Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
File:                     YFf0ifWtxOkmnCYNcCyBqraqLm0.cer (raw, json)
Hash identifier:          xKw1lq7fu8d11jT0LrF5XNjLJk+JcCNT51lymlgx+4k=
Subject key identifier:   60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3F77
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 09 Jan 2026 00:04:31 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37049
Validation:               Failed, certificate revoked on Sat 10 Jan 2026 00:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16247 (0x3f77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  9 00:04:31 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F369BF27AF, serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6b:d1:48:a6:51:9e:61:2a:85:e1:fc:15:ef:
                    f5:0c:28:c5:90:4c:e8:7d:06:db:eb:f4:d6:1c:df:
                    29:89:c6:7a:3e:48:70:30:91:ee:1f:5b:2a:42:aa:
                    9a:e5:f5:47:41:8a:b6:07:3b:48:4f:02:57:fc:ab:
                    81:7f:96:16:ff:1b:ba:14:4d:89:f3:2a:37:3f:10:
                    79:75:7f:6e:f6:4b:74:63:ce:5d:99:50:1e:38:34:
                    1e:1d:a5:ca:24:d4:06:e4:a4:2a:99:e8:f5:11:49:
                    b3:25:5e:7b:66:92:51:e5:0c:16:9b:49:c2:82:68:
                    7e:a9:97:31:90:11:74:2d:51:34:d8:bd:a4:35:0a:
                    a5:7e:ba:33:20:29:93:b2:72:80:ca:af:2d:55:9b:
                    03:7f:73:59:65:3f:3d:70:ae:0d:1d:f1:7e:0d:2f:
                    31:47:e8:be:af:33:31:6f:74:af:60:a8:0b:35:bc:
                    c5:3b:1a:de:7a:4e:53:ac:dd:b7:4d:fd:91:d8:d3:
                    e9:2b:0c:80:b8:87:65:15:03:de:b5:f4:04:f6:3f:
                    3c:b4:88:4f:e5:2b:92:0a:f0:1e:58:57:45:ff:dc:
                    b6:4d:83:6f:e1:81:04:21:d4:d9:cf:3f:9d:54:d3:
                    13:04:c7:35:a1:43:6e:66:1c:c5:86:bb:62:f3:73:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37049

    Signature Algorithm: sha256WithRSAEncryption
         0e:c5:e6:81:b7:ec:cf:2d:39:26:3f:6f:e0:19:fe:8d:f3:4e:
         0c:82:2a:b7:ad:2a:64:5b:06:0e:9d:af:3f:d3:6e:98:d7:8b:
         49:6b:cd:5b:a7:dd:5f:17:af:15:ae:e8:e5:05:53:aa:6a:9e:
         ed:6c:df:cb:c5:3e:4f:76:71:39:8b:d7:40:f5:17:8c:61:a2:
         10:39:fd:40:ee:97:2c:17:af:d0:95:b7:fe:81:cd:81:f3:05:
         63:bd:f5:ea:c9:78:e9:6e:ea:37:46:6f:37:9d:82:7d:dd:6a:
         3c:13:2e:ed:ba:1b:eb:ed:f7:d6:5f:ba:36:00:a2:40:84:a2:
         65:06:06:38:e6:4e:97:18:c1:e2:67:fa:47:4f:6a:46:7b:3f:
         91:4e:5b:b0:48:08:34:92:89:bd:48:8a:c2:2c:7b:fb:3c:05:
         fd:d5:af:d0:42:40:23:07:51:4a:b5:dc:f6:1b:0a:6a:35:46:
         99:b1:08:08:2c:06:e5:49:82:9a:68:ed:a4:bb:97:e5:4d:73:
         3f:6f:2b:d7:f7:90:06:6d:f3:b9:aa:99:db:59:24:82:3c:5a:
         3a:c6:25:15:a7:cf:02:f6:5c:8a:dc:7e:4b:d8:1e:39:ec:1e:
         1a:b6:67:57:b9:2b:fd:9b:70:42:4e:fa:53:7c:9a:49:9d:b7:
         d8:f1:15:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 05:20:25 2026 by rpki-client