Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/msAeeNqxc6pXMODHe3RAzBzJgWA.cer
File:                     msAeeNqxc6pXMODHe3RAzBzJgWA.cer (raw, json)
Hash identifier:          bb1978V7qFkE03dBEJ4JCIxzx37ZeVqykBmXoAo1Zzk=
Subject key identifier:   9A:C0:1E:78:DA:B1:73:AA:57:30:E0:C7:7B:74:40:CC:1C:C9:81:60
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4306
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 26 Oct 2026 12:02:44 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329841
                          IP: 102.200.16.0/22
                          IP: 2c0f:1ba0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17158 (0x4306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct 26 12:02:44 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F369D7FAAF, serialNumber=9AC01E78DAB173AA5730E0C77B7440CC1CC98160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:fa:8e:2f:95:55:da:72:9a:71:8e:48:99:
                    0b:c4:41:b6:fd:e2:86:7f:e8:58:df:69:1d:e4:b5:
                    4d:a3:8a:d7:3f:63:a0:ee:5f:1c:b5:c4:73:55:57:
                    2e:f1:66:42:a7:6c:56:b8:e1:c7:28:dc:6d:54:8b:
                    5c:c4:1f:b4:67:64:8c:24:e8:3e:b6:a9:7e:6e:29:
                    3d:ec:d0:48:ac:2e:9b:c5:50:54:43:27:56:3c:93:
                    64:cf:29:7f:8c:2c:b5:72:c1:3e:c2:96:1d:cd:9d:
                    7b:90:05:95:54:09:0b:6e:f1:c9:cd:71:b2:49:86:
                    30:c4:98:3f:a5:78:e7:70:4b:38:bb:36:de:a1:f1:
                    13:c3:e3:14:94:99:e2:8d:ba:e9:61:a3:c2:cf:51:
                    51:fe:30:2d:ae:d9:56:c2:c3:a0:88:02:46:57:cc:
                    ce:6e:2c:6a:1f:1a:5a:5a:07:8f:f5:76:73:2e:00:
                    8c:18:fd:b2:b9:b0:24:28:11:e0:96:4b:c8:3a:8e:
                    03:63:1c:07:bd:75:38:7d:65:6e:ad:a3:7d:5a:c5:
                    60:cf:86:35:46:ba:02:f5:86:35:88:3d:65:3e:ee:
                    b9:0c:58:c7:71:c7:5f:cc:2e:74:05:ad:ed:a5:de:
                    a1:3b:b7:88:30:03:2d:53:90:4e:2c:c4:9f:e5:60:
                    69:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C0:1E:78:DA:B1:73:AA:57:30:E0:C7:7B:74:40:CC:1C:C9:81:60
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329841

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.200.16.0/22
                IPv6:
                  2c0f:1ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:89:9b:8f:41:81:56:85:59:f1:66:9f:05:55:63:5c:3a:75:
         2a:bd:be:73:21:c0:64:28:01:03:d4:9e:29:a8:59:9d:3b:34:
         bf:c9:43:b7:88:3e:e9:97:1d:67:64:d2:7b:fc:90:22:ce:c3:
         25:e7:58:53:bf:98:b6:5a:42:50:c0:36:39:66:dc:1d:5b:a4:
         76:ce:3f:7b:3d:3b:79:2d:01:46:34:1d:24:c4:b0:e7:1e:69:
         76:62:bf:9d:1b:3a:1c:3f:f8:99:03:eb:b2:36:6b:8c:f2:cf:
         d1:05:fd:ec:27:6c:c4:30:71:0b:98:1e:5f:a5:fa:4d:8e:bd:
         d7:2e:4d:0c:ac:4c:8a:4b:9a:35:98:30:cc:3c:06:52:61:9a:
         13:3b:ca:f4:5c:0c:5c:cc:38:82:50:09:70:e3:39:86:00:2e:
         e1:a9:f7:b1:c7:c2:3c:23:0c:f3:78:52:70:3c:41:42:77:ac:
         48:f7:9b:7d:fe:94:c0:d6:07:16:b0:ca:87:c1:f1:98:20:ce:
         6a:97:15:f6:cf:07:e6:b6:3a:d5:4d:b8:42:01:6a:d2:96:32:
         8e:49:01:1d:d5:15:cf:a9:2b:03:f1:2e:6b:0f:26:46:d4:cc:
         29:2d:5b:14:4b:07:3e:93:12:88:c9:32:3d:6f:14:68:c7:8d:
         6a:54:b4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:21:05 2026 by rpki-client