Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
File: AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer (raw, json)
Hash identifier: ckyIlWWVey5Wi8klxyId3cRN1C8DzSKCMC4nxWOuK3k=
Subject key identifier: 00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 35E3
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 13 Aug 2025 14:01:43 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 41.206.32.0/19
IP: 41.215.0.0/17
IP: 41.220.112.0/20
IP: 196.200.16.0/20
IP: 196.207.16.0/20
IP: 197.254.0.0/17
IP: 2c0f:ff90::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13795 (0x35e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Aug 13 14:01:43 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3695947AF, serialNumber=006E0BE21090792D18356197510AD340EC042353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:0f:c4:fe:4b:82:4e:9c:df:b7:ed:a3:46:
23:3e:e8:7a:4f:ef:fa:b1:e4:39:24:8b:4c:95:74:
c7:a1:de:6d:09:5d:1e:13:ef:b6:fb:9f:fb:c8:d2:
7b:52:c8:70:48:ef:03:18:74:bb:e9:77:99:b4:b8:
e3:95:e5:86:d4:21:bf:5b:c7:e9:ac:de:06:a1:e4:
f3:d5:cf:07:9f:a2:a9:5a:92:67:b0:0d:72:c2:fb:
56:16:ef:30:5e:99:8b:1e:5b:89:37:3b:0a:57:30:
3a:f9:50:91:70:f0:0c:25:84:05:5e:31:1c:84:26:
9e:c4:40:bf:17:00:b3:fc:57:2b:6f:87:2d:91:a2:
37:e0:a7:01:b6:1a:bd:c4:5f:b9:49:8b:2f:90:88:
c3:83:30:b2:48:a8:da:10:7f:13:76:69:b4:bc:7b:
4d:40:77:2e:07:a2:33:ed:d5:be:ef:a7:76:0d:64:
2c:f2:5d:e1:30:62:8e:e8:bb:9f:1a:74:d5:e5:a9:
ac:d2:13:40:51:24:19:7f:6c:ed:17:34:bd:4a:8b:
6b:c4:75:e2:a7:9e:76:fd:52:dd:b5:12:31:59:fe:
5b:f3:18:88:c5:9b:39:03:46:d4:7b:49:7a:88:06:
1c:4b:bd:be:03:b4:9b:06:d7:60:59:90:ac:0e:68:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
sbgp-ipAddrBlock: critical
IPv4:
41.206.32.0/19
41.215.0.0/17
41.220.112.0/20
196.200.16.0/20
196.207.16.0/20
197.254.0.0/17
IPv6:
2c0f:ff90::/32
Signature Algorithm: sha256WithRSAEncryption
46:f4:26:9a:53:ae:1c:fc:28:7a:dd:04:b4:32:34:0c:e8:32:
8f:33:28:16:8d:e3:28:b5:a1:d8:51:96:24:15:64:9b:bf:2e:
12:85:a0:3b:7b:3b:18:97:a4:34:ba:0b:3a:e9:ea:c9:86:e8:
7b:3e:30:62:21:0e:eb:96:02:c9:d7:55:bc:b3:eb:0d:81:30:
07:b5:36:ce:c7:e5:68:89:e3:2d:3e:30:60:eb:ff:64:e9:6b:
fc:6d:59:e7:8d:aa:42:4a:8f:c1:04:a3:79:e2:9c:7c:3a:f9:
45:63:b6:b5:43:c2:cd:3e:28:bd:47:e9:f8:5f:97:4e:9b:13:
51:ab:c4:a8:00:81:51:76:ae:1e:7a:6b:e4:11:4a:ce:15:b2:
3d:88:72:34:e9:0d:5e:16:ae:8a:e7:c2:05:23:4b:c0:9f:80:
50:aa:50:63:d1:0d:2a:c4:58:4d:27:2e:0b:f8:c9:a0:af:b6:
4e:ad:f6:54:34:e7:1e:30:f1:35:c6:6e:33:80:e2:a6:3e:b4:
cf:05:2a:b1:67:ef:96:06:27:04:74:2a:fb:92:dc:8a:c2:0b:
8c:3b:50:40:de:dd:17:e5:e9:dd:91:a1:c2:47:27:6d:c5:a3:
ae:6f:d7:b8:32:cc:0e:38:c3:86:4a:3e:5f:7d:90:bd:42:16:
71:bc:01:e2
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgICNeMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTA4MTMxNDAxNDNaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjk1OTQ3QUYxMTAvBgNVBAUTKDAwNkUwQkUyMTA5MDc5MkQxODM1NjE5
NzUxMEFEMzQwRUMwNDIzNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDddA/E/kuCTpzft+2jRiM+6HpP7/qx5Dkki0yVdMeh3m0JXR4T77b7n/vI0ntS
yHBI7wMYdLvpd5m0uOOV5YbUIb9bx+ms3gah5PPVzwefoqlakmewDXLC+1YW7zBe
mYseW4k3OwpXMDr5UJFw8AwlhAVeMRyEJp7EQL8XALP8Vytvhy2RojfgpwG2Gr3E
X7lJiy+QiMODMLJIqNoQfxN2abS8e01Ady4HojPt1b7vp3YNZCzyXeEwYo7ou58a
dNXlqazSE0BRJBl/bO0XNL1Ki2vEdeKnnnb9Ut21EjFZ/lvzGIjFmzkDRtR7SXqI
BhxLvb4DtJsG12BZkKwOaM+dAgMBAAGjggMcMIIDGDAdBgNVHQ4EFgQUAG4L4hCQ
eS0YNWGXUQrTQOwEI1MwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5NTk0Ny8wNTdFNUMwODc4NEUx
MUYwQjNCRjMyN0REQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTU5NDcvMDU3RTVDMDg3ODRFMTFGMEIzQkYzMjdEREFFNEVDOUMvQUc0TDRo
Q1FlUzBZTldHWFVRclRRT3dFSTFNLm1mdDBMBggrBgEFBQcBBwEB/wQ9MDswKgQC
AAEwJAMEBSnOIAMEBynXAAMEBCnccAMEBMTIEAMEBMTPEAMEB8X+ADANBAIAAjAH
AwUALA//kDANBgkqhkiG9w0BAQsFAAOCAQEARvQmmlOuHPwoet0EtDI0DOgyjzMo
Fo3jKLWh2FGWJBVkm78uEoWgO3s7GJekNLoLOunqyYboez4wYiEO65YCyddVvLPr
DYEwB7U2zsflaInjLT4wYOv/ZOlr/G1Z542qQkqPwQSjeeKcfDr5RWO2tUPCzT4o
vUfp+F+XTpsTUavEqACBUXauHnpr5BFKzhWyPYhyNOkNXhauiufCBSNLwJ+AUKpQ
Y9ENKsRYTScuC/jJoK+2Tq32VDTnHjDxNcZuM4Dipj60zwUqsWfvlgYnBHQq+5Lc
isILjDtQQN7dF+Xp3ZGhwkcnbcWjrm/XuDLMDjjDhko+X32QvUIWcbwB4g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:07:31 2025 by rpki-client