Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/a3fSZSdSIpMFr-1TE57kNToxbvc.cer
File:                     a3fSZSdSIpMFr-1TE57kNToxbvc.cer (raw, json)
Hash identifier:          hvNpw/HjrU7I+3foqBJWyS7HPsYIFtbaLaYMWjSL/Mw=
Subject key identifier:   6B:77:D2:65:27:52:22:93:05:AF:ED:53:13:9E:E4:35:3A:31:6E:F7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4250
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 14 Sep 2026 11:37:31 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328223
                          IP: 102.208.16.0/22
                          IP: 2c0f:5d80::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 07:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16976 (0x4250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep 14 11:37:31 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36894B8AF, serialNumber=6B77D2652752229305AFED53139EE4353A316EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:49:21:46:a0:53:47:6c:06:13:a8:2b:11:40:
                    15:0d:e3:05:ca:9b:06:04:98:cc:18:d7:14:9f:98:
                    59:b5:f6:df:5a:ac:e7:8d:3c:2b:f8:f6:9e:88:08:
                    c5:9e:a1:b9:5d:c1:19:5d:49:e8:41:39:9f:4f:0d:
                    7e:7e:5c:7e:a0:6d:93:8a:72:37:ee:38:f4:27:bd:
                    81:d4:a5:43:29:c7:07:78:87:c6:19:a1:55:bf:06:
                    a2:fd:2f:39:e9:84:48:4f:ba:c8:49:8b:31:eb:bd:
                    97:be:57:64:8b:74:be:d3:73:db:1c:fa:b5:89:55:
                    be:92:4e:b8:f2:28:7e:30:d6:0b:8a:ce:b9:dc:0c:
                    70:1a:7f:bb:67:b7:0d:2a:f4:cb:b7:43:07:70:07:
                    72:56:8f:eb:7f:0e:0f:8c:0f:72:f7:83:4b:b2:a1:
                    10:9d:f0:16:f9:59:5f:6c:56:62:b2:3e:86:99:55:
                    4d:b9:c2:ef:e7:e0:15:54:0a:fd:f4:69:b9:f9:66:
                    30:ba:77:21:eb:9e:78:20:a1:86:05:7a:9c:1d:00:
                    5e:a5:21:75:c7:fb:54:5d:59:5d:af:59:a0:a5:61:
                    12:c1:08:62:ae:99:1b:da:8c:d7:55:b7:02:15:28:
                    ff:fd:84:9c:c5:63:e7:c2:d6:42:a1:8e:4b:3f:61:
                    17:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:77:D2:65:27:52:22:93:05:AF:ED:53:13:9E:E4:35:3A:31:6E:F7
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328223

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.208.16.0/22
                IPv6:
                  2c0f:5d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:e9:b7:ee:a1:2c:6d:6c:fd:53:4f:06:2c:81:b8:e4:7e:e6:
         4c:ed:0f:94:d7:28:b3:a2:7b:b8:f3:43:ca:6b:75:94:c1:c9:
         71:9f:0d:56:7a:ea:0f:c5:f1:f4:9b:dc:bc:0d:9b:17:e9:a4:
         c1:f6:d0:8e:84:8f:fb:3d:9e:1f:18:42:7a:7b:e1:9b:0e:12:
         d3:10:88:e3:f5:5c:03:2b:17:f0:79:9f:3d:12:8a:71:fc:c3:
         06:d9:49:ea:04:80:41:29:ad:fb:19:8e:01:a4:18:9e:62:21:
         8d:44:4f:38:03:6d:eb:58:f5:07:79:8c:e7:22:14:cf:94:e3:
         40:f7:08:4d:3d:45:6b:ab:2f:a7:be:2a:e8:6e:1c:cb:2b:76:
         41:b8:05:82:df:fb:df:ae:44:ae:a2:03:de:e7:d5:e1:a3:a2:
         cc:07:cc:d3:9c:8f:14:d0:02:13:ed:9b:a9:a8:9f:44:8e:aa:
         7f:4b:56:00:e7:11:7d:2b:b5:00:1f:61:fd:92:99:21:0e:ce:
         24:1e:0a:4d:c6:b2:ba:8b:f1:96:cb:c4:50:3c:ee:7f:aa:ad:
         51:0a:c7:bb:4a:0b:aa:5c:72:46:cd:e5:f9:78:b3:1d:b0:ae:
         35:9d:69:6e:23:95:39:8f:bd:d2:b0:15:bb:6d:e5:30:f2:42:
         55:72:18:9e
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICQlAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjA5MTQxMTM3MzFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjg5NEI4QUYxMTAvBgNVBAUTKDZCNzdEMjY1Mjc1MjIyOTMwNUFGRUQ1
MzEzOUVFNDM1M0EzMTZFRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDgSSFGoFNHbAYTqCsRQBUN4wXKmwYEmMwY1xSfmFm19t9arOeNPCv49p6ICMWe
obldwRldSehBOZ9PDX5+XH6gbZOKcjfuOPQnvYHUpUMpxwd4h8YZoVW/BqL9Lznp
hEhPushJizHrvZe+V2SLdL7Tc9sc+rWJVb6STrjyKH4w1guKzrncDHAaf7tntw0q
9Mu3QwdwB3JWj+t/Dg+MD3L3g0uyoRCd8Bb5WV9sVmKyPoaZVU25wu/n4BVUCv30
abn5ZjC6dyHrnnggoYYFepwdAF6lIXXH+1RdWV2vWaClYRLBCGKumRvajNdVtwIV
KP/9hJzFY+fC1kKhjks/YRctAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUa3fSZSdS
IpMFr+1TE57kNToxbvcwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4OTRCOC9BNjcyQ0ZGMkIwMzAx
MUYxQTAxMTFGQ0JDRTFEMzhCMC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODk0QjgvQTY3MkNGRjJCMDMwMTFGMUEwMTExRkNCQ0UxRDM4QjAvYTNmU1pT
ZFNJcE1Gci0xVEU1N2tOVG94YnZjLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAh8wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm0BAwDQQCAAIwBwMF
ACwPXYAwDQYJKoZIhvcNAQELBQADggEBAHvpt+6hLG1s/VNPBiyBuOR+5kztD5TX
KLOie7jzQ8prdZTByXGfDVZ66g/F8fSb3LwNmxfppMH20I6Ej/s9nh8YQnp74ZsO
EtMQiOP1XAMrF/B5nz0SinH8wwbZSeoEgEEprfsZjgGkGJ5iIY1ETzgDbetY9Qd5
jOciFM+U40D3CE09RWurL6e+KuhuHMsrdkG4BYLf+9+uRK6iA97n1eGjoswHzNOc
jxTQAhPtm6mon0SOqn9LVgDnEX0rtQAfYf2SmSEOziQeCk3GsrqL8ZbLxFA87n+q
rVEKx7tKC6pcckbN5fl4sx2wrjWdaW4jlTmPvdKwFbtt5TDyQlVyGJ4=
-----END CERTIFICATE-----