Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/M1KV0y5l0oL7JTmzxmjwFY6ODlo.cer
File:                     M1KV0y5l0oL7JTmzxmjwFY6ODlo.cer (raw, json)
Hash identifier:          SIzr9kiBRb7JwTAohe8+S14tgJdiz5GNa7PMRZPhs0Q=
Subject key identifier:   33:52:95:D3:2E:65:D2:82:FB:25:39:B3:C6:68:F0:15:8E:8E:0E:5A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       40A6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366C4C3/AE002D483E3C11F1BFDE20B0CE1D38B0/M1KV0y5l0oL7JTmzxmjwFY6ODlo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366C4C3/AE002D483E3C11F1BFDE20B0CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 22 Apr 2026 11:16:24 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329717
                          IP: 102.204.99.0/24
                          IP: 2c0f:4920::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16550 (0x40a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Apr 22 11:16:24 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F366C4C3AF, serialNumber=335295D32E65D282FB2539B3C668F0158E8E0E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9e:93:35:6d:f2:21:71:ea:73:ce:80:f4:3a:
                    a5:0c:d7:38:d1:be:a2:88:45:36:64:35:92:cb:32:
                    cf:dd:a4:6e:86:1e:ee:56:22:64:38:bc:3a:66:9a:
                    7c:0e:05:f2:09:b8:71:1d:92:3c:fa:58:29:13:37:
                    98:05:f5:46:78:06:22:a5:02:45:6f:82:96:40:b5:
                    25:2f:db:fd:3e:3f:27:84:45:5d:33:43:fa:8a:5d:
                    ea:d4:23:96:26:8a:88:a5:94:ca:79:ab:0b:46:e4:
                    1f:69:b3:30:58:ed:41:4f:00:f6:d5:ea:19:a5:5f:
                    47:19:05:4d:27:23:fe:a8:e9:f4:57:30:3d:24:c4:
                    2d:9f:a9:4c:fa:76:83:d4:4c:5e:b3:51:a9:14:ff:
                    79:29:3c:ce:37:89:2d:4a:92:5c:94:d2:86:08:02:
                    06:73:6f:b4:b4:6b:f4:10:50:8b:c3:14:0a:a1:6e:
                    03:2b:a8:25:29:c8:b4:64:c5:d9:4d:1e:c6:a0:59:
                    ff:69:55:48:9c:aa:06:4c:d3:b4:17:cd:cb:40:96:
                    83:f1:71:f9:57:a3:b9:ab:6b:49:2e:60:20:7c:21:
                    87:b6:ce:16:b1:ff:72:8a:86:3d:47:ff:5a:61:e9:
                    a3:d3:89:4e:77:5a:1f:37:77:2e:7c:10:92:fe:4d:
                    db:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:52:95:D3:2E:65:D2:82:FB:25:39:B3:C6:68:F0:15:8E:8E:0E:5A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C4C3/AE002D483E3C11F1BFDE20B0CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C4C3/AE002D483E3C11F1BFDE20B0CE1D38B0/M1KV0y5l0oL7JTmzxmjwFY6ODlo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329717

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.99.0/24
                IPv6:
                  2c0f:4920::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:21:ff:a0:54:0d:5c:26:e3:5a:43:e5:21:7b:1e:a5:eb:77:
         05:d2:85:94:ce:16:76:08:8a:4e:36:9f:04:8f:d7:df:45:0d:
         4d:17:1b:40:4c:aa:46:cc:33:9d:2b:c8:f3:2b:3e:ae:f3:fa:
         c8:47:73:81:bc:e4:cc:24:e3:6d:af:77:e5:0a:53:f8:a5:27:
         3d:16:3a:d9:c5:c6:74:8b:ac:37:a4:6f:34:a3:79:d8:1c:af:
         b7:15:cd:d8:42:9e:3e:ad:d0:08:a8:f4:1f:12:bd:ec:dd:af:
         59:52:f6:5d:22:d9:20:a8:cf:4e:2a:3a:56:f1:f2:7c:75:f3:
         1d:70:cf:2e:d9:df:df:0e:36:d4:71:8b:00:59:29:09:51:0e:
         6c:1e:e9:c7:73:69:a8:8f:c5:05:c1:50:8f:63:e6:d0:1c:e4:
         2a:6d:7f:1e:c3:a0:f7:4f:a3:41:ae:8e:72:83:59:88:11:f1:
         47:8c:71:73:e0:0f:2c:1b:eb:6e:89:26:2b:f8:ea:9d:d7:d8:
         73:13:e5:0d:28:43:4d:31:56:f3:43:d9:84:e1:ca:38:18:79:
         89:a5:05:95:2b:c8:79:67:b9:0a:d4:29:a8:5d:03:2c:7a:61:
         54:1d:b2:1d:90:08:bc:7b:bb:06:18:03:48:35:fa:0b:47:53:
         df:ea:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 20:39:16 2026 by rpki-client