Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.cer
File: 9GFx1D4o2Mu3Ctc9KUfNIAliEN8.cer (raw, json)
Hash identifier: 7d4ZNM5zCS/7R2/0LYToPl/M63/N8GutwXpfiLZFKjA=
Subject key identifier: F4:61:71:D4:3E:28:D8:CB:B7:0A:D7:3D:29:47:CD:20:09:62:10:DF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 40DA
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 12 May 2026 12:11:05 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 33786
IP: 41.75.48.0/20
IP: 196.29.224.0/20
IP: 2c0f:1d80::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 12:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16602 (0x40da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: May 12 12:11:05 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F3669EE9AF, serialNumber=F46171D43E28D8CBB70AD73D2947CD20096210DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bb:6d:4e:7b:c3:8a:86:34:84:e9:50:52:ac:
6d:d7:94:b3:cb:0e:00:ba:43:2d:45:42:82:d9:88:
97:90:a7:08:46:3b:eb:a3:51:48:ca:98:1b:87:f4:
29:ad:25:26:a6:c0:d1:90:e2:33:39:16:e2:03:a4:
4e:3e:e7:d6:58:25:95:86:19:a3:b6:0e:99:64:62:
fa:1a:64:da:cf:5c:6a:92:09:9a:14:93:6c:01:16:
48:bf:ab:7b:67:dc:9a:8c:ea:da:65:4c:86:f5:4a:
29:35:af:87:a6:8e:cf:57:7b:4b:60:2c:9c:b5:13:
2c:0f:d7:5f:a3:26:d1:b1:16:2e:82:62:f5:a9:d2:
5d:e6:b3:e9:91:d6:46:28:da:29:09:86:ce:fc:0e:
10:56:09:25:6c:4c:ae:a5:98:75:1a:df:d9:26:ca:
12:f0:f0:5f:4c:49:4d:31:9a:8f:5b:80:80:07:94:
18:f8:f9:30:0b:61:eb:aa:71:a0:d0:a8:37:30:8d:
50:c0:ba:3e:33:b2:89:67:f5:b3:e9:28:21:f0:36:
42:57:24:10:02:e6:2b:3a:64:0c:40:d7:dc:c3:22:
ce:3b:3b:a2:07:6a:22:1d:46:00:f8:9f:98:43:a2:
6c:0e:a3:fd:02:04:15:d4:cc:2e:dd:33:24:14:21:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:71:D4:3E:28:D8:CB:B7:0A:D7:3D:29:47:CD:20:09:62:10:DF
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33786
sbgp-ipAddrBlock: critical
IPv4:
41.75.48.0/20
196.29.224.0/20
IPv6:
2c0f:1d80::/32
Signature Algorithm: sha256WithRSAEncryption
b7:9b:ed:e7:64:61:da:2d:29:72:bd:b8:f8:b3:95:45:11:d1:
65:35:f7:0c:5b:34:74:44:85:55:9f:85:0b:62:e4:ad:ea:e2:
db:6b:6d:1d:0f:dd:97:21:7a:c3:c9:80:bd:00:f8:f3:32:27:
55:2d:ce:7b:79:88:07:8f:0e:9f:9a:ed:ca:11:98:65:41:e6:
55:ce:5a:30:0f:ff:44:59:b9:ab:1f:b5:49:61:9e:74:5a:59:
94:d5:a8:88:0d:f0:89:17:6b:d8:2f:ba:6f:fa:23:a6:c4:ae:
da:33:32:f2:3d:ba:4e:59:b8:5f:11:01:ef:03:e9:77:73:2a:
3d:bc:63:8e:e6:d3:3c:c5:57:f3:e5:aa:64:56:1b:ad:82:ab:
fc:f4:7e:d0:16:2d:04:4a:94:9d:49:16:34:7c:14:17:f1:96:
98:75:30:ac:b4:d9:1c:7b:41:ac:de:88:8a:b8:ec:f0:bb:bc:
4c:37:4f:cb:24:fc:7f:e1:62:d0:9f:72:ad:48:1b:87:39:8f:
58:59:e8:57:01:49:08:85:c8:2d:5f:72:c1:52:51:b1:4e:3d:
70:ed:fc:78:82:fa:3a:7d:1d:a9:a9:ba:61:a0:ba:e4:3c:26:
fa:31:34:d7:57:96:d2:ef:ae:8a:35:45:fe:2f:d0:bf:6b:c4:
37:26:7f:b9
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgICQNowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjA1MTIxMjExMDVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjY5RUU5QUYxMTAvBgNVBAUTKEY0NjE3MUQ0M0UyOEQ4Q0JCNzBBRDcz
RDI5NDdDRDIwMDk2MjEwREYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiu21Oe8OKhjSE6VBSrG3XlLPLDgC6Qy1FQoLZiJeQpwhGO+ujUUjKmBuH9Cmt
JSamwNGQ4jM5FuIDpE4+59ZYJZWGGaO2DplkYvoaZNrPXGqSCZoUk2wBFki/q3tn
3JqM6tplTIb1Sik1r4emjs9Xe0tgLJy1EywP11+jJtGxFi6CYvWp0l3ms+mR1kYo
2ikJhs78DhBWCSVsTK6lmHUa39kmyhLw8F9MSU0xmo9bgIAHlBj4+TALYeuqcaDQ
qDcwjVDAuj4zsoln9bPpKCHwNkJXJBAC5is6ZAxA19zDIs47O6IHaiIdRgD4n5hD
omwOo/0CBBXUzC7dMyQUITjtAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU9GFx1D4o
2Mu3Ctc9KUfNIAliEN8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2OUVFOS9BMUNBQzhFODRERkIx
MUYxQUZDRUUxMERDRjFEMzhCMC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjlFRTkvQTFDQUM4RTg0REZCMTFGMUFGQ0VFMTBEQ0YxRDM4QjAvOUdGeDFE
NG8yTXUzQ3RjOUtVZk5JQWxpRU44Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAg/owNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAQpSzADBATEHeAwDQQC
AAIwBwMFACwPHYAwDQYJKoZIhvcNAQELBQADggEBALeb7edkYdotKXK9uPizlUUR
0WU19wxbNHREhVWfhQti5K3q4ttrbR0P3ZchesPJgL0A+PMyJ1Utznt5iAePDp+a
7coRmGVB5lXOWjAP/0RZuasftUlhnnRaWZTVqIgN8IkXa9gvum/6I6bErtozMvI9
uk5ZuF8RAe8D6XdzKj28Y47m0zzFV/PlqmRWG62Cq/z0ftAWLQRKlJ1JFjR8FBfx
lph1MKy02Rx7QazeiIq47PC7vEw3T8sk/H/hYtCfcq1IG4c5j1hZ6FcBSQiFyC1f
csFSUbFOPXDt/HiC+jp9HampumGguuQ8JvoxNNdXltLvroo1Rf4v0L9rxDcmf7k=
-----END CERTIFICATE-----
Generated at Tue May 12 21:54:06 2026 by rpki-client