This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/apnic/7vdTJDjdpqMkdkrK-E72JOF34MU.cer
File:                     7vdTJDjdpqMkdkrK-E72JOF34MU.cer (raw, json)
Hash identifier:          WXieplFZITfSrjqjGpIkNzx7vsKf/31zVrHjFuUH5j4=
Subject key identifier:   EE:F7:53:24:38:DD:A6:A3:24:76:4A:CA:F8:4E:F6:24:E1:77:E0:C5
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer:       /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial:       0F7F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:15:17 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 163.202.0.0/16
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3967 (0xf7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
        Validity
            Not Before: Jan  1 00:15:17 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3646008AP, serialNumber=EEF7532438DDA6A324764ACAF84EF624E177E0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bf:df:18:49:4f:4b:ca:33:bd:e2:d6:49:58:
                    5f:6c:22:e9:b3:95:49:a3:1e:a9:f6:dc:be:1a:de:
                    47:62:7a:6e:5c:6a:75:21:96:30:fc:1c:6f:82:06:
                    06:d3:2d:0c:2e:80:39:95:38:22:e0:d6:a1:eb:a4:
                    36:ec:2d:56:57:79:49:84:c9:9d:f7:cc:88:0c:22:
                    e6:0b:55:2d:e2:f5:ab:69:ad:cc:63:41:07:76:12:
                    68:ce:61:ca:88:a6:94:0d:33:40:56:70:5a:b8:6c:
                    55:32:d8:84:96:19:e7:a8:ec:fe:e0:eb:87:ba:7a:
                    5c:36:ec:01:fe:b2:e6:e0:2c:5f:f0:88:68:88:ff:
                    ef:76:c1:66:bb:2a:ef:b4:2e:7c:78:26:27:fd:22:
                    7b:5b:68:b7:3e:bf:d6:74:d6:14:b1:ce:b8:c5:0e:
                    35:a5:9f:94:9f:bd:90:d6:06:04:58:45:ea:87:fe:
                    62:e7:b2:84:07:b8:69:0e:8e:5c:a9:bf:2e:92:21:
                    49:af:dd:9e:45:1e:d7:0c:c5:6a:0b:ce:b1:49:46:
                    67:c8:d3:7e:39:30:10:ae:48:1b:c4:54:1a:17:9f:
                    40:11:be:91:3d:34:c0:d1:94:2f:ac:9f:70:4f:df:
                    4a:5a:18:58:69:f6:56:c3:c8:90:a5:8c:65:75:42:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F7:53:24:38:DD:A6:A3:24:76:4A:CA:F8:4E:F6:24:E1:77:E0:C5
            X509v3 Authority Key Identifier:
                keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.202.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         05:3a:82:66:48:ba:a8:b4:3a:8e:f4:81:0e:ed:2c:0a:da:f4:
         ce:21:64:11:cc:07:bd:05:08:0c:ba:60:59:4e:66:7b:16:84:
         4c:44:45:aa:e6:b0:25:a9:21:ef:83:8d:83:7e:ee:4c:83:a5:
         ba:92:84:ab:65:32:34:c0:0f:9b:8e:58:32:cb:19:d8:98:4d:
         18:79:4f:9d:2a:22:4a:a8:19:b9:cd:7d:50:d5:f5:18:02:fa:
         e8:67:5f:c1:da:5c:a7:d0:97:06:ef:5d:55:3d:4d:ca:7c:73:
         dd:91:48:5b:26:69:f4:61:22:35:52:b7:0d:e9:7c:9a:f1:1e:
