Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer
File:                     aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer (raw, json)
Hash identifier:          LKHev4b/OBVKZLEQWgg2iLRvn2jSfm7MGqjaFFucoOk=
Subject key identifier:   68:53:C4:E2:1B:5D:33:70:8B:0F:5E:AE:18:B7:89:FC:67:7C:81:08
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       416D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 06 Jul 2026 08:45:20 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329311
                          IP: 102.211.112.0/23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16749 (0x416d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jul  6 08:45:20 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36BB70AAF, serialNumber=6853C4E21B5D33708B0F5EAE18B789FC677C8108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:78:33:63:dc:eb:67:f6:9e:a4:7c:f5:1a:31:
                    5e:71:1d:c2:05:4b:6b:15:fe:fc:f3:f6:8f:30:e1:
                    62:05:89:ae:90:cb:b6:90:c3:44:b5:74:b1:ad:41:
                    0f:c2:4f:4a:66:cc:5b:10:cf:58:dd:1e:6b:7f:89:
                    d7:69:b1:07:e3:5e:d0:65:58:4d:02:55:9f:d1:e2:
                    4a:63:b7:6f:aa:11:16:2a:ea:e4:8b:3e:ee:b3:fc:
                    b1:88:12:76:ca:74:1a:92:d8:a7:ef:15:8c:5f:07:
                    ff:97:97:a7:69:9f:f5:74:ca:48:8d:8a:e9:cd:8f:
                    94:20:1c:c5:57:39:31:b6:c1:4d:5d:07:27:8b:f7:
                    8e:a2:0f:6e:41:4c:7d:ef:fe:42:3c:be:28:d2:d1:
                    75:84:11:47:0a:fa:f4:25:85:44:69:6b:6d:dc:61:
                    71:05:ff:3c:9f:d3:19:b5:61:a1:8d:08:c3:ef:35:
                    5e:b3:ee:c4:ed:68:1f:e3:fc:a5:ae:08:02:0d:6f:
                    18:02:94:1f:ac:07:96:3d:1d:a1:5a:61:59:b4:f5:
                    3d:bc:ae:67:75:0a:e0:c3:26:9f:16:4b:78:5f:46:
                    27:ca:5e:d8:c7:01:92:be:54:2b:67:43:70:ed:41:
                    19:c0:8f:d2:9b:bc:ca:6a:0a:ff:87:61:c5:6a:1f:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:53:C4:E2:1B:5D:33:70:8B:0F:5E:AE:18:B7:89:FC:67:7C:81:08
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329311

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.211.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:6c:61:41:ea:05:a6:99:03:91:3e:e5:35:80:53:c3:99:67:
         17:ed:7e:8b:29:b3:e4:92:a9:7a:5a:a7:ca:f9:5f:89:99:d1:
         1c:a9:15:e3:4d:60:77:cb:77:e3:02:ee:08:9f:ba:e3:e8:86:
         2b:70:3c:83:b8:ab:6c:ba:f3:6d:0d:61:30:33:7c:c6:d8:03:
         b8:6d:95:92:d4:5c:a5:d7:40:cf:81:ed:b5:fb:7d:d2:ce:3a:
         84:a7:e6:05:4b:42:f7:44:5b:e1:b8:63:0c:d0:8d:aa:de:8d:
         1f:d9:58:a3:ab:3a:71:c2:16:20:e0:e4:3e:55:0b:c5:98:63:
         0f:90:8f:b4:5f:3a:45:40:52:de:93:b2:ef:59:c6:ea:25:a8:
         a5:a1:d5:f6:73:24:9b:f1:4c:de:08:79:d3:61:b0:1d:f3:64:
         a0:41:e2:7a:79:50:5b:60:0f:4a:c5:e0:c3:57:c3:c7:e2:1d:
         c2:f7:81:2d:b6:1e:2c:f2:03:94:fb:46:a2:f8:be:48:fb:f4:
         25:46:0c:15:0a:94:4b:f7:85:2b:f5:1f:21:d6:30:37:34:b2:
         11:c8:9e:79:d3:90:75:0e:63:70:82:08:09:90:10:07:83:9b:
         fb:18:8f:4a:34:b7:b0:05:6d:bf:17:ee:78:24:58:78:61:5f:
         fd:14:02:f2
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICQW0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjA3MDYwODQ1MjBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkJCNzBBQUYxMTAvBgNVBAUTKDY4NTNDNEUyMUI1RDMzNzA4QjBGNUVB
RTE4Qjc4OUZDNjc3QzgxMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDeeDNj3Otn9p6kfPUaMV5xHcIFS2sV/vzz9o8w4WIFia6Qy7aQw0S1dLGtQQ/C
T0pmzFsQz1jdHmt/iddpsQfjXtBlWE0CVZ/R4kpjt2+qERYq6uSLPu6z/LGIEnbK
dBqS2KfvFYxfB/+Xl6dpn/V0ykiNiunNj5QgHMVXOTG2wU1dByeL946iD25BTH3v
/kI8vijS0XWEEUcK+vQlhURpa23cYXEF/zyf0xm1YaGNCMPvNV6z7sTtaB/j/KWu
CAINbxgClB+sB5Y9HaFaYVm09T28rmd1CuDDJp8WS3hfRifKXtjHAZK+VCtnQ3Dt
QRnAj9KbvMpqCv+HYcVqH7/tAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUaFPE4htd
M3CLD16uGLeJ/Gd8gQgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCQjcwQS9GRkZGRUJBMDc5MTYx
MUYxQjlGRjQ1RjJDRTFEMzhCMC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkI3MEEvRkZGRkVCQTA3OTE2MTFGMUI5RkY0NUYyQ0UxRDM4QjAvYUZQRTRo
dGRNM0NMRDE2dUdMZUpfR2Q4Z1FnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBl8wHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFm03AwDQYJKoZIhvcN
AQELBQADggEBAAVsYUHqBaaZA5E+5TWAU8OZZxftfosps+SSqXpap8r5X4mZ0Ryp
FeNNYHfLd+MC7gifuuPohitwPIO4q2y6820NYTAzfMbYA7htlZLUXKXXQM+B7bX7
fdLOOoSn5gVLQvdEW+G4YwzQjarejR/ZWKOrOnHCFiDg5D5VC8WYYw+Qj7RfOkVA
Ut6Tsu9ZxuolqKWh1fZzJJvxTN4IedNhsB3zZKBB4np5UFtgD0rF4MNXw8fiHcL3
gS22HizyA5T7RqL4vkj79CVGDBUKlEv3hSv1HyHWMDc0shHInnnTkHUOY3CCCAmQ
EAeDm/sYj0o0t7AFbb8X7ngkWHhhX/0UAvI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:41 2026 by rpki-client