This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/48qwYej4izcp5wmOfReIqfb_C0c.cer
File: 48qwYej4izcp5wmOfReIqfb_C0c.cer (raw, json)
Hash identifier: SoJ5r6+yDQkQi7K6KQKObIoZnSwkZUcx9DjxhGO2hz8=
Subject key identifier: E3:CA:B0:61:E8:F8:8B:37:29:E7:09:8E:7D:17:88:A9:F6:FF:0B:47
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3BFD
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 03:07:24 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328225
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15357 (0x3bfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 03:07:24 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36939A6AF, serialNumber=E3CAB061E8F88B3729E7098E7D1788A9F6FF0B47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:ed:07:84:54:41:8c:1c:4d:19:e4:6f:7d:
24:42:8e:66:e9:b0:b7:d2:10:c3:f9:8b:59:d4:ab:
02:7c:18:40:7f:01:b1:90:66:39:12:e9:b2:5b:81:
a5:e5:83:95:2c:28:43:7d:f8:ed:53:e1:ff:5b:d8:
3d:ce:f8:05:37:cc:85:15:ae:e7:cc:22:ca:88:f7:
1b:97:8c:5a:61:3d:30:3f:bd:72:76:91:88:ab:dd:
25:54:62:76:50:d4:7e:1a:2c:d9:69:74:5b:46:ff:
9c:be:5c:4f:58:64:af:3d:b9:5c:b2:db:cf:48:c1:
f8:b0:27:e6:ff:3c:ef:2e:64:a7:90:29:e0:ec:c6:
91:73:e4:8e:cb:73:a2:aa:5e:83:cf:db:ea:26:63:
64:cc:75:a5:5a:63:a2:30:b3:42:ca:88:41:46:a7:
ad:6e:ce:09:90:49:b4:35:66:ab:14:bd:b5:ba:ed:
fa:29:25:68:ad:7c:f1:40:ba:bc:94:2e:63:45:ec:
87:aa:e9:9b:f9:4d:f3:a6:14:ef:00:4b:b2:db:b1:
8d:da:b8:5b:7f:2c:d1:40:87:f9:0b:18:60:fa:91:
b2:68:46:23:7f:37:5d:c2:bf:4a:c8:86:48:47:73:
7d:37:60:9b:cc:4c:c2:0f:90:55:6f:58:91:4f:ea:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CA:B0:61:E8:F8:8B:37:29:E7:09:8E:7D:17:88:A9:F6:FF:0B:47
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328225
Signature Algorithm: sha256WithRSAEncryption
2e:3c:35:05:e3:70:be:82:53:0a:ed:af:12:d2:29:3f:ba:7f:
31:99:84:f9:8c:b2:cf:da:1d:db:c8:4d:ca:20:2d:50:53:51:
da:73:33:19:c2:52:1b:18:70:08:c9:18:d4:ae:1f:bc:20:42:
96:8d:5c:5f:51:7e:09:fb:3b:25:e4:74:a0:d1:e0:3c:b3:85:
bf:ee:69:21:ad:e2:f5:db:3e:d3:ac:2f:93:3a:67:99:e7:b4:
14:08:70:e0:a9:49:ee:17:50:f0:6e:28:2f:90:4e:44:81:61:
ce:b3:3b:73:6d:15:3f:d0:96:ba:65:2f:d6:4f:50:99:51:32:
71:72:95:35:2b:4c:85:06:ec:a6:99:0e:d1:c5:fb:68:8b:76:
30:44:c6:2b:4b:8c:23:b8:28:3b:2a:7a:5e:8e:75:22:aa:57:
aa:8e:93:c3:03:26:b1:e5:e9:ee:e3:43:63:ec:32:57:ce:6d:
35:71:cc:aa:70:fd:03:2c:4a:0f:56:e1:ea:f0:59:43:da:89:
e8:69:00:02:d1:94:9e:9a:7d:3d:02:58:81:8a:62:78:72:ec:
31:1a:c2:f5:93:eb:6d:e5:60:c9:f9:19:10:1b:78:3b:88:2a:
e7:51:03:5b:3a:dc:01:24:b7:90:2f:21:f3:a2:98:a2:37:4a:
8b:67:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:20:04 2026 by rpki-client