         24:b6:cb:4e:9f:80:c5:22:c3:4b:18:0d:04:71:6d:44:bf:2c:
         de:5f:84:18:d6:d8:cb:3a:50:87:c2:cc:50:54:43:0e:9c:f6:
         3c:eb:50:54:78:9d:86:a0:34:72:e1:60:73:8e:59:08:82:e8:
         80:45:7a:53:41:40:56:4e:2d:01:85:da:2d:17:9d:1c:c4:2f:
         d1:a9:c0:e6:d0:19:46:45:b9:a3:42:98:78:c6:97:d6:53:94:
         ad:53:45:24:22:9e:3c:cf:f3:3f:89:dc:32:62:ba:1e:32:9a:
         b4:ed:cd:31:86:5b:48:dc:dd:46:a9:69:37:37:64:42:0e:ad:
         dd:35:52:79
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgICD38wDQYJKoZIhvcNAQELBQAwTDEXMBUGA1UEAxMOQVBO
SUNUT0FGUklOSUMxMTAvBgNVBAUTKDZGMUExMDNFMTQyN0ZGMDM0ODNBQkZEOUUz
NERBQ0JFMTUyNEZGOEIwHhcNMjYwMTAxMDAxNTE3WhcNMjcwMzMxMDAwMDAwWjBI
MRMwEQYDVQQDEwpGMzY0NjAwOEFQMTEwLwYDVQQFEyhFRUY3NTMyNDM4RERBNkEz
MjQ3NjRBQ0FGODRFRjYyNEUxNzdFMEM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1b/fGElPS8ozveLWSVhfbCLps5VJox6p9ty+Gt5HYnpuXGp1IZYw
/BxvggYG0y0MLoA5lTgi4Nah66Q27C1WV3lJhMmd98yIDCLmC1Ut4vWraa3MY0EH
dhJozmHKiKaUDTNAVnBauGxVMtiElhnnqOz+4OuHunpcNuwB/rLm4Cxf8IhoiP/v
dsFmuyrvtC58eCYn/SJ7W2i3Pr/WdNYUsc64xQ41pZ+Un72Q1gYEWEXqh/5i57KE
B7hpDo5cqb8ukiFJr92eRR7XDMVqC86xSUZnyNN+OTAQrkgbxFQaF59AEb6RPTTA
0ZQvrJ9wT99KWhhYafZWw8iQpYxldUK6OwIDAQABo4IC8jCCAu4wHQYDVR0OBBYE
FO73UyQ43aajJHZKyvhO9iThd+DFMB8GA1UdIwQYMBaAFG8aED4UJ/8DSDq/2eNN
rL4VJP+LMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MFoGA1UdHwRT
MFEwT6BNoEuGSXJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fw
bmljL2J4b1FQaFFuX3dOSU9yX1o0MDJzdmhVa180cy5jcmwwdQYIKwYBBQUHAQEE
aTBnMGUGCCsGAQUFBzAChllyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3Np
dG9yeS8wNEU4QjBEODBGNEQxMUUwQjY1N0Q4OTMxMzY3QUU3RC9hcG5pYy10by1h
ZnJpbmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUH
AgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUG
CCsGAQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJp
bmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjQ2MDA4LzY3
NDQzNUJBMDg4RDExRUJBRkE3QTY1QkY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0
cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUF
BzAKhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY0NjAwOC82NzQ0MzVCQTA4OEQxMUVCQUZBN0E2NUJGOEFF
QTIyOC83dmRUSkRqZHBxTWtka3JLLUU3MkpPRjM0TVUubWZ0MB4GCCsGAQUFBwEH
AQH/BA8wDTALBAIAATAFAwMAo8owDQYJKoZIhvcNAQELBQADggEBAAU6gmZIuqi0
Oo70gQ7tLAra9M4hZBHMB70FCAy6YFlOZnsWhExERarmsCWpIe+DjYN+7kyDpbqS
hKtlMjTAD5uOWDLLGdiYTRh5T50qIkqoGbnNfVDV9RgC+uhnX8HaXKfQlwbvXVU9
Tcp8c92RSFsmafRhIjVStw3pfJrxHiS2y06fgMUiw0sYDQRxbUS/LN5fhBjW2Ms6
UIfCzFBUQw6c9jzrUFR4nYagNHLhYHOOWQiC6IBFelNBQFZOLQGF2i0XnRzEL9Gp
wObQGUZFuaNCmHjGl9ZTlK1TRSQinjzP8z+J3DJiuh4ymrTtzTGGW0jc3UapaTc3
ZEIOrd01Unk=
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:17:46 2026 by rpki-client