Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
File: 2_aMnFwB1o68DJDe5MB0naI6L9Y.cer (raw, json)
Hash identifier: QIJEP8f4KGvaP2f7zXEdZ+qP2jHxEIk+ektR65wNIEA=
Subject key identifier: DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 34C2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 29 Apr 2025 00:02:27 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327991
IP: 102.64.32.0/20
IP: 102.129.48.0/20
IP: 102.206.216.0/22
IP: 102.211.188.0/22
IP: 2c0f:ec48::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 08 May 2025 00:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13506 (0x34c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Apr 29 00:02:27 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36576E8AF, serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:fe:c4:6d:ff:df:54:c4:ba:61:7c:78:a6:
a9:62:c4:40:c7:cf:cb:8c:f4:1d:d4:69:18:ce:1e:
80:dd:bc:dd:d0:c8:fc:ac:3e:52:3f:f0:1d:31:d3:
1d:39:26:a6:83:67:60:aa:0f:8e:79:f6:27:6c:3f:
2a:db:c2:b9:ff:85:54:af:ca:08:1f:2e:2f:86:e4:
4b:28:08:f8:08:eb:b4:51:03:49:69:ac:88:c0:9e:
be:2c:d7:9b:fd:6e:e3:c4:bd:9a:94:3b:30:48:a0:
13:a8:51:bf:f7:5f:63:58:04:4d:b6:ef:f1:10:c1:
a8:12:7f:3c:15:71:fe:a7:d2:dc:13:8a:b4:c2:82:
41:63:a1:ce:5e:5a:66:8d:41:3c:09:c6:45:86:6c:
fb:57:20:7b:61:f9:09:d6:eb:ae:72:f6:b5:35:36:
b3:f3:be:e2:ef:6a:35:17:81:50:5e:ae:96:74:ef:
34:b5:21:33:68:23:e5:30:94:c0:81:48:65:3b:ed:
fc:a6:29:62:25:28:c4:13:ac:63:41:a6:68:3f:66:
9d:5c:e0:09:1a:f8:ba:20:60:fa:4c:69:41:dc:b5:
07:13:f0:6e:f6:6a:dc:25:f1:73:39:44:a3:6a:82:
68:83:df:31:57:77:3c:57:8a:89:55:c3:b7:98:19:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327991
sbgp-ipAddrBlock: critical
IPv4:
102.64.32.0/20
102.129.48.0/20
102.206.216.0/22
102.211.188.0/22
IPv6:
2c0f:ec48::/32
Signature Algorithm: sha256WithRSAEncryption
2f:0d:54:99:1f:fb:54:6e:8e:17:61:d6:c7:a5:18:ae:d7:56:
98:2b:29:dd:ad:ce:db:99:93:93:9a:2b:0e:a8:d1:03:9c:31:
cd:5f:52:b3:e7:7d:0c:18:f7:8c:c4:4c:a3:9c:a5:9f:6e:0a:
4c:46:79:5e:65:61:ea:c8:82:5d:3a:f5:56:70:4a:52:c7:d6:
0e:fb:47:2c:17:4a:72:67:c1:dc:66:22:2e:b0:a0:18:3a:6a:
57:1e:6d:66:19:17:82:44:bf:23:a6:e6:eb:ec:30:d7:22:4f:
68:6b:46:ed:08:8f:f2:28:62:f3:2f:42:e2:63:e4:c1:66:f4:
80:75:df:b8:99:f3:a4:d0:81:5e:fe:2f:21:3e:1d:10:90:8e:
9e:4e:22:fe:c0:e2:48:60:8f:71:f5:3a:29:54:e1:f1:82:ac:
8e:3b:ab:9f:1a:26:89:de:0a:06:16:f6:db:81:2a:8e:34:45:
38:00:ea:18:56:51:7e:ab:69:eb:6c:2e:fd:24:bc:55:89:ed:
b6:a8:3c:20:8c:c9:7e:5d:9c:3f:30:81:9c:a4:3e:a2:5c:0f:
dc:1c:f8:43:75:dd:b7:f9:1f:4b:f7:76:37:65:6e:33:61:ed:
16:8e:5f:24:2d:cd:1e:e1:83:ce:4b:c8:ef:28:6d:08:0e:de:
47:f2:9e:d4
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgICNMIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTA0MjkwMDAyMjdaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjU3NkU4QUYxMTAvBgNVBAUTKERCRjY4QzlDNUMwMUQ2OEVCQzBDOTBE
RUU0QzA3NDlEQTIzQTJGRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtwf7Ebf/fVMS6YXx4pqlixEDHz8uM9B3UaRjOHoDdvN3QyPysPlI/8B0x0x05
JqaDZ2CqD4559idsPyrbwrn/hVSvyggfLi+G5EsoCPgI67RRA0lprIjAnr4s15v9
buPEvZqUOzBIoBOoUb/3X2NYBE227/EQwagSfzwVcf6n0twTirTCgkFjoc5eWmaN
QTwJxkWGbPtXIHth+QnW665y9rU1NrPzvuLvajUXgVBerpZ07zS1ITNoI+UwlMCB
SGU77fymKWIlKMQTrGNBpmg/Zp1c4Aka+LogYPpMaUHctQcT8G72atwl8XM5RKNq
gmiD3zFXdzxXiolVw7eYGfefAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQU2/aMnFwB
1o68DJDe5MB0naI6L9YwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1NzZFOC9DMzgwODk4NkZDNjEx
MUVDQjE3RTIyQUJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTc2RTgvQzM4MDg5ODZGQzYxMTFFQ0IxN0UyMkFCRjEyMjI0NjgvMl9hTW5G
d0IxbzY4REpEZTVNQjBuYUk2TDlZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFATcwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBARmQCADBARmgTADBAJm
ztgDBAJm07wwDQQCAAIwBwMFACwP7EgwDQYJKoZIhvcNAQELBQADggEBAC8NVJkf
+1Rujhdh1selGK7XVpgrKd2tztuZk5OaKw6o0QOcMc1fUrPnfQwY94zETKOcpZ9u
CkxGeV5lYerIgl069VZwSlLH1g77RywXSnJnwdxmIi6woBg6alcebWYZF4JEvyOm
5uvsMNciT2hrRu0Ij/IoYvMvQuJj5MFm9IB137iZ86TQgV7+LyE+HRCQjp5OIv7A
4khgj3H1OilU4fGCrI47q58aJoneCgYW9tuBKo40RTgA6hhWUX6raetsLv0kvFWJ
7baoPCCMyX5dnD8wgZykPqJcD9wc+EN13bf5H0v3djdlbjNh7RaOXyQtzR7hg85L
yO8obQgO3kfyntQ=
-----END CERTIFICATE-----
Generated at Tue May 6 03:06:47 2025 by rpki-client