzonn6KL3AgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUxwJ5nqS9
Xbo+09BppxkblBtad5owHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGNjAzNC9EOTE2NzU4QTkwRkMx
MUVBOUQ4MTMwNkVGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjYwMzQvRDkxNjc1OEE5MEZDMTFFQTlEODEzMDZFRjhBRUEyMjgveHdKNW5x
UzlYYm8tMDlCcHB4a2JsQnRhZDVvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAko4wOQYIKwYBBQUHAQcBAf8EKjAoMCYEAgABMCADAwDEMAMDAsQ4AwMCxMQw
CgMDBMTwAwMBxPQDAwDE9zANBgkqhkiG9w0BAQsFAAOCAQEAHmCOIf4EVnPW+VUJ
rwx6PGFdBjvBzIsZw460QhPI7D+81d5MkTYvQTQpfKdJIdoqLETHXCg6EVXFrggn
e5zy7db6jTQx3GT3suh+ZEZ4wbVvgQvKIE4GmzxJh+ztA1yK5EzkuqHizxLUqUOT
POP0Lyu/KuyaysHB4Jn+iDuVwMHeL2hOc/S6LT738Befo7HlNVqpHGmeSL5Mg8l1
XVlJsZXEbpo0caO1+ilBZ0dXG/X9cHsYAywhtghJyyrNArhin8Wqeq6lnmL+gKpw
2OhXn8aolXQEx3iDQvs+VnB9sSKEJ652+4/VDZxkP4VvQV5wCWjS+b9JYhdZvfJp
uGqdjw==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:32:43 2025 by rpki-client