Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/aQoBi0Pk6yF6DApLdmMnY8piBic.cer
File:                     aQoBi0Pk6yF6DApLdmMnY8piBic.cer (raw, json)
Hash identifier:          z442mnVts7gw0KM7osJ/lkzisMQMGznj5el9V4zCbbc=
Subject key identifier:   69:0A:01:8B:43:E4:EB:21:7A:0C:0A:4B:76:63:27:63:CA:62:06:27
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4276
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 23 Sep 2026 13:58:01 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329795
                          IP: 102.201.132.0/22
                          IP: 2c0f:53a0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 09:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17014 (0x4276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep 23 13:58:01 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F362AEDFAF, serialNumber=690A018B43E4EB217A0C0A4B76632763CA620627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ee:92:36:44:61:e9:e9:e7:d4:ed:c5:76:43:
                    3f:fe:ff:6c:b2:54:bc:7e:bd:39:80:b9:28:fc:4a:
                    94:2c:86:81:c4:2b:2d:f0:12:c8:e6:82:5b:82:e8:
                    d5:61:10:1e:3b:3f:6f:f9:a3:3a:ad:e6:83:25:65:
                    15:bb:58:d0:22:41:72:14:4d:0f:16:85:a5:33:50:
                    08:7c:2b:bd:7f:78:b6:55:8d:e5:be:46:0d:35:80:
                    32:80:6f:e3:8c:8f:90:35:29:63:d1:bb:9d:d8:5c:
                    a7:43:ad:1f:10:78:fd:e8:d5:6b:9c:c3:3d:5b:9e:
                    0d:d8:b6:d9:83:26:eb:88:be:09:2d:36:e7:96:28:
                    88:28:c1:54:99:f2:46:b0:b8:d6:ad:58:b0:0c:d8:
                    76:f4:9b:bb:42:1b:7e:20:7e:f6:5b:11:fc:ee:f6:
                    0d:22:e9:b5:37:6a:43:89:08:4b:8e:73:b9:e3:72:
                    a9:43:23:85:0b:e3:54:bd:03:a7:87:da:a8:5f:76:
                    23:03:c5:da:68:81:29:76:6d:e5:8e:7c:5e:3a:e8:
                    f3:0c:b6:33:fc:e2:a0:bc:31:fe:17:2b:bb:5a:6d:
                    0f:00:bb:64:51:75:96:be:c1:9c:2d:02:46:93:b5:
                    83:4a:31:5a:04:a7:67:5e:4c:9a:41:a0:0f:99:51:
                    31:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0A:01:8B:43:E4:EB:21:7A:0C:0A:4B:76:63:27:63:CA:62:06:27
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329795

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.132.0/22
                IPv6:
                  2c0f:53a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:89:b2:56:4e:fb:96:32:2e:35:2e:33:de:93:5d:f1:70:19:
         97:b0:20:36:89:a6:d4:0d:cb:92:80:f1:3c:cf:03:5f:bb:2b:
         82:d9:a8:1a:9f:75:37:31:01:63:b0:7c:70:cc:ed:f1:48:bc:
         b7:93:3c:7a:f6:70:99:cc:e6:28:75:69:bb:28:b2:7f:48:a6:
         23:86:1c:1e:45:3d:9f:45:9f:00:09:20:21:80:09:b5:53:80:
         63:04:6b:67:72:dc:4c:5e:e3:c7:9d:5c:7e:17:b4:15:be:95:
         c2:fe:ff:d9:4f:66:a6:9a:18:09:87:01:07:81:ee:d9:35:78:
         01:ce:24:d9:f7:98:4b:6f:a7:df:74:39:31:63:2a:92:d2:a2:
         44:01:06:06:c0:1b:ae:cc:cd:33:b6:be:b6:cb:03:6a:42:20:
         56:9c:6f:96:d2:99:d4:7a:bf:73:1d:9a:ab:06:34:44:19:bd:
         da:40:0b:e4:39:df:fa:54:0d:f8:7a:d7:f7:4b:48:18:aa:72:
         d4:61:97:9b:9d:5a:ce:c5:48:41:05:db:93:e2:2d:c0:37:f0:
         e5:ab:9a:61:ad:cc:5a:c9:d9:c1:8c:54:34:e5:ab:7b:f4:04:
         e4:ba:26:72:43:b3:0e:1c:05:10:0f:e1:b5:43:7b:16:e3:8a:
         e2:95:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 18:50:11 2026 by rpki-client