Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
File: yPkMVon3YrNhQtkt1sUlegJhrds.cer (raw, json)
Hash identifier: 2EiVBNmMqXamJ+ev4vkHB3tMHsiCCABA3v9hJ08huQA=
Subject key identifier: C8:F9:0C:56:89:F7:62:B3:61:42:D9:2D:D6:C5:25:7A:02:61:AD:DB
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 311B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:55:40 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328722
IP: 102.207.244.0/22
IP: 102.221.236.0/22
IP: 2c0f:e980::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12571 (0x311b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:55:40 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3694F05AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:d9:33:4f:77:8d:60:91:c9:30:50:16:ed:
13:1a:82:b2:0d:97:dd:9d:6b:5a:16:e5:b9:81:7e:
f0:4a:61:a3:cc:ef:57:ad:a8:e0:17:15:42:01:5c:
d7:52:59:6d:f4:3f:df:6d:33:3b:02:af:b6:39:3a:
86:bf:23:c8:07:18:dc:cb:6c:e5:d7:83:7e:ca:8e:
cc:55:86:c4:b2:91:12:9d:da:b7:77:45:22:ed:5b:
84:e1:f1:01:13:5b:22:9c:5b:e4:ae:b7:d8:17:9e:
53:d6:cb:c4:15:20:18:2a:31:af:d9:7a:2c:11:be:
52:b5:3c:4b:95:ca:1c:3e:51:f1:36:5b:02:53:2d:
f5:ee:82:84:0b:9a:94:1c:53:8a:de:20:86:46:84:
f3:cb:d9:1d:c4:6e:c1:d6:26:fc:41:02:72:5f:a1:
a6:64:9d:2a:4d:70:91:9c:b8:b4:7b:ef:0a:18:1c:
28:bb:8d:57:ef:1c:66:ac:5f:ee:ca:13:d9:6c:3d:
cf:11:d8:2a:0b:89:24:a9:f2:00:14:6d:0c:d1:78:
d9:ce:93:11:96:27:9a:10:04:7a:fc:d1:88:d0:67:
2b:ab:d2:15:13:c0:3c:da:35:52:68:90:9d:31:15:
59:97:95:9a:55:a2:7e:7e:12:86:de:9d:ba:8e:a2:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F9:0C:56:89:F7:62:B3:61:42:D9:2D:D6:C5:25:7A:02:61:AD:DB
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328722
sbgp-ipAddrBlock: critical
IPv4:
102.207.244.0/22
102.221.236.0/22
IPv6:
2c0f:e980::/32
Signature Algorithm: sha256WithRSAEncryption
8e:75:9f:38:e9:ab:ba:7f:da:25:5c:4b:b4:6f:7a:ac:b7:19:
2d:6f:5e:09:d7:90:a8:7f:c8:19:c9:e2:30:1e:4f:4f:4b:4b:
8c:12:c5:cd:fc:a4:56:36:e0:9b:df:50:f0:0a:fb:85:91:eb:
7d:12:12:c6:88:3d:40:45:05:62:86:2b:2a:14:ea:b3:20:79:
36:4d:df:f2:e2:37:2f:c5:57:03:2a:bd:24:69:e3:35:66:91:
68:bc:ee:e8:78:0a:4e:09:21:51:9c:de:d8:07:94:3c:10:16:
0b:5b:7b:d0:2a:62:7d:c0:af:c5:64:be:b1:e4:75:9e:d0:27:
c7:7e:c7:99:2e:8f:29:a4:5a:8b:3a:a9:24:48:31:23:a0:2b:
80:51:b2:60:4c:33:3e:90:00:31:4c:93:07:19:10:38:ce:1c:
51:6e:c8:c7:df:c0:1d:65:20:a7:6c:66:c0:d1:2f:5d:f9:6e:
56:83:43:9a:17:14:2a:44:ed:38:6a:69:07:7f:23:c4:c2:c1:
b5:98:39:a2:bd:fc:e4:a6:e2:11:cf:42:34:88:e0:2f:2f:7c:
fd:2c:e4:af:98:e1:eb:81:30:d8:06:e3:82:8d:ae:7e:97:a5:
3f:38:6a:59:3d:29:aa:5c:cb:45:2e:e4:d4:81:29:da:27:07:
db:aa:cf:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:53:19 2025 by rpki-client