Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/mEV0BD2Rr0AoJ7faTJkk9FbOSt4.cer
File:                     mEV0BD2Rr0AoJ7faTJkk9FbOSt4.cer (raw, json)
Hash identifier:          v5RTrd7BadfOG4EEIXD1CkcukYgn9XCgcIhUrvZ6JmE=
Subject key identifier:   98:45:74:04:3D:91:AF:40:28:27:B7:DA:4C:99:24:F4:56:CE:4A:DE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       363A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36140BE/460BB22890C911F0B205E2A2DAE4EC9C/mEV0BD2Rr0AoJ7faTJkk9FbOSt4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36140BE/460BB22890C911F0B205E2A2DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Sat 13 Sep 2025 17:44:26 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329539
                          IP: 102.205.216.0/22
                          IP: 2c0f:5fc0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 05:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13882 (0x363a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep 13 17:44:26 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36140BEAF, serialNumber=984574043D91AF402827B7DA4C9924F456CE4ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:93:5b:e6:47:57:86:22:dd:c1:5a:e3:89:
                    0a:1a:a5:ad:71:32:e2:04:b7:c7:2d:73:da:6c:a9:
                    6f:0c:dd:34:14:60:9e:7d:e4:5f:79:96:17:e2:28:
                    89:98:9b:7f:f4:5a:78:28:fd:0b:94:a1:f0:84:05:
                    f1:fe:6e:74:00:dd:54:89:3b:da:21:ff:9f:d2:2d:
                    85:0f:d2:00:73:2b:88:bb:e7:59:2d:2d:d8:4d:f9:
                    94:85:cf:e4:5a:bf:10:3c:7f:fc:70:e9:52:d0:2a:
                    45:74:57:c7:a3:64:21:62:bb:00:5d:a1:46:29:ff:
                    cd:ad:17:24:5c:05:75:68:e2:91:37:27:20:95:16:
                    03:66:ed:0f:48:62:3b:9d:73:19:6c:1d:7f:5d:44:
                    fe:01:64:6b:b1:92:d9:50:90:9a:bd:b0:76:80:89:
                    7e:bc:43:9a:b3:c7:6a:2b:1d:24:aa:02:d3:96:48:
                    84:b0:1a:b1:0a:3f:1a:2e:63:80:c1:e6:0b:6f:ba:
                    16:70:54:a3:3e:df:47:07:da:4f:93:70:07:1b:e9:
                    6d:5e:ff:d2:34:5d:56:63:b2:fb:82:c3:3f:9e:08:
                    ae:ea:57:20:8e:6e:4e:3f:6a:01:f2:09:6f:41:41:
                    07:1a:8b:5d:c8:cb:33:c4:b1:ca:85:a9:96:47:c4:
                    82:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:45:74:04:3D:91:AF:40:28:27:B7:DA:4C:99:24:F4:56:CE:4A:DE
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36140BE/460BB22890C911F0B205E2A2DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36140BE/460BB22890C911F0B205E2A2DAE4EC9C/mEV0BD2Rr0AoJ7faTJkk9FbOSt4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329539

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.216.0/22
                IPv6:
                  2c0f:5fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:05:38:71:0a:01:f1:c2:79:00:6b:18:07:33:5f:65:0e:71:
         25:94:c2:15:82:0d:e3:92:43:47:95:50:1c:d8:7c:12:2b:90:
         51:55:47:8b:ce:02:10:7a:9a:8e:2e:bd:26:ef:67:0a:1c:b4:
         08:d4:e5:18:c7:b9:1e:f4:1c:6c:25:f1:71:00:63:83:8a:16:
         76:ac:fa:a8:b0:4e:99:87:8a:4f:17:d7:6e:28:19:62:eb:83:
         19:89:cb:d2:93:8a:5b:a8:26:ea:52:ec:0b:d8:c5:fe:b4:ea:
         21:af:3d:9e:3c:a9:3b:09:47:62:3d:4a:54:1e:a0:3d:20:ff:
         ff:f8:34:d4:6b:1d:c5:d9:bc:20:3b:1c:14:bf:5c:db:85:a8:
         95:48:6b