Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/-krEl1Q-1tVVnk4hN4J8CVslLbM.cer
File:                     -krEl1Q-1tVVnk4hN4J8CVslLbM.cer (raw, json)
Hash identifier:          zoXiK7znWX040LxK0/NA71ht9DAXM9snL8j3uwalb/4=
Subject key identifier:   FA:4A:C4:97:54:3E:D6:D5:55:9E:4E:21:37:82:7C:09:5B:25:2D:B3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4310
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C88A1/7AE4145AD2D011F18F5E88B8CE1D38B0/-krEl1Q-1tVVnk4hN4J8CVslLbM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C88A1/7AE4145AD2D011F18F5E88B8CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 28 Oct 2026 13:07:16 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37190
                          IP: 41.191.68.0/22
                          IP: 102.203.40.0/22
                          IP: 102.206.120.0/22
                          IP: 102.207.0.0/22
                          IP: 102.208.128.0/22
                          IP: 102.212.188.0/22
                          IP: 102.215.252.0/22
                          IP: 154.0.24.0/21
                          IP: 2c0f:4c40::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17168 (0x4310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct 28 13:07:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36C88A1AF, serialNumber=FA4AC497543ED6D5559E4E2137827C095B252DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:61:b1:07:7f:4e:2d:37:e3:db:15:62:63:
                    fd:7a:53:aa:51:70:b5:06:bb:71:d7:a8:d3:6e:3e:
                    29:37:c9:c4:0d:0b:f4:49:b2:3c:3b:61:d5:60:e0:
                    0a:f6:75:d8:2e:5e:b7:19:1a:ce:aa:83:b9:ff:c2:
                    16:12:8a:1b:bd:c8:b2:98:0a:4a:8c:e4:f6:dc:ef:
                    4b:d4:81:4c:a2:77:f8:5d:5f:ac:d6:8c:61:0e:8a:
                    d3:c7:5f:11:05:d7:e3:25:b6:46:bf:7f:ec:a5:d4:
                    2c:23:f3:e5:17:b7:b3:6a:a0:95:25:aa:10:0d:f3:
                    a8:c5:c0:7b:75:db:de:26:cc:1b:63:f5:69:5c:4c:
                    21:fc:97:5d:09:b7:e6:0a:86:bf:ac:73:71:81:9a:
                    24:8e:a8:34:76:3b:dc:a0:62:bc:08:d5:71:8c:4d:
                    ae:dc:56:ab:09:45:20:9b:a1:66:29:11:78:28:fb:
                    db:0a:1b:39:ad:56:2a:f4:42:18:e0:ba:29:8c:0c:
                    36:9a:05:7b:02:c1:cb:8f:28:a4:90:ae:ac:1c:89:
                    43:0a:7b:ed:ac:6f:8c:ef:a2:25:7a:b5:64:2e:41:
                    e6:b9:06:ef:c8:20:7d:5d:81:e4:b5:73:f9:6b:d8:
                    ec:ad:8e:cb:93:a5:6f:26:ca:e4:88:89:df:2e:41:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4A:C4:97:54:3E:D6:D5:55:9E:4E:21:37:82:7C:09:5B:25:2D:B3
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C88A1/7AE4145AD2D011F18F5E88B8CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C88A1/7AE4145AD2D011F18F5E88B8CE1D38B0/-krEl1Q-1tVVnk4hN4J8CVslLbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37190

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.191.68.0/22
                  102.203.40.0/22
                  102.206.120.0/22
                  102.207.0.0/22
                  102.208.128.0/22
                  102.212.188.0/22
                  102.215.252.0/22
                  154.0.24.0/21
                IPv6:
                  2c0f:4c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:81:9f:3a:fc:1e:13:ea:cf:24:4d:16:d9:71:eb:36:6a:96:
         b2:32:b9:17:8c:82:a6:d5:ff:da:78:13:50:af:06:41:7b:2e:
         9c:ba:99:0d:d4:2c:92:22:89:55:d8:ca:f7:8d:5e:ea:7b:96:
         4c:d3:60:17:31:3b:9c:07:f2:38:07:8a:99:7e:7b:1b:03:2a:
         1e:7d:29:13:0b:55:5b:73:08:01:97:29:0d:bc:1a:cb:25:a4:
         b8:f8:0c:33:a9:62:e4:f3:f4:e7:32:d1:a9:e9:74:ea:3f:a9:
         29:25:b6:46:79:f8:82:61:5d:68:aa:76:96:c9:62:a2:3a:ff:
         c5:ff:89:36:4a:d4:cf:46:9c:b9:33:4c:66:38:48:5b:39:84:
         ff:b0:6b:36:fe:81:ff:51:ae:49:ee:ab:eb:29:23:b0:e7:63:
         eb:ac:57:46:56:ac:fe:93:72:bb:b6:08:34:af:1d:3e:73:0e:
         dc:91:ff:45:76:51:3c:a0:3f:f5:e5:82:45:4e:60:03:42:3a:
         4c:d2:cd:72:9b:f4:f2:91:27:34:82:ea:04:09:a6:b0:f6:47:
         d7:7a:43:fd:af:cb:f5:a7:13:a5:5f:ed:98:18:85:fb:9d:cd:
         ea:ca:a8:ff:23:1b:dc:c1:5b:25:eb:9b:3b:e8:3d:13:35:92:
         45:ae:ce:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 21:36:04 2026 by rpki-client