Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.cer
File:                     Y6BGXhqxi6oV3gf2J9n4XMIMlC4.cer (raw, json)
Hash identifier:          W1PiOhHZx4J6iqRREVUuLPRVXNNe+OH4gLVc5rB6EH4=
Subject key identifier:   63:A0:46:5E:1A:B1:8B:AA:15:DE:07:F6:27:D9:F8:5C:C2:0C:94:2E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4025
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 10 Mar 2026 18:00:56 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329170
                          IP: 102.214.72.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 25 Mar 2026 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16421 (0x4025)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Mar 10 18:00:56 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3627134AF, serialNumber=63A0465E1AB18BAA15DE07F627D9F85CC20C942E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:45:ee:ec:aa:b7:d8:21:98:6a:6b:31:5d:
                    2c:06:c3:db:c6:2e:2c:98:d0:79:0c:5e:b9:b0:1e:
                    b6:55:d5:e8:92:8e:e4:86:f5:86:3e:23:3c:e9:bc:
                    f4:64:bf:60:f2:5b:1b:40:0c:98:81:23:f4:bb:9a:
                    72:0d:98:ff:09:09:c1:98:7b:74:61:dd:dc:8d:6a:
                    c4:20:d4:ad:0a:37:aa:9c:5d:00:9a:71:9b:be:cb:
                    d8:60:f7:54:09:0c:db:e8:a0:f0:74:80:bb:c0:92:
                    97:b6:ce:fc:9e:cf:ee:1b:4f:99:3a:69:62:5e:72:
                    34:88:04:bc:b4:4c:bb:af:e7:35:bb:4e:79:03:eb:
                    6d:21:7a:28:aa:e4:44:2d:67:37:f0:a2:c0:4c:20:
                    20:60:90:71:9a:55:49:a0:3e:d9:86:6f:1f:31:0f:
                    66:48:79:a1:c9:ac:af:1a:73:7e:8b:47:b1:47:a7:
                    1a:e4:29:35:9c:53:d8:e4:75:5e:18:ce:e3:25:b0:
                    ee:08:bb:89:47:a3:3e:d8:28:af:62:88:2f:b9:6c:
                    4b:11:c9:7d:da:74:20:0a:e4:a7:e9:6c:43:1a:41:
                    48:53:c6:7f:de:22:e8:20:e7:18:38:7a:7e:15:c2:
                    92:a8:81:bd:10:07:cb:31:77:b0:48:60:c5:97:2f:
                    5b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A0:46:5E:1A:B1:8B:AA:15:DE:07:F6:27:D9:F8:5C:C2:0C:94:2E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329170

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:b9:b4:e2:06:2a:7d:2d:4f:b9:af:82:29:4f:0f:b8:82:90:
         e5:a7:7b:24:82:b3:14:b2:90:e4:07:ba:1d:e7:ad:54:9c:01:
         72:0f:f6:76:d2:88:14:c6:23:f1:5b:85:d5:c7:e1:62:4c:07:
         53:18:ac:d9:09:c1:d4:09:0b:8e:72:3f:9a:c4:e6:a3:29:e2:
         4f:1f:15:8b:6c:a6:4e:47:2f:72:c7:e7:15:fe:ac:ce:bc:fe:
         2b:1a:bf:b9:c9:df:73:b2:fe:86:72:5e:28:5b:55:bd:ae:a3:
         5a:0a:65:d3:d9:f5:3f:60:9c:e3:c3:e5:0b:d7:c7:56:f6:da:
         58:e9:b6:d2:d7:c5:01:0d:d4:36:ba:69:6f:dc:b7:3f:05:91:
         9e:02:67:ad:fa:2f:f6:78:d9:6e:41:08:6b:62:49:92:14:b7:
         80:ca:8e:13:2a:3a:df:bb:3a:21:74:53:be:d2:da:73:a0:98:
         cc:a9:b7:be:b2:cc:dd:5c:65:e3:41:53:21:76:76:78:94:25:
         23:f4:ea:8b:b9:48:f8:2e:ae:e7:15:ad:79:18:1e:3a:53:eb:
         a2:62:3e:13:30:18:bc:8f:d6:a5:29:c6:70:7b:02:39:92:5c:
         4f:ab:6a:47:5b:34:3b:0d:b5:1f:13:08:22:f7:4b:44:8b:bd:
         36:27:5d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 08:56:35 2026 by rpki-client