Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer
File: B7h9lPBEiTVmQTOd5pFkR32P-kM.cer (raw, json)
Hash identifier: 17BHNFpGyPvC4am9jycLO+FLQ6J0hpajxrg+mDxZVDU=
Subject key identifier: 07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 4148
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 23 Jun 2026 11:43:04 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328427
IP: 102.68.136.0/22
IP: 102.202.16.0/22
IP: 2c0f:16c0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 20:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16712 (0x4148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jun 23 11:43:04 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36FE1EAAF, serialNumber=07B87D94F04489356641339DE69164477D8FFA43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:4c:20:5b:a2:7e:d8:5d:87:5a:c7:16:20:
39:75:e2:4f:ce:4a:be:24:2f:88:c6:52:28:eb:ef:
11:99:1b:6b:ba:ec:79:6b:62:47:bd:5c:ba:ea:b8:
9e:8d:c3:6c:53:69:f9:f8:b5:2d:53:f6:00:d8:5d:
36:9f:1c:35:e4:cd:41:04:91:32:f6:9c:aa:c6:6b:
eb:28:04:00:d2:86:4b:74:e9:f5:04:2a:75:ac:14:
b5:ee:bf:f7:6a:96:87:f5:e2:12:5d:d6:22:0e:2b:
1c:61:51:8e:b8:76:3b:5c:6f:35:c9:93:6a:18:e6:
f8:0d:ef:cb:32:12:47:bf:85:2c:85:5b:a4:fa:89:
30:6e:60:db:7e:3b:18:b6:1e:65:9e:67:97:7b:b7:
f3:c8:ac:4c:e3:6c:de:44:14:d4:fc:9b:fa:a1:e3:
f7:68:12:02:2d:17:e1:de:af:fc:95:f6:0b:e7:bc:
b2:00:ca:3d:83:29:fd:68:26:44:8b:cb:f7:92:27:
86:f1:26:e5:8e:14:a4:b1:0d:e0:b3:22:d0:15:fd:
f9:2e:8a:7b:0f:66:75:f6:98:6c:23:5f:90:76:15:
79:36:2d:0b:5d:7d:1c:a5:cb:1c:0e:db:7d:8b:f8:
1c:19:9e:ef:b5:5b:1e:cf:25:02:26:cf:23:51:49:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328427
sbgp-ipAddrBlock: critical
IPv4:
102.68.136.0/22
102.202.16.0/22
IPv6:
2c0f:16c0::/32
Signature Algorithm: sha256WithRSAEncryption
21:cb:c6:2d:d4:b1:f5:f7:0d:4a:69:f5:6f:48:5c:b0:c2:ec:
61:10:07:4d:4a:9f:51:86:89:26:ee:ea:d9:52:17:94:c1:6d:
e9:bc:2d:ce:6b:e3:0a:25:81:ae:77:c5:52:f4:94:d2:94:e3:
b5:5a:9a:33:c5:b2:16:35:eb:b2:cf:f9:4e:f9:9a:3a:93:1e:
46:60:d3:e3:15:fa:28:ec:6d:d2:b1:ac:43:95:e6:a9:51:33:
7c:52:ee:23:4b:24:eb:ce:05:b8:db:bf:45:c7:43:6c:c2:2f:
ab:6d:a7:42:f4:c4:a9:b2:05:6d:45:79:11:63:bc:e3:50:40:
ed:cd:6e:95:35:b4:05:40:c2:fd:97:ae:40:a2:65:db:42:a4:
22:df:74:90:32:67:fd:94:44:d8:09:e7:f4:72:64:ea:b8:28:
c5:53:a0:d3:57:3d:98:e4:6d:07:73:30:77:84:6d:45:61:9f:
fd:64:72:b4:6d:4d:a4:d7:2a:36:15:0b:ae:a4:67:03:84:80:
91:d7:ce:80:06:ba:1c:bc:1f:51:a4:f1:9a:2f:6f:2b:a5:c3:
d5:2e:dc:64:0c:0f:c5:49:c7:57:81:03:ae:44:e6:ab:48:e0:
c9:e5:8b:70:13:19:5d:28:17:14:f6:70:86:1a:27:96:3e:b5:
75:ef:f3:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:09:15 2026 by rpki-client