RPKI Root Certificate
Location:                 ta/afrinic/AfriNIC.cer (download)

Subject key identifier:   EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Authority key identifier: Trust Anchor
Manifest:                 rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
CA Repository:            rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subordinate resources:
    1: AS: 0--4294967295
    1: IP: 0.0.0.0/0
    2: IP: ::/0

--
$ openssl x509 -text -inform DER -in ta/afrinic/AfriNIC.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e5:cf:72:ba:6c:7e:9e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AfriNIC-Root-Certificate
        Validity
            Not Before: Mar 30 09:58:36 2020 GMT
            Not After : Mar 28 09:58:36 2030 GMT
        Subject: CN=AfriNIC-Root-Certificate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:2a:02:15:88:3b:e3:8d:d8:47:fd:a1:10:
                    cc:a4:ac:6f:f8:07:e6:48:b2:1d:2d:62:6d:8e:bb:
                    d4:c8:3c:49:3c:18:e0:47:e9:15:ac:e1:d4:79:36:
                    ae:8f:28:05:52:9e:3d:b6:e3:79:1f:60:b5:ad:4b:
                    90:6a:f4:c7:be:f7:ba:c4:d1:79:7d:4d:ce:91:37:
                    2a:13:33:0e:67:2f:9c:b6:46:dd:7b:64:91:31:57:
                    6f:6c:ed:b6:f9:31:fd:80:d8:4a:0d:cf:65:ed:5b:
                    b4:d6:a5:38:2d:e2:47:93:75:f4:7f:9b:ae:e7:7e:
                    3a:62:b1:80:39:2b:fa:01:a6:01:5d:58:17:c5:ad:
                    2c:f5:9b:e0:a8:5a:62:9b:9d:29:45:e4:1e:fd:62:
                    37:43:01:4a:36:0a:4f:cd:f4:0b:e9:8e:df:0c:f6:
                    1d:61:a5:4e:5c:f5:d2:2a:dc:7b:3f:8b:38:28:b0:
                    3f:65:69:91:2f:f6:e8:6f:0f:e2:d9:f1:6f:88:01:
                    a1:0e:b8:ea:aa:ab:a6:fb:ff:70:d6:11:25:2f:fb:
                    ea:8a:15:67:57:5f:2c:68:a4:e7:2e:f9:08:b4:0f:
                    c1:7f:98:b5:d5:88:70:d8:ae:ea:bf:9e:f7:61:6c:
                    72:ba:a0:a4:9c:ef:e2:60:b4:d1:d4:34:e8:05:97:
                    19:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  0-4294967295

            sbgp-ipAddrBlock: critical
                IPv4:
                  0.0.0.0/0
                IPv6:
                  ::/0

