Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
File: zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer (raw, json)
Hash identifier: 8ploAxT0xpXvQYw2U/fsKsnYpE25OtB2rVT/yfX8zdA=
Subject key identifier: CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 363E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 15 Sep 2025 13:16:35 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37224
AS: 328014
AS: 329521
IP: 102.207.48.0/24
IP: 196.49.7.0/24
IP: 196.223.12.0/24
IP: 2001:43f8:150::/47
IP: 2c0f:56c0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13886 (0x363e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Sep 15 13:16:35 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36831A0AF, serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:21:48:25:e0:45:a6:02:79:a5:88:41:fe:
64:00:ee:19:67:52:b9:c9:66:3b:e1:13:fa:f2:81:
18:5d:03:24:6a:0e:16:c1:a3:b0:9b:09:e1:6b:a9:
6a:76:c1:5a:20:47:5e:d7:25:8f:77:37:d8:b9:ba:
59:29:0c:5f:f5:90:01:77:59:20:62:f9:96:44:12:
c9:2f:18:b1:5d:ba:88:0c:e3:a1:53:01:85:ca:e0:
04:22:a4:0c:d1:43:ca:5f:bd:0b:a2:0b:c8:f5:8a:
54:87:49:d9:5e:4b:d4:73:a5:31:f3:d4:54:ed:17:
fd:3d:de:30:b6:80:61:36:ec:7d:4b:62:73:b4:2e:
a9:39:65:a9:07:b3:6f:f7:43:d7:6c:04:5b:f4:d6:
89:8c:e2:7d:b1:cc:84:5a:8e:a7:03:d6:b5:f0:f8:
9d:cb:8d:f3:8c:04:5b:af:31:11:c0:29:03:18:25:
6b:4d:9a:b7:27:f1:3f:f4:c4:c9:1a:bf:04:75:d3:
3b:11:be:eb:43:47:83:6f:88:60:77:f4:45:24:a7:
d6:f3:90:e5:b4:a6:88:c1:ad:4a:e1:d4:9c:bb:15:
5e:b4:8b:3f:86:2f:f8:89:cd:67:b6:fc:f3:a5:e5:
24:28:0c:5f:1d:e3:6c:43:25:ee:4e:e3:d3:28:7c:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37224
328014
329521
sbgp-ipAddrBlock: critical
IPv4:
102.207.48.0/24
196.49.7.0/24
196.223.12.0/24
IPv6:
2001:43f8:150::/47
2c0f:56c0::/32
Signature Algorithm: sha256WithRSAEncryption
07:f5:48:da:95:6e:6b:72:41:84:4a:a4:37:fc:34:05:c0:e5:
cf:8f:8d:93:09:24:6c:7e:c0:6b:96:65:71:2a:01:69:06:45:
48:f1:41:6d:1b:60:5d:4d:61:d3:f9:df:22:52:c4:cd:b6:a1:
7f:1c:c7:17:92:32:f3:fa:09:66:29:e6:8e:95:34:43:d4:82:
9e:b7:5b:e8:c5:39:3d:1c:74:58:31:b9:d2:10:23:fc:84:65:
44:1e:3c:7d:c0:3e:d3:f7:37:ca:30:b9:3a:ce:25:d7:94:9a:
38:26:10:c8:94:fa:24:c9:60:fc:68:2c:c8:a5:cf:e2:6e:eb:
77:14:fd:10:a7:38:4a:d8:29:c6:67:ae:a7:a3:0e:19:4f:94:
74:c0:4b:cb:ed:58:cd:92:cd:46:55:af:f9:a0:79:5f:31:2a:
a4:90:fc:8c:f5:a6:c8:d7:d8:c3:4d:0b:42:df:14:8f:2b:fc:
04:ad:52:40:74:3d:92:c8:c9:6b:d0:41:52:2e:86:2e:87:79:
2a:a2:da:fe:b4:1e:ff:a3:37:46:38:0a:cd:f5:bf:40:80:6d:
49:98:95:e5:07:6d:b5:f5:03:43:b8:be:c3:50:6a:df:c2:82:
77:70:b5:88:6f:51:b6:c2:30:8a:23:f4:b5:d6:5a:26:1f:df:
52:9d:8e:c9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgICNj4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTA5MTUxMzE2MzVaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjgzMUEwQUYxMTAvBgNVBAUTKENDRDdFRTVGMEY3Mzc3Q0Y4NTMzRTY1
NzM3RUQxMTFGMjAxN0I2MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRdSFIJeBFpgJ5pYhB/mQA7hlnUrnJZjvhE/rygRhdAyRqDhbBo7CbCeFrqWp2
wVogR17XJY93N9i5ulkpDF/1kAF3WSBi+ZZEEskvGLFduogM46FTAYXK4AQipAzR
Q8pfvQuiC8j1ilSHSdleS9RzpTHz1FTtF/093jC2gGE27H1LYnO0Lqk5ZakHs2/3
Q9dsBFv01omM4n2xzIRajqcD1rXw+J3LjfOMBFuvMRHAKQMYJWtNmrcn8T/0xMka
vwR10zsRvutDR4NviGB39EUkp9bzkOW0pojBrUrh1Jy7FV60iz+GL/iJzWe2/POl
5SQoDF8d42xDJe5O49MofMlZAgMBAAGjggM5MIIDNTAdBgNVHQ4EFgQUzNfuXw9z
d8+FM+ZXN+0RHyAXtgEwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4MzFBMC8yRkYxNURCQzkyMzYx
MUYwODJDQTJBRTNEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODMxQTAvMkZGMTVEQkM5MjM2MTFGMDgyQ0EyQUUzREFFNEVDOUMvek5mdVh3
OXpkOC1GTS1aWE4tMFJIeUFYdGdFLm1mdDAkBggrBgEFBQcBCAEB/wQVMBOgETAP
AgMAkWgCAwUBTgIDBQcxMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQAZs8w
AwQAxDEHAwQAxN8MMBYEAgACMBADBwEgAUP4AVADBQAsD1bAMA0GCSqGSIb3DQEB
CwUAA4IBAQAH9UjalW5rckGESqQ3/DQFwOXPj42TCSRsfsBrlmVxKgFpBkVI8UFt
G2BdTWHT+d8iUsTNtqF/HMcXkjLz+glmKeaOlTRD1IKet1voxTk9HHRYMbnSECP8
hGVEHjx9wD7T9zfKMLk6ziXXlJo4JhDIlPokyWD8aCzIpc/ibut3FP0QpzhK2CnG
Z66now4ZT5R0wEvL7VjNks1GVa/5oHlfMSqkkPyM9abI19jDTQtC3xSPK/wErVJA
dD2SyMlr0EFSLoYuh3kqotr+tB7/ozdGOArN9b9AgG1JmJXlB2219QNDuL7DUGrf
woJ3cLWIb1G2wjCKI/S11lomH99SnY7J
-----END CERTIFICATE-----
Generated at Thu Sep 18 01:04:51 2025 by rpki-client