This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/A7HsVImnJFpUDQglPfhVKV6iF1s.cer
File: A7HsVImnJFpUDQglPfhVKV6iF1s.cer (raw, json)
Hash identifier: qYIDeLH8M7MeWo8maHyYWEyQWU7h2jkpP7ZN4lRWN1o=
Subject key identifier: 03:B1:EC:54:89:A7:24:5A:54:0D:08:25:3D:F8:55:29:5E:A2:17:5B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 37C4
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:20:13 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 37604
IP: 41.191.64.0/22
IP: 102.207.236.0/22
IP: 197.231.192.0/22
IP: 2c0f:1840::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14276 (0x37c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 00:20:13 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F361B707AF, serialNumber=03B1EC5489A7245A540D08253DF855295EA2175B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:26:8f:8f:64:d8:de:20:38:b4:43:47:e2:
57:19:a7:51:35:e7:b9:43:a2:58:30:4e:5b:4b:81:
dc:b2:c7:80:db:2a:6f:ab:ef:be:d8:57:17:65:ed:
08:a1:0c:ab:5a:cc:ff:27:dd:5f:61:c7:fb:a7:c1:
87:4f:98:00:01:7f:4d:cb:a4:9e:e0:aa:99:06:63:
ff:90:02:67:e7:f3:65:e5:2e:93:c5:1d:27:8a:a8:
97:58:ae:78:f9:98:ac:e5:89:29:09:52:90:28:a5:
33:8a:19:79:43:33:e3:73:4f:ed:76:a1:35:e4:42:
df:49:d9:60:64:4e:25:12:9e:4b:b1:67:f5:53:4a:
a9:08:61:fb:7e:35:06:2f:8b:75:50:b6:ef:08:62:
4d:59:f1:32:7d:9e:a7:37:db:f5:10:3e:68:b6:d9:
f1:fa:80:be:ba:37:71:9a:64:a1:b3:2a:13:bf:8a:
93:cd:92:f2:cf:e3:57:d6:dc:af:d3:e8:a3:53:26:
55:e1:60:d0:97:b2:a0:90:17:63:b2:10:0f:e3:56:
92:23:6e:49:9a:24:fa:fe:fa:9c:ff:f8:ec:1d:5a:
62:ec:91:6d:8c:c3:63:4c:c2:50:61:02:af:88:38:
8f:c0:2c:1d:ff:03:d9:6a:73:07:36:cd:1e:38:6d:
8f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B1:EC:54:89:A7:24:5A:54:0D:08:25:3D:F8:55:29:5E:A2:17:5B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37604
sbgp-ipAddrBlock: critical
IPv4:
41.191.64.0/22
102.207.236.0/22
197.231.192.0/22
IPv6:
2c0f:1840::/32
Signature Algorithm: sha256WithRSAEncryption
58:23:e4:06:4d:18:05:7e:27:44:0c:26:4c:91:0a:61:4c:ed:
ee:38:04:7e:d3:94:e4:47:30:bf:df:7d:8b:9d:ba:15:a0:93:
8f:c8:f9:85:df:a1:39:a0:92:b9:77:47:23:ba:b6:b6:81:3a:
22:39:8d:33:81:97:e0:90:2a:1c:d0:68:26:4f:8a:20:d0:95:
35:a4:32:ca:40:fc:42:3c:b1:01:c7:f4:ea:34:81:3d:62:57:
2a:db:0a:31:8a:10:ac:7b:14:41:25:be:bc:76:63:c7:39:de:
47:50:09:75:9f:63:06:dc:67:be:9f:81:23:36:d9:bf:9a:18:
d5:19:6c:b7:40:41:a8:24:3d:24:2f:c5:6f:27:00:2e:a7:67:
cf:55:f1:72:9a:bf:8a:90:bf:b9:f5:bb:d2:1b:8b:00:e2:aa:
a2:32:7d:9e:76:c3:17:42:9d:6f:df:6b:58:88:0f:da:47:0f:
26:a7:d2:b8:21:27:99:df:a7:be:83:b1:14:be:ba:b6:fd:d3:
1a:fc:4a:1f:aa:3b:db:b7:96:5c:98:fb:0a:bb:d8:6a:40:b9:
7e:49:40:cb:9f:04:13:9e:fc:69:ab:72:38:42:10:b7:92:c1:
cd:ce:0b:6f:9d:ff:b0:33:4a:32:2d:0d:59:dc:a6:cf:6a:94:
a3:3b:3e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:29:07 2026 by rpki-client