    Signature Algorithm: sha256WithRSAEncryption
         77:37:e0:f5:55:d1:07:27:69:b5:6f:b6:c4:36:67:8c:9f:c1:
         64:ce:18:30:90:7e:5b:1c:c9:f0:43:b1:48:47:70:ee:55:bd:
         5f:ef:32:6f:56:1f:69:b7:58:64:7a:d2:b5:53:00:71:d6:f5:
         1e:c5:a8:3b:dd:03:1a:0b:8f:22:14:fc:d9:22:de:06:9c:a3:
         ec:51:4a:b0:1b:a9:4d:8f:94:9d:42:ae:58:ec:58:11:0d:71:
         50:ac:68:b5:8d:5e:e3:e7:dd:92:55:a2:53:82:b0:9d:73:4a:
         be:a9:c3:c5:08:15:49:b2:00:39:fd:9a:58:db:58:7c:e3:97:
         bc:30:9f:ed:79:9c:56:78:de:d8:a6:6e:ba:5e:ba:ff:e6:b3:
         c3:11:d0:81:7d:a2:d1:2e:e2:39:cd:27:7e:1c:c3:7c:39:c1:
         1a:1b:b2:37:c6:44:7a:14:63:aa:b2:1f:8f:52:d6:33:67:40:
         f7:df:83:03:5c:87:53:64:d2:64:03:49:2e:02:3a:23:9a:b7:
         15:19:66:d3:a3:87:f0:7c:19:7f:ba:6a:84:d2:e8:2a:f4:d7:
         c9:2d:c9:77:f1:29:37:ef:5f:64:58:fc:c2:76:16:38:9a:53:
         08:14:db:79:30:d2:a8:4b:fc:fc:df:12:5b:d3:e6:6b:89:32:
         1d:1c:61:30
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIJAOXPcrpsfp4oMA0GCSqGSIb3DQEBCwUAMCMxITAfBgNV
BAMTGEFmcmlOSUMtUm9vdC1DZXJ0aWZpY2F0ZTAeFw0yMDAzMzAwOTU4MzZaFw0z
MDAzMjgwOTU4MzZaMCMxITAfBgNVBAMTGEFmcmlOSUMtUm9vdC1DZXJ0aWZpY2F0
ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbAKgIViDvjjdhH/aEQ
zKSsb/gH5kiyHS1ibY671Mg8STwY4EfpFazh1Hk2ro8oBVKePbbjeR9gta1LkGr0
x773usTReX1NzpE3KhMzDmcvnLZG3XtkkTFXb2zttvkx/YDYSg3PZe1btNalOC3i
R5N19H+brud+OmKxgDkr+gGmAV1YF8WtLPWb4KhaYpudKUXkHv1iN0MBSjYKT830
C+mO3wz2HWGlTlz10ircez+LOCiwP2VpkS/26G8P4tnxb4gBoQ646qqrpvv/cNYR
JS/76ooVZ1dfLGik5y75CLQPwX+YtdWIcNiu6r+e92FscrqgpJzv4mC00dQ06AWX
GVECAwEAAaOCAfEwggHtME8GA1UdIAEB/wRFMEMwQQYIKwYBBQUHDgIwNTAzBggr
BgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMubmV0L3BvbGljeS9DUFMucGRm
MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTraA84
9dbHG7SxBri9BlhQEtoxtjCCAQwGCCsGAQUFBwELBIH/MIH8MFEGCCsGAQUFBzAF
hkVyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBG
NEQxMUUwQjY1N0Q4OTMxMzY3QUU3RC8wcAYIKwYBBQUHMAqGZHJzeW5jOi8vcnBr
aS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5LzA0RThCMEQ4MEY0RDExRTBCNjU3RDg5
MzEzNjdBRTdELzYyZ1BPUFhXeHh1MHNRYTR2UVpZVUJMYU1iWS5tZnQwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCEGCCsGAQUFBwEIAQH/BBIwEKAOMAwwCgIBAAIFAP////8wJwYIKwYBBQUHAQcB
Af8EGDAWMAkEAgABMAMDAQAwCQQCAAIwAwMBADANBgkqhkiG9w0BAQsFAAOCAQEA
dzfg9VXRBydptW+2xDZnjJ/BZM4YMJB+WxzJ8EOxSEdw7lW9X+8yb1YfabdYZHrS
tVMAcdb1HsWoO90DGguPIhT82SLeBpyj7FFKsBupTY+UnUKuWOxYEQ1xUKxotY1e
4+fdklWiU4KwnXNKvqnDxQgVSbIAOf2aWNtYfOOXvDCf7XmcVnje2KZuul66/+az
wxHQgX2i0S7iOc0nfhzDfDnBGhuyN8ZEehRjqrIfj1LWM2dA99+DA1yHU2TSZANJ
LgI6I5q3FRlm06OH8HwZf7pqhNLoKvTXyS3Jd/EpN+9fZFj8wnYWOJpTCBTbeTDS
qEv8/N8SW9Pma4kyHRxhMA==
-----END CERTIFICATE-----

Generated at Sun Sep 26 13:54:46 2021 by LibreSSL & rpki-client.