This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
File: aMXkutXc1WSiVidTyay2Mr0ky1A.cer (raw, json)
Hash identifier: NvjI+D9TcJOiK63kECG8w37U3NzVwxNeGC0gUWYSPlU=
Subject key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3B2F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:37:27 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 36969
IP: 41.87.0.0/19
IP: 41.221.96.0/20
IP: 2c0e:7800::/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15151 (0x3b2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 02:37:27 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36DE46FAF, serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:70:76:d3:ed:65:bf:e4:28:17:71:f2:2c:
ef:21:dd:0e:3e:d7:3d:c5:1a:7e:5e:17:b5:4f:e0:
a6:c9:9f:38:59:d6:a1:b4:6d:72:e4:75:c2:6f:11:
db:3e:69:0c:19:88:ef:64:54:93:7e:4f:72:0a:d9:
da:51:5e:16:41:07:d4:98:cd:23:49:4d:c2:02:82:
1f:13:ec:c6:c3:0c:61:49:03:40:a8:d3:3f:a3:63:
bd:ed:a6:78:31:81:48:43:e9:a7:e7:92:1a:b8:9f:
34:fa:ff:7e:83:4c:30:cf:79:c7:c7:f3:d6:38:2f:
40:63:5f:a3:2f:b1:42:ed:cb:6c:f5:6f:fc:2f:d6:
18:49:e1:44:9b:5b:b0:4b:53:e1:82:4f:39:e5:3a:
22:b2:a1:35:9c:bb:c4:8c:2e:6f:db:8e:25:67:f7:
3f:ca:70:f3:36:d6:19:31:b1:92:80:2c:36:3e:02:
ff:90:63:c8:38:4d:f3:fe:67:ba:2c:fa:df:0c:d0:
0f:4e:dd:47:b8:17:aa:d9:ff:d2:d0:1a:b2:00:c4:
2b:84:21:54:85:0c:cf:be:34:48:16:60:c0:5b:79:
7f:40:8e:3b:09:b9:82:d8:c1:e5:db:21:db:25:8a:
9f:02:84:e0:2d:00:b2:85:fd:18:82:3d:74:7f:95:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36969
sbgp-ipAddrBlock: critical
IPv4:
41.87.0.0/19
41.221.96.0/20
IPv6:
2c0e:7800::/24
Signature Algorithm: sha256WithRSAEncryption
7f:5e:55:4b:aa:79:13:d2:1f:dd:05:95:44:9f:cd:e5:b3:8f:
be:5c:83:87:98:bb:53:82:18:1d:6e:22:ea:8b:66:e6:4f:6f:
ae:a6:71:f1:59:9f:44:b3:ce:dc:3b:e9:00:14:c1:73:6b:8f:
3b:78:34:72:0f:71:7f:51:98:62:09:0b:2e:f5:af:a6:02:f9:
7d:8a:88:c1:22:39:ca:2b:e2:67:1d:82:72:11:7d:c2:5e:71:
ad:36:5b:74:40:0c:bf:31:e1:05:56:07:40:6f:e0:34:3e:ca:
4c:97:b9:33:39:c8:7b:47:23:58:5d:60:ea:04:f1:b1:1c:90:
3f:ea:aa:f4:0c:0b:46:6c:0d:b2:a4:73:67:a7:10:fe:87:61:
ce:38:fa:97:81:7a:e9:fd:66:fd:76:94:5c:22:48:9c:6e:01:
3d:62:d4:b2:eb:ca:cf:ce:ad:13:fb:be:92:84:9f:4b:13:96:
c0:dd:70:09:ee:3d:d1:ae:e2:59:59:aa:11:1f:31:b5:1d:6a:
43:d8:50:9b:d3:1f:4d:b5:b1:d8:46:f9:6e:92:bb:73:18:1d:
98:cf:18:e9:0f:f9:25:c2:f0:76:d0:56:eb:d6:34:fe:18:fe:
a4:f5:45:93:e1:8f:e4:3a:a3:df:e3:4a:30:cd:e3:be:16:1c:
83:1a:67:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:29:28 2026 by rpki-client