Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
File:                     Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer (raw, json)
Hash identifier:          xEdnglhptp/A66rbO3ehXQ0eIK+N1m+i4JPbpHvFoIk=
Subject key identifier:   57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       361D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 04 Sep 2025 06:36:58 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329530
                          IP: 102.205.248.0/22
                          IP: 2c0f:5cc0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 05:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13853 (0x361d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep  4 06:36:58 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:90:37:3c:e8:a0:09:77:ce:23:06:99:05:
                    64:36:ff:95:bd:d1:67:f1:46:50:91:06:ab:a2:b8:
                    a1:9a:8e:51:8c:77:51:17:15:c9:1e:69:e9:dc:7d:
                    e2:f7:6c:91:bf:19:55:a5:69:fa:7b:53:79:41:cc:
                    a0:f0:25:aa:f7:c6:94:3b:da:1a:cf:d0:7b:20:e1:
                    06:08:6b:41:54:fa:e2:4f:8e:d3:a1:0a:e6:69:41:
                    98:d1:c6:7b:14:e7:f1:8f:5b:3d:2c:97:d9:d8:d3:
                    0b:29:1a:11:ec:a3:90:5f:5d:eb:c1:f6:17:23:ee:
                    9a:bd:55:50:a2:51:05:f9:6a:ae:ba:26:17:d4:50:
                    eb:71:6b:e7:59:78:37:93:66:99:c5:39:bb:20:c3:
                    97:60:04:ff:4b:34:6b:38:d5:ab:4d:ec:48:63:08:
                    fa:e9:bf:13:9a:97:20:ef:a1:e9:b4:02:3e:da:f6:
                    8f:16:a4:07:7c:7a:33:92:0d:6e:b8:05:53:ae:3f:
                    a8:3e:6a:bd:50:a7:4e:79:fe:33:73:e7:b6:2c:7f:
                    68:45:92:10:e4:bd:f8:e4:40:2d:a0:9f:43:9b:da:
                    c0:7b:d8:d8:80:5d:d8:9a:a1:1b:c0:98:5f:1d:62:
                    02:71:b1:bd:42:de:b5:96:88:d5:a5:c5:45:04:23:
                    b5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329530

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.248.0/22
                IPv6:
                  2c0f:5cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:ab:78:6c:54:27:79:15:11:bf:83:54:c6:8e:dd:d2:e9:c0:
         b7:50:ab:7c:4b:41:de:42:60:bc:a7:ff:8f:fb:29:9a:ff:c8:
         c1:6d:0b:00:88:cc:d1:bc:85:2c:23:dd:3f:1f:9c:40:41:f6:
         fa:de:22:82:8a:6a:cf:d5:80:1a:03:d9:c7:ac:81:7d:0b:b3:
         d2:fa:81:27:08:5a:e8:6e:17:7e:a2:05:b2:c7:9f:4a:04:ef:
         be:ba:a4:eb:22:5b:fb:9a:31:c7:c6:c8:7d:63:95:82:dc:24:
         71:54:e3:de:8c:2f:c6:0a:75:33:58:49:1e:cb:59:82:d4:ef:
         3b:c4:7f:6c:e8:ad:fc:3e:f3:c6:e5:b0:02:30:16:8e:c7:6c:
         2d:5a:c0:36:c4:4b:8f:78:08:a8:66:d2:a3:19:3f:f8:59:c5:
         44:10:7d:5e:b6:ef:48:5f:c9:6d:b8:18:3f:b0:be:01:1d:21:
         5b:80:c1:43:27:40:e6:ae:2b:56:fb:2c:be:5a:a9:8b:9c:86:
         90:95:00:38:79:7e:4c:41:54:d6:b5:6a:d8:f2:bf:12:f2:35:
         25:01:a2:62:b7:98:86:c7:b4:26:12:e9:4d:4b:3e:a9:fc:b2:
         5c:d5:d2:36:64:72:c2:39:14:7e:23:b3:a6:48:e6:24:52:df:
         69:29:b1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:26:05 2025 by rpki-client