Certificate
$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.cer
File: HPG5YXCSQ-GwHqsLE0H3fhS1kB8.cer (raw, json)
Hash identifier: khxHJLz0ayk9X/MXN3VfeBK2ISCEDy4NgVcUWbRLrPg=
Subject key identifier: 1C:F1:B9:61:70:92:43:E1:B0:1E:AB:0B:13:41:F7:7E:14:B5:90:1F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 4338
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
CRL Distribution Point: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 10 Nov 2026 11:47:23 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328841
IP: 102.221.48.0/23
IP: 2c0f:e9f8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Nov 2026 00:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17208 (0x4338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Nov 10 11:47:23 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36203F3AF, serialNumber=1CF1B961709243E1B01EAB0B1341F77E14B5901F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:2b:3b:7f:81:29:ab:5d:f7:76:68:b0:e4:
cd:81:09:c8:10:42:46:86:4c:69:7c:c8:74:3f:39:
bb:3b:ad:14:a1:db:0e:96:fe:78:ec:a0:c8:e0:d0:
fd:6e:bd:03:7a:d1:a1:19:3a:60:30:1b:7a:3e:89:
2b:f8:42:f0:8f:74:e7:18:10:06:89:32:03:a9:41:
18:c8:f5:d6:17:cc:80:2f:0a:82:7b:1e:ae:d3:93:
3c:9e:19:e1:86:a2:df:8a:5a:24:9a:21:ea:3b:2b:
24:41:f2:0b:ba:44:ee:8a:0c:4a:13:6b:e8:22:0b:
65:f7:d9:91:81:ec:06:29:6f:e9:52:6b:cb:90:a6:
15:94:f4:ad:45:c0:5a:f2:83:d1:27:cf:6b:9a:65:
25:a8:e3:85:08:56:a0:ac:4e:55:28:f6:85:dd:8c:
58:48:69:68:1d:7a:e6:fa:29:95:52:8b:c0:34:f1:
ea:b8:ce:dd:24:d3:d9:c1:c0:63:2e:7d:3e:75:51:
01:55:17:2e:23:fc:4d:eb:bb:2f:82:62:7e:58:26:
5c:50:6f:03:6d:2c:ad:05:3f:3b:26:b2:ab:e5:ea:
de:fa:7d:aa:bd:58:be:1a:c9:fb:33:9a:00:e4:c4:
cf:48:7c:88:71:04:4e:4d:d2:2f:a9:af:18:81:bf:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F1:B9:61:70:92:43:E1:B0:1E:AB:0B:13:41:F7:7E:14:B5:90:1F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328841
sbgp-ipAddrBlock: critical
IPv4:
102.221.48.0/23
IPv6:
2c0f:e9f8::/32
Signature Algorithm: sha256WithRSAEncryption
69:6f:47:fd:58:cd:26:c7:fc:5a:6a:23:16:0c:46:dd:42:32:
c6:2a:3d:81:f2:6a:0a:e4:c9:1d:3d:5c:79:d6:73:50:a5:c0:
2f:2f:e3:19:61:3f:a8:59:45:b8:eb:f1:e1:ae:a3:bf:b1:e0:
9e:5a:d5:ff:c6:62:29:00:65:b1:4d:2b:c5:67:44:65:ab:e8:
fd:88:3b:90:20:ee:ca:10:19:12:fe:39:a6:c5:7b:6d:6b:8b:
db:34:b4:6d:2a:a4:61:c5:ad:6b:11:b9:09:fd:67:8c:da:ff:
23:2a:1a:4a:4d:11:21:8a:5c:e3:fe:9e:8e:c4:d9:2d:c0:12:
62:f8:fd:83:d2:d3:76:35:9d:25:4a:06:27:90:81:03:64:b1:
3a:b3:23:c1:71:43:d6:9b:24:9b:14:72:8b:1e:aa:87:aa:f0:
e9:2c:23:3b:f0:dc:0a:30:0d:73:e8:de:ff:ad:92:59:7a:80:
1b:c4:9b:44:d3:db:d9:5c:53:03:5f:e0:b3:48:60:d3:30:15:
03:08:be:94:53:4f:78:b5:af:cc:d8:b6:3a:4e:9e:79:08:fa:
e6:16:55:30:ef:3b:21:42:19:d0:27:81:ab:e1:c6:50:d9:52:
bc:18:fb:2e:06:4e:14:f6:2d:d7:07:b5:0a:5d:01:4c:47:84:
53:12:92:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:57:03 2026 by rpki-client