Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/agXQ7beSVTGJRs3ZHy36Wnh__xM.cer
File: agXQ7beSVTGJRs3ZHy36Wnh__xM.cer (raw, json)
Hash identifier: aUVvpjP5fHkNbb455Cie1wQs0jBvalt9oMqIw8Uo36w=
Subject key identifier: 6A:05:D0:ED:B7:92:55:31:89:46:CD:D9:1F:2D:FA:5A:78:7F:FF:13
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 35E1
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 13 Aug 2025 11:11:39 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 12556
IP: 102.217.132.0/22
IP: 2c0f:fe88::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13793 (0x35e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Aug 13 11:11:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3658AF9AF, serialNumber=6A05D0EDB79255318946CDD91F2DFA5A787FFF13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:62:ad:2e:59:2b:a3:54:e3:21:52:a2:67:11:
36:81:47:eb:75:e9:61:eb:0a:b4:1a:33:8b:f2:59:
89:66:90:a3:e4:19:bb:fc:12:38:a2:f7:13:02:bc:
8e:b6:8e:0c:a3:aa:3a:42:01:5f:c5:b1:90:83:f1:
15:e0:a7:7a:0a:2c:a2:23:e2:0c:79:de:94:21:87:
20:1c:00:5d:21:b8:83:c1:4d:6a:4d:e1:fe:29:90:
bd:99:84:bb:6c:1f:64:7e:1c:78:f8:af:b3:79:3d:
d0:c6:aa:3f:bf:cf:62:9a:df:d8:42:1c:0b:92:e9:
56:71:22:69:52:10:7e:3c:a2:d7:57:f3:5e:be:e8:
27:1a:7c:2a:f0:64:de:7c:8c:04:b8:d0:3b:62:28:
65:13:10:18:d0:61:15:83:ee:82:23:11:af:15:44:
9c:13:48:e1:b1:36:62:96:a9:02:50:43:9d:93:38:
48:3e:fc:db:1e:90:80:e1:ed:4a:97:c6:63:36:36:
7d:96:27:52:91:46:79:30:a4:8b:89:0c:61:8b:c8:
9d:11:e8:ef:db:df:98:83:67:6c:32:84:49:dc:be:
4e:f1:13:82:89:f4:91:8a:87:df:5b:2c:e5:68:18:
14:74:71:68:95:c2:8e:98:35:9b:b3:70:1e:73:63:
91:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:D0:ED:B7:92:55:31:89:46:CD:D9:1F:2D:FA:5A:78:7F:FF:13
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12556
sbgp-ipAddrBlock: critical
IPv4:
102.217.132.0/22
IPv6:
2c0f:fe88::/32
Signature Algorithm: sha256WithRSAEncryption
6c:60:a3:4f:5e:c9:96:92:b3:1a:fb:d1:ea:b2:24:7c:e8:8b:
7f:0b:3c:17:4d:94:1f:30:fa:b0:0d:7b:a5:76:bf:1f:6d:fc:
16:d5:6a:a7:c8:db:0f:32:f2:57:d5:cb:88:99:10:24:a1:9e:
76:59:c9:c4:8a:9f:56:6f:8d:9d:57:7f:5a:0c:12:66:25:68:
ea:35:2d:77:de:a5:2c:6a:d3:28:5a:cb:47:84:cf:8a:8f:bd:
b2:02:e5:09:00:35:c3:54:9d:1c:78:67:0e:2f:7e:b2:d4:f0:
76:72:cb:74:aa:42:9c:5b:4e:cb:57:76:91:e8:e1:97:2e:da:
6d:bd:5c:3a:89:c5:c9:54:58:84:d5:0e:75:2c:4a:ee:37:1b:
49:5d:f7:f6:4b:eb:07:50:2d:7b:f0:05:0c:2c:37:fb:f8:e0:
62:06:74:fd:14:9a:c3:8d:11:0d:6b:d6:19:92:fb:b2:6d:3d:
69:6a:87:81:2f:fc:28:e0:4c:de:23:8d:5a:dd:a4:d1:2f:3e:
74:5c:87:2f:fe:18:e4:d2:a7:f4:e7:08:83:56:db:e8:f0:1b:
7e:f0:04:fc:61:ad:70:51:fa:e4:cb:b9:f5:2c:0c:e6:97:b1:
83:18:6d:7d:02:1a:72:43:2d:0c:df:ce:5a:6b:e7:ff:cd:ab:
31:32:57:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:59:33 2025 by rpki-client