Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/mib9ZNsT7N3Gbw6jIzsvLoT2E_4.cer
File:                     mib9ZNsT7N3Gbw6jIzsvLoT2E_4.cer (raw, json)
Hash identifier:          I3OSJ9OiCYvFWpSDbR4zp09cpV4E7QeFM+kFN5hvLWE=
Subject key identifier:   9A:26:FD:64:DB:13:EC:DD:C6:6F:0E:A3:23:3B:2F:2E:84:F6:13:FE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       433E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
CRL Distribution Point:   rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F1B67/8BD332BEDE6A11F1B4E83E07CF1D38B0/mib9ZNsT7N3Gbw6jIzsvLoT2E_4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F1B67/8BD332BEDE6A11F1B4E83E07CF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 12 Nov 2026 07:27:49 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 36999
                          IP: 41.190.96.0/19
                          IP: 41.223.80.0/22
                          IP: 197.233.0.0/16
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17214 (0x433e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Nov 12 07:27:49 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36F1B67AF, serialNumber=9A26FD64DB13ECDDC66F0EA3233B2F2E84F613FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:69:97:27:65:01:80:13:2e:42:c8:e5:77:
                    a2:77:2f:d3:8f:85:3d:5d:f7:05:3b:75:1b:69:39:
                    21:eb:0e:74:bb:14:a7:fc:61:f7:ee:46:73:a6:83:
                    87:66:46:b1:e5:d0:f1:fe:7d:62:7a:bd:9e:a7:c0:
                    ff:93:51:2d:24:b4:f4:d6:49:3b:dd:8e:75:ea:50:
                    c7:3e:83:d7:b3:b0:28:c2:0a:c1:18:54:2d:c5:0b:
                    ba:d8:ae:60:f7:f1:22:59:dc:0c:53:df:32:04:97:
                    22:ce:26:d3:71:3f:f7:f0:99:13:b4:b6:dd:19:f1:
                    02:cf:64:8d:6b:71:0a:0d:1b:4c:df:f0:60:15:55:
                    86:38:4b:16:56:bc:89:93:04:bf:58:2d:b1:78:12:
                    fb:7f:ab:ca:6d:5a:54:db:a7:dd:76:0f:4e:18:11:
                    40:ef:17:89:e2:41:c3:6d:28:9d:8e:a0:bf:f6:5d:
                    4e:a1:79:a0:0c:3d:39:d4:4e:02:11:d7:b5:a8:bf:
                    e9:e7:31:d7:b4:cd:4e:30:90:26:33:40:4b:e6:5b:
                    63:4e:9e:6f:83:d1:f9:d6:b9:46:5d:67:a5:65:3a:
                    69:6d:4f:df:a8:97:4d:35:5a:10:b9:04:d0:13:ee:
                    83:78:3c:d4:b4:4a:70:65:86:ac:65:07:0c:3a:1a:
                    c1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:26:FD:64:DB:13:EC:DD:C6:6F:0E:A3:23:3B:2F:2E:84:F6:13:FE
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1B67/8BD332BEDE6A11F1B4E83E07CF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1B67/8BD332BEDE6A11F1B4E83E07CF1D38B0/mib9ZNsT7N3Gbw6jIzsvLoT2E_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36999

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.190.96.0/19
                  41.223.80.0/22
                  197.233.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c3:e7:a1:b0:2b:4e:83:0a:fc:8a:df:fa:fd:fa:ef:55:95:58:
         ec:c7:10:1a:b8:13:c1:50:69:fd:94:c0:90:1c:f7:4b:8d:6e:
         93:51:06:66:f6:9a:76:c5:b9:a8:82:c2:93:97:41:0f:1b:2d:
         33:50:15:91:33:fc:af:bd:f6:f3:7c:2b:12:e5:17:88:31:5d:
         ec:5c:03:94:ac:4d:ab:74:ea:37:99:b1:4c:85:f2:87:af:e9:
         85:dd:29:f4:a0:73:84:8d:3a:28:1a:b0:07:d4:d2:5b:58:bb:
         d2:c7:0c:81:9f:21:5e:5e:67:4c:68:9a:0b:1a:98:4f:ca:fa:
         ac:cc:26:35:81:7f:05:27:84:f8:6f:21:ee:5a:df:82:2a:1a:
         cb:87:e2:b8:a1:7f:09:ad:e8:f5:83:dc:7e:c5:a8:eb:22:b3:
         36:a4:5a:9d:72:f1:87:72:63:bd:c9:7f:7b:3c:e5:12:71:f1:
         3e:0d:d5:55:df:ac:4f:f6:d6:5b:7c:77:e2:c0:c5:da:6e:d4:
         83:8e:fb:e7:77:99:11:b4:dc:d4:89:ec:39:49:d1:a6:69:09:
         60:37:a1:36:08:17:a6:96:ab:96:db:d0:62:21:33:5a:33:f1:
         90:a5:08:75:59:10:dd:55:d1:33:04:99:f6:7d:b7:72:23:06:
         6f:03:a5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:34:44 2026 by rpki-client