This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
File: qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer (raw, json)
Hash identifier: a8vDX3VmDb3VREPJrmcAPz6LfrXWfi3pgVg+769r1u4=
Subject key identifier: AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3A07
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 01:55:29 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328366
IP: 41.79.212.0/22
IP: 102.204.216.0/22
IP: 102.207.16.0/22
IP: 102.207.84.0/22
IP: 102.209.140.0/22
IP: 102.211.180.0/22
IP: 102.218.52.0/22
IP: 154.68.176.0/20
IP: 154.118.244.0/22
IP: 2c0f:efe0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14855 (0x3a07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 01:55:29 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F367F26DAF, serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:0f:55:f5:e7:63:61:68:a4:18:23:9c:07:
f4:8a:e6:0b:95:ef:e8:af:7c:b6:9f:9b:d3:3b:d2:
16:77:fe:bf:52:c7:22:7f:79:3e:0b:0d:b9:f4:79:
d1:b5:13:c0:f7:32:fa:9a:87:3f:75:ad:ac:ea:c5:
b1:8f:a2:16:34:e7:3f:b7:15:6e:0f:09:e0:fa:88:
3c:94:60:15:77:66:83:01:aa:50:82:06:c5:11:b9:
50:0f:3a:18:de:2e:30:2e:7a:5c:28:4b:8b:58:3e:
9b:20:c2:15:1b:37:2a:ac:f1:06:2b:49:b2:82:86:
c7:11:9c:75:7d:eb:7f:92:38:16:b7:18:07:f0:30:
95:0e:bb:aa:7c:8e:b1:f7:e7:aa:61:f7:b9:4e:8f:
eb:d9:dd:3f:d1:ff:ef:e8:d0:a4:33:b9:14:36:29:
e0:9a:52:f5:f5:8c:ed:40:eb:2a:a4:d5:f6:25:f0:
d4:4f:c1:31:db:4e:1d:64:d2:4c:ca:70:dd:8d:bc:
4c:b2:46:bf:89:40:9d:80:fc:19:17:02:bb:70:f7:
3e:2a:6b:e3:9e:31:28:99:3c:c1:d3:b3:0a:f3:aa:
2f:ff:8e:80:87:5e:d0:d1:91:b3:0b:a8:df:f2:af:
50:1c:dc:59:24:46:d4:fd:38:1a:23:af:5d:d5:da:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328366
sbgp-ipAddrBlock: critical
IPv4:
41.79.212.0/22
102.204.216.0/22
102.207.16.0/22
102.207.84.0/22
102.209.140.0/22
102.211.180.0/22
102.218.52.0/22
154.68.176.0/20
154.118.244.0/22
IPv6:
2c0f:efe0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:52:27:0e:f5:10:2f:99:95:fb:39:b8:e1:ea:48:36:5a:a5:
60:95:ec:f9:ce:27:2e:cc:37:25:e2:11:68:ce:96:b4:97:89:
98:13:a5:78:01:6e:5a:20:2b:34:3d:41:2b:f8:9c:4a:f7:81:
25:a3:8f:bf:77:3a:6f:db:a7:e2:5f:fd:76:39:34:a8:24:b3:
26:9f:d3:6a:0c:28:a3:e9:f6:e5:9c:ca:42:6d:a4:f4:8a:05:
04:51:6e:e1:5f:99:dc:f9:b4:6d:f0:b3:d3:36:e4:80:a5:44:
13:d4:de:64:ff:08:07:96:5f:d3:49:37:da:d8:27:30:15:49:
df:92:e1:85:f6:b5:83:64:70:94:25:ef:7e:2c:a7:d6:c8:f1:
fe:7f:2a:bf:a5:f1:7f:d3:30:a5:a5:91:73:57:70:ec:f0:3f:
f3:cd:61:aa:43:f8:4b:6c:a8:a4:bb:a5:d2:16:a9:02:69:da:
63:75:a2:76:b7:69:fd:5c:a4:0b:24:2d:ec:d4:da:2f:b1:b5:
8f:f7:c5:28:0a:da:41:df:1f:0d:6d:56:aa:4a:bb:b4:21:79:
f8:1e:e5:16:75:cc:f8:fd:71:a0:57:9f:83:20:4b:e5:40:42:
2b:ee:61:f7:ef:15:51:c3:f1:e4:0e:66:d8:71:51:f6:c4:0c:
d2:28:e7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:49:40 2026 by rpki-client