Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
File: XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer (raw, json)
Hash identifier: 5WYrTQfZFUNjNq6FAA1KtHqeeSO0o/NWCsRl5jNBqB4=
Subject key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 419B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 22 Jul 2026 00:03:17 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328633
IP: 102.201.228.0/22
IP: 102.217.184.0/22
IP: 102.223.104.0/22
IP: 2c0f:e848::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16795 (0x419b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jul 22 00:03:17 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:6b:22:64:0a:8a:5c:e8:e1:69:02:e6:1e:
55:78:c7:55:1a:0a:78:98:86:ef:71:53:e7:83:6b:
df:ad:b1:26:9f:95:71:7c:c6:da:fa:41:9e:c9:d9:
f5:5d:55:e3:e5:4e:ca:81:51:68:96:dc:b2:9b:ea:
10:1b:da:ee:65:5b:f0:c8:29:a3:7e:42:76:f5:74:
f7:06:b1:5f:83:b0:02:9b:33:44:a5:46:ef:ad:03:
1d:29:a1:14:35:47:09:d3:09:3a:2c:e0:96:19:b0:
88:f7:45:d7:63:98:24:e1:13:f6:7b:2f:3b:23:88:
20:76:19:85:62:c7:a1:f9:92:8a:44:da:a1:f8:07:
05:9f:2c:9e:51:54:33:21:70:42:c5:b9:1e:1d:71:
29:f4:f2:81:0b:4c:bc:e2:26:9a:0c:b8:0d:46:45:
4a:43:a2:d3:4c:b8:57:f3:a6:0a:50:67:42:a4:82:
38:b5:03:bc:7d:df:27:34:18:08:78:a1:23:6f:b0:
b4:4e:93:53:fd:07:b5:79:a9:c7:25:99:1b:d0:2b:
85:68:0c:b3:a3:81:da:f7:db:c8:9c:dd:ee:05:25:
75:af:60:eb:7b:ed:90:78:74:ea:fc:9b:7e:fb:5a:
09:9f:72:aa:fd:7b:3c:15:b9:8c:c3:ef:b9:4a:39:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328633
sbgp-ipAddrBlock: critical
IPv4:
102.201.228.0/22
102.217.184.0/22
102.223.104.0/22
IPv6:
2c0f:e848::/32
Signature Algorithm: sha256WithRSAEncryption
41:7b:1f:21:c1:83:5d:0b:3d:bf:d8:09:18:af:44:8d:82:df:
a5:8d:53:cf:03:71:47:38:5e:1c:8b:76:fd:25:2c:bb:81:16:
61:8c:7b:61:fa:18:a1:c1:e2:0f:59:0c:4d:a0:49:52:ab:c1:
24:5e:51:fc:35:21:d6:05:31:80:03:73:50:96:53:6b:97:6b:
62:4b:6b:31:93:dd:4c:8b:95:4d:81:71:5e:47:45:95:74:78:
7e:9a:9e:84:46:3b:1e:93:4b:59:eb:bc:aa:a1:9a:e4:da:a2:
b3:99:14:50:dc:4b:82:91:b9:37:50:ab:f7:72:27:37:73:3a:
6d:07:43:13:f0:b1:f9:f6:9c:c6:7d:b1:c1:65:fd:99:44:0d:
ac:fe:3f:72:ad:1a:ef:fc:d6:e8:7a:bd:07:aa:aa:c1:2d:e1:
15:a6:d2:b3:c5:8b:b6:17:28:f4:26:af:0e:59:b4:8e:a6:2e:
75:73:9b:61:17:ac:3f:ee:fb:70:b6:16:b0:ec:a1:03:45:e9:
09:44:27:ab:34:7d:88:36:78:82:40:34:44:25:e0:f7:b3:91:
ce:09:2d:21:d5:78:0f:50:1b:9e:ce:41:da:21:36:1c:aa:c9:
e1:80:9c:b5:7f:59:33:d1:13:31:55:43:f9:81:81:5c:f5:b9:
c0:86:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:15:16 2026 by rpki-client