Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
File:                     e-SeL48taNn-5zmG1EeTdhak7Yg.cer (raw, json)
Hash identifier:          k/zHTXYztWhFPRQx5NjZvpZ2I8pGpb+CTxGsEMgkl2k=
Subject key identifier:   7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       418D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 20 Jul 2026 13:50:44 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328459
                          IP: 41.76.240.0/21
                          IP: 41.216.208.0/21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 20:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16781 (0x418d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jul 20 13:50:44 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36D987FAF, serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:71:84:1d:4d:36:8d:bc:ea:19:fb:a9:b7:
                    be:2f:5e:6f:69:7e:44:da:42:4d:a7:24:a4:3f:1a:
                    df:f0:fb:8c:de:7b:4c:86:96:2e:46:fc:fd:ac:aa:
                    e0:a3:75:e2:34:68:88:3f:96:dd:ed:fb:1a:b9:a7:
                    8b:46:dc:c2:21:da:fb:d0:24:97:12:11:d1:eb:c4:
                    88:a5:99:2a:46:1c:61:33:3e:e7:3e:53:41:55:e9:
                    89:08:d5:65:d7:54:7e:54:d8:b6:de:88:09:49:7f:
                    2d:29:1d:4f:bf:d1:e8:17:02:8a:4a:3f:56:51:66:
                    11:02:57:fe:6c:33:7b:9c:7c:7a:28:31:89:f4:24:
                    3a:ee:82:9e:0f:c1:e6:1f:3a:d4:ad:2f:82:3f:38:
                    fb:2b:16:1e:a5:6b:a4:d4:2a:32:1b:b4:fb:ae:bf:
                    0d:92:71:e0:cf:9f:ba:82:41:91:18:12:1f:e3:23:
                    36:27:ca:a5:6f:01:6e:de:dd:83:1c:59:0c:71:92:
                    7f:d5:5a:fa:23:00:ed:25:8d:b5:7f:4c:04:33:ee:
                    e7:28:1e:c6:9d:61:48:30:1d:09:c9:66:41:d2:3c:
                    3b:f0:df:3b:cc:d0:55:15:95:10:50:51:72:8c:22:
                    13:54:e7:24:bb:ae:8c:89:5d:c4:46:e9:14:36:e7:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328459

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.240.0/21
                  41.216.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:4a:95:c1:7a:d5:76:d6:94:b4:68:9f:ad:3a:80:bb:1f:98:
         2a:df:14:18:e7:7c:18:05:77:55:06:5e:4f:23:af:6c:17:4a:
         a9:36:50:52:0b:00:c4:2b:20:b8:7c:8f:75:1a:ec:56:00:2f:
         95:d6:63:45:c5:a8:d7:e2:91:96:c1:d6:3c:53:52:3e:39:f1:
         a7:59:09:90:aa:43:98:1a:b6:74:37:a3:f3:5a:b5:b5:5f:83:
         3c:e3:e8:f7:99:ac:3c:28:b7:ed:0b:ff:46:6a:ef:b8:3e:58:
         2d:f5:b7:47:5b:1d:e1:0e:7e:85:cf:5f:f6:84:83:1b:e5:15:
         1d:22:8b:0a:73:ff:21:17:bb:72:c2:e0:11:7b:dd:88:b8:18:
         f3:5f:21:1b:7d:3c:62:be:82:e7:a9:ea:dd:4e:d4:79:cf:b8:
         aa:bd:77:0c:73:be:1c:70:28:a9:6e:34:27:75:30:33:06:40:
         5f:5c:7a:e7:3b:72:5b:1e:25:e8:e9:f0:24:da:c7:c8:f0:fa:
         ec:ef:1c:aa:a0:1f:29:84:c3:8d:2d:3c:33:a0:d9:5e:34:26:
         a1:7e:64:3b:07:38:cc:2b:c1:1d:07:8e:c1:84:6e:5b:19:50:
         1e:b0:ef:12:4e:21:82:23:76:71:9a:c9:b6:15:16:77:7d:44:
         9b:e7:b2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:12 2026 by rpki-client