Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/irr9pfK9s6zff73_Peyqw6MO6Q4.cer
File:                     irr9pfK9s6zff73_Peyqw6MO6Q4.cer (raw, json)
Hash identifier:          19gePVR2Vv/lmezbCncaqxoSEwqxDPuvtnjKT0bu4/E=
Subject key identifier:   8A:BA:FD:A5:F2:BD:B3:AC:DF:7F:BD:FF:3D:EC:AA:C3:A3:0E:E9:0E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       42D0
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36375E8/D26D38FAC76311F1B4A74EDECE1D38B0/irr9pfK9s6zff73_Peyqw6MO6Q4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36375E8/D26D38FAC76311F1B4A74EDECE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 14 Oct 2026 00:11:45 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 36988
                          IP: 41.223.132.0/22
                          IP: 102.206.185.0/24
                          IP: 102.210.52.0/24
                          IP: 102.210.193.0/24
                          IP: 102.220.249.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 07:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17104 (0x42d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct 14 00:11:45 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36375E8AF, serialNumber=8ABAFDA5F2BDB3ACDF7FBDFF3DECAAC3A30EE90E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:c9:05:04:0a:6d:25:d7:26:56:ad:a7:21:
                    5c:69:8d:ce:ff:14:b9:51:c1:6d:6b:39:1c:1e:49:
                    48:27:87:aa:f1:ee:08:d1:5f:c9:78:fd:f9:7f:2b:
                    c5:34:29:52:e9:e6:68:85:45:aa:52:6c:e5:53:15:
                    36:a6:f6:b3:09:73:68:e4:2e:e1:7a:6d:2d:03:32:
                    cd:5e:72:79:11:95:ae:fb:71:47:2f:70:cb:e3:27:
                    a1:a0:20:15:8c:89:f4:45:e6:11:7d:2a:14:1d:dc:
                    58:4a:53:c6:6a:4c:7d:a5:96:05:92:88:6c:4e:1c:
                    68:07:c7:1f:24:08:b7:f2:81:00:c6:fb:b2:35:9f:
                    c0:a4:9f:51:ab:69:1c:2b:d6:5b:24:77:53:fa:e1:
                    4f:17:78:86:12:eb:c6:05:c0:e4:71:8e:97:88:0a:
                    cb:ce:f9:8a:14:af:cc:2b:58:6b:14:cb:84:fc:89:
                    83:3c:35:29:41:18:18:df:ad:48:32:bb:56:33:d5:
                    47:6f:ef:64:f8:e5:b7:1d:5a:09:a9:47:be:f8:42:
                    2e:6f:14:1e:d0:51:2c:4b:fa:4b:9a:d3:2d:63:d3:
                    35:b9:cf:07:bf:8e:40:27:ed:6a:2b:0a:93:8c:fa:
                    8a:66:51:76:ae:14:aa:4e:20:19:55:a6:2f:c5:3c:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BA:FD:A5:F2:BD:B3:AC:DF:7F:BD:FF:3D:EC:AA:C3:A3:0E:E9:0E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36375E8/D26D38FAC76311F1B4A74EDECE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36375E8/D26D38FAC76311F1B4A74EDECE1D38B0/irr9pfK9s6zff73_Peyqw6MO6Q4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36988

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.223.132.0/22
                  102.206.185.0/24
                  102.210.52.0/24
                  102.210.193.0/24
                  102.220.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:38:69:b9:18:64:b2:02:0a:3d:92:f9:33:8d:07:9c:d6:bb:
         c4:82:2a:98:a8:a1:be:77:e3:20:be:22:8e:66:68:48:6d:6e:
         b4:02:1e:22:e3:67:c2:86:da:e2:69:0d:9c:ea:24:23:6a:69:
         d1:c0:ce:63:58:50:f1:a5:d7:f1:20:03:80:03:8d:47:20:58:
         c9:da:46:7f:66:99:a1:68:c3:b0:bc:e2:8d:af:d4:48:88:be:
         1e:ba:6d:6d:66:e6:66:7f:c8:b6:84:2f:30:d2:7e:1d:e2:c3:
         a5:03:8e:10:9d:f5:63:a2:11:fb:01:61:3b:01:c5:71:74:d7:
         3b:e3:2b:18:32:da:ae:8e:1d:8d:18:88:d5:f2:a2:05:3c:07:
         0d:e3:45:f6:35:3b:cc:8a:93:45:e8:fb:b6:69:13:22:1f:f4:
         e4:d1:12:4a:2d:be:4d:b1:1b:f3:30:b3:4b:d2:e7:73:d6:62:
         16:08:b8:60:5b:5e:66:92:53:fb:3d:b4:3b:03:fd:7f:66:06:
         74:a1:86:4d:93:3a:38:73:0a:61:be:8a:8e:bf:60:e9:83:69:
         1c:de:3f:f4:de:1c:f1:15:09:cf:62:44:a3:17:a2:ab:aa:3f:
         f3:07:15:b2:c0:54:65:46:79:a0:f6:e2:61:e1:75:bf:a1:77:
         16:7e:61:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:25:28 2026 by rpki-client