Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/j_Z65kq__NHJ9cmg9SHmXW-2Adc.cer
File:                     j_Z65kq__NHJ9cmg9SHmXW-2Adc.cer (raw, json)
Hash identifier:          PY0oAUVVOVspHxzVB/bVD8mXIzAYAYZr5OUKoxs2Y1I=
Subject key identifier:   8F:F6:7A:E6:4A:BF:FC:D1:C9:F5:C9:A0:F5:21:E6:5D:6F:B6:01:D7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       431F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3693685/E6E3B764D6C211F19E3EDDFBCE1D38B0/j_Z65kq__NHJ9cmg9SHmXW-2Adc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3693685/E6E3B764D6C211F19E3EDDFBCE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 02 Nov 2026 13:40:09 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37376
                          IP: 41.79.120.0/22
                          IP: 2c0f:fa20::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17183 (0x431f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Nov  2 13:40:09 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3693685AF, serialNumber=8FF67AE64ABFFCD1C9F5C9A0F521E65D6FB601D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:46:1e:7b:7d:06:c1:18:10:46:3c:07:5b:7e:
                    cc:43:25:ff:33:b2:4e:d1:ee:e1:32:1a:7f:39:02:
                    a6:a4:bc:6d:01:64:1c:c0:de:90:59:d2:61:ec:82:
                    b9:c7:41:16:5e:fa:a6:bf:1e:dc:50:32:e9:b2:09:
                    e6:eb:f0:74:0c:fd:87:fb:36:90:c7:41:c6:e2:96:
                    ef:a1:be:c9:41:80:98:de:6b:f8:74:66:35:64:d9:
                    0e:6f:fd:55:14:c0:78:bb:67:60:80:d8:f4:a8:a2:
                    56:cd:b2:71:9f:31:25:90:08:2e:02:8a:33:80:b1:
                    af:52:5d:6c:ee:97:ae:8f:7d:3e:66:11:c6:68:35:
                    f1:73:d4:73:c0:6d:63:fa:2a:e0:75:ad:4e:80:82:
                    ed:6d:28:cb:3d:45:f9:02:9b:74:80:bf:f4:10:f1:
                    5a:98:c3:7d:8d:ae:06:d5:6d:23:de:75:d2:78:29:
                    53:06:fd:a1:5f:b8:1a:d0:96:3c:70:96:ce:51:60:
                    4a:51:b1:0e:47:c7:fb:b5:8c:3f:83:c1:1a:ac:8f:
                    7d:ce:e6:64:98:c5:1a:33:e6:28:76:d6:98:02:75:
                    c1:a7:9b:c1:0b:b3:dd:d7:47:b8:2b:1b:84:9c:7f:
                    3a:ba:3a:0f:e0:7b:4a:ff:51:25:f3:2f:81:ad:ce:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F6:7A:E6:4A:BF:FC:D1:C9:F5:C9:A0:F5:21:E6:5D:6F:B6:01:D7
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693685/E6E3B764D6C211F19E3EDDFBCE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693685/E6E3B764D6C211F19E3EDDFBCE1D38B0/j_Z65kq__NHJ9cmg9SHmXW-2Adc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37376

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.79.120.0/22
                IPv6:
                  2c0f:fa20::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:5a:9c:cd:77:8f:76:59:79:22:ed:59:af:60:3e:a8:79:07:
         08:5c:8d:33:60:3a:9a:92:b9:d6:a9:46:02:b1:3c:52:40:f1:
         8d:95:2d:d2:c0:c2:10:12:a5:ed:e9:1a:69:04:9c:34:0a:d5:
         c4:3e:52:b1:f6:09:79:eb:48:05:a0:11:c2:fc:14:83:8d:44:
         0c:ef:de:0f:c8:cc:bf:49:f9:77:1b:8a:ae:6d:c0:a9:ac:f3:
         1d:2b:4b:02:51:71:41:f7:c2:a3:6b:bf:60:d6:ba:f9:4e:88:
         89:d4:4c:84:8f:42:58:90:ff:c2:96:8f:24:d7:ad:fa:42:78:
         09:e0:9f:76:c4:85:40:e3:15:c0:9f:21:3b:f9:54:5d:82:98:
         77:70:3c:ec:ce:1a:3c:9e:49:42:e2:78:d8:5f:c5:8d:f2:8c:
         68:8c:e0:ea:63:f4:6c:f2:f6:bc:ff:94:2f:09:54:a6:17:fc:
         5a:bc:9c:3b:00:a2:c7:4b:4d:a5:78:e9:e9:fd:51:cf:a4:ce:
         a2:32:9f:06:87:5a:74:3d:23:38:11:0c:15:ff:fa:65:04:bb:
         eb:d3:0b:fc:c5:83:15:e4:23:83:b5:a6:a0:77:e5:32:e6:6d:
         f7:ce:ef:73:12:dd:38:24:c0:6a:db:52:a4:04:d2:b8:44:1a:
         0b:ac:24:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:13:00 2026 by rpki-client