Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/B-ZlMLpUJezqxePDCpJ4GM3_rb8.cer
File:                     B-ZlMLpUJezqxePDCpJ4GM3_rb8.cer (raw, json)
Hash identifier:          zapkDSzT2Ph5sBkWRfjfGLDq7x1Yn1zWuwDnVmhrYYk=
Subject key identifier:   07:E6:65:30:BA:54:25:EC:EA:C5:E3:C3:0A:92:78:18:CD:FF:AD:BF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4220
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 08 Sep 2026 09:09:34 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37145
                          IP: 41.217.192.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16928 (0x4220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep  8 09:09:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36297A8AF, serialNumber=07E66530BA5425ECEAC5E3C30A927818CDFFADBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:09:03:42:18:73:de:9c:0c:77:a2:a5:6a:a6:
                    39:04:33:4c:49:0d:87:1f:d1:78:78:a2:7d:ab:2e:
                    14:70:48:d7:f3:86:86:fa:69:4f:6a:5e:a3:6b:dc:
                    70:27:c3:8e:eb:69:5e:01:e2:27:6d:40:20:50:69:
                    ef:48:7d:c0:cd:20:8d:e1:68:57:9c:a1:11:85:1c:
                    51:04:68:b8:8d:ad:b3:24:6d:83:b1:a9:d3:6e:37:
                    22:4a:e0:18:3c:76:73:7a:a3:01:97:0b:dd:c2:f8:
                    87:8d:ae:ae:87:d1:48:33:fa:67:bd:04:1f:8c:51:
                    dd:cd:5e:86:65:9c:e7:a5:9e:99:0e:63:16:99:1f:
                    dd:d8:41:12:de:a2:01:02:d2:64:16:c7:07:b2:1b:
                    98:ba:27:c5:3e:3d:d2:1b:80:10:d9:3b:bd:2e:86:
                    d3:d8:5d:70:7e:a6:55:8d:8b:90:ad:73:49:41:ca:
                    c0:37:29:c2:fa:59:25:06:e3:33:a0:f7:4d:f7:a3:
                    55:66:48:a9:d2:75:3f:01:69:2a:bd:06:28:5c:79:
                    c6:18:f1:81:c3:c8:d5:1a:0f:cb:45:69:8b:8b:e6:
                    8e:9b:28:b3:18:e5:bf:20:99:ea:a7:13:53:3b:3a:
                    9c:91:8e:0c:13:5e:2d:71:1b:3a:ba:a4:da:ec:0d:
                    89:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E6:65:30:BA:54:25:EC:EA:C5:E3:C3:0A:92:78:18:CD:FF:AD:BF
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37145

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.217.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:32:d8:91:18:26:89:8f:ac:ce:c9:38:79:5f:0b:c8:e8:9a:
         fa:52:e9:29:c2:82:ed:63:6f:10:c1:33:5a:5f:24:b1:71:bf:
         66:33:fd:51:3a:1d:65:c7:61:0b:b7:67:f4:c7:03:62:74:85:
         57:60:6c:8f:44:5f:28:9c:3b:6d:1f:91:dc:ff:7e:3f:10:5b:
         57:b6:df:e1:71:53:5a:10:bd:47:5a:9e:e5:e2:00:87:a7:c5:
         5c:62:e7:cb:fe:ec:84:84:3f:f6:4a:d0:2a:32:2e:ae:a1:15:
         4f:44:fa:ee:a3:8c:e0:f2:3a:e2:c2:a7:2c:78:35:32:00:a2:
         f3:cb:09:51:d3:47:c8:ae:de:14:88:8e:88:15:19:eb:2a:4a:
         72:91:c0:eb:b7:64:42:b8:f7:17:7a:bb:00:07:c2:c9:69:6b:
         cf:ed:c5:56:50:8c:55:78:56:13:f9:02:66:1a:91:d6:df:28:
         7a:25:fb:67:d7:32:6b:0c:50:3e:51:47:2f:f1:21:0b:6d:7c:
         84:09:48:1e:63:ef:93:3d:7f:3a:bd:cc:ce:78:dc:1e:d2:8c:
         b6:39:a1:c8:5f:c2:4d:0d:8c:5d:51:cd:ff:ae:18:09:26:57:
         ad:e1:ca:ed:7b:17:b6:cc:fd:ce:06:df:c2:52:29:ab:46:71:
         5f:73:2a:1b
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICQiAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjA5MDgwOTA5MzRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjI5N0E4QUYxMTAvBgNVBAUTKDA3RTY2NTMwQkE1NDI1RUNFQUM1RTND
MzBBOTI3ODE4Q0RGRkFEQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiCQNCGHPenAx3oqVqpjkEM0xJDYcf0Xh4on2rLhRwSNfzhob6aU9qXqNr3HAn
w47raV4B4idtQCBQae9IfcDNII3haFecoRGFHFEEaLiNrbMkbYOxqdNuNyJK4Bg8
dnN6owGXC93C+IeNrq6H0Ugz+me9BB+MUd3NXoZlnOelnpkOYxaZH93YQRLeogEC
0mQWxweyG5i6J8U+PdIbgBDZO70uhtPYXXB+plWNi5Ctc0lBysA3KcL6WSUG4zOg
9033o1VmSKnSdT8BaSq9BihcecYY8YHDyNUaD8tFaYuL5o6bKLMY5b8gmeqnE1M7
OpyRjgwTXi1xGzq6pNrsDYmLAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUB+ZlMLpU
JezqxePDCpJ4GM3/rb8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyOTdBOC9GREM0MTc3OEFCNjQx
MUYxODEwQkQyQzFDRTFEMzhCMC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Mjk3QTgvRkRDNDE3NzhBQjY0MTFGMTgxMEJEMkMxQ0UxRDM4QjAvQi1abE1M
cFVKZXpxeGVQRENwSjRHTTNfcmI4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkRkwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIp2cAwDQYJKoZIhvcN
AQELBQADggEBAKky2JEYJomPrM7JOHlfC8jomvpS6SnCgu1jbxDBM1pfJLFxv2Yz
/VE6HWXHYQu3Z/THA2J0hVdgbI9EXyicO20fkdz/fj8QW1e23+FxU1oQvUdanuXi
AIenxVxi58v+7ISEP/ZK0CoyLq6hFU9E+u6jjODyOuLCpyx4NTIAovPLCVHTR8iu
3hSIjogVGesqSnKRwOu3ZEK49xd6uwAHwslpa8/txVZQjFV4VhP5AmYakdbfKHol
+2fXMmsMUD5RRy/xIQttfIQJSB5j75M9fzq9zM543B7SjLY5ochfwk0NjF1Rzf+u
GAkmV63hyu17F7bM/c4G38JSKatGcV9zKhs=
-----END CERTIFICATE-----
Generated at Sat Sep 19 11:39:11 2026 by rpki-client