Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
File:                     BrHYy0U_06Fn6NMS7FHliT3ZldY.cer (raw, json)
Hash identifier:          gCAj24SV197KP08BSB0oD0TN0uiFJ9j1aUBWOqQMxSE=
Subject key identifier:   06:B1:D8:CB:45:3F:D3:A1:67:E8:D3:12:EC:51:E5:89:3D:D9:95:D6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       413B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 19 Jun 2026 00:01:38 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37326
                          AS: 37371
                          IP: 41.78.72.0/22
                          IP: 197.220.64.0/19
                          IP: 2c0f:fcd8::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16699 (0x413b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jun 19 00:01:38 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36424BFAF, serialNumber=06B1D8CB453FD3A167E8D312EC51E5893DD995D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:dd:1a:6b:64:d3:35:77:8f:2b:c4:f9:ba:
                    ff:e4:98:da:13:0a:d6:ea:2b:70:bf:9c:20:d3:72:
                    a4:c8:99:19:7d:f1:36:39:7a:56:81:70:e0:cc:45:
                    6b:62:6b:63:a0:a1:70:82:6c:3f:f3:11:99:9b:a1:
                    07:d5:fb:fa:6b:82:93:21:16:f0:12:00:b6:9f:fd:
                    c1:1e:3f:12:44:0a:e2:c5:d2:f4:20:ff:64:6f:e3:
                    d9:c0:6d:f5:41:c5:ae:6b:b5:e5:b5:3d:3b:62:32:
                    93:fa:0a:55:6a:52:a9:60:86:70:4c:62:7a:19:4c:
                    11:1d:4d:1f:3f:c3:a6:d5:b9:1a:2c:8f:b5:4f:52:
                    03:7f:b4:43:61:0c:a4:04:2e:ef:2c:a9:e5:df:4b:
                    fe:3a:d1:59:36:29:0a:bc:3a:b7:54:bf:ae:1f:f7:
                    bb:5b:7d:56:bf:73:d9:f1:4f:77:b3:7d:c8:99:6f:
                    3c:f4:77:ba:0a:2a:37:6d:ed:d4:d1:0e:47:e5:22:
                    66:dc:13:9c:32:8b:70:1b:1a:47:1a:e0:15:a1:2e:
                    f4:0f:aa:22:af:00:a8:bd:02:7a:0f:8b:04:b5:4a:
                    6d:01:25:0d:fd:f4:42:c3:92:4a:54:55:60:e2:92:
                    0d:1e:5d:8d:f8:25:5b:ac:aa:88:04:08:3e:f1:ab:
                    6f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B1:D8:CB:45:3F:D3:A1:67:E8:D3:12:EC:51:E5:89:3D:D9:95:D6
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37326
                  37371

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.78.72.0/22
                  197.220.64.0/19
                IPv6:
                  2c0f:fcd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:95:6f:27:eb:58:c0:b1:0c:b8:98:1c:43:8b:c1:c5:83:ea:
         26:2f:8e:6d:2b:51:10:be:df:62:09:e4:84:9b:e1:79:fe:ef:
         73:1f:e5:e7:34:21:a5:6f:8a:f0:d6:52:a5:ca:67:52:1b:04:
         8f:24:2d:46:59:06:9f:18:38:fa:df:45:83:9d:eb:e7:61:37:
         14:50:0c:c0:ea:83:66:74:ae:54:8d:d0:ed:df:ed:11:e2:9a:
         19:7a:8f:cd:21:d2:b5:ae:5f:c7:7c:1b:d4:e6:97:2b:15:24:
         91:43:3f:c3:06:80:4a:97:1a:08:c5:77:ac:97:c6:ad:69:d2:
         4f:c5:5f:6e:40:4c:ad:f2:25:76:a4:c3:cd:f5:9d:12:d3:29:
         19:e7:1b:63:4f:59:a5:8e:3e:a1:fb:9e:4b:fb:64:44:1f:97:
         25:7b:af:d0:44:b4:4d:9a:62:5f:fb:61:47:a3:3f:02:3b:af:
         d6:84:0b:8f:c0:5b:c7:d8:56:5a:d8:14:2f:f1:00:26:2a:99:
         c1:23:96:0b:81:a7:4d:42:dd:68:f8:10:f6:fe:9a:83:1d:04:
         8b:98:d6:67:7e:b5:ee:0e:19:23:31:03:36:5a:09:06:80:b8:
         01:a0:b1:b3:37:c1:dc:9f:c9:7e:36:cc:f0:17:c0:2d:61:d6:
         8e:e9:59:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 22:44:24 2026 by rpki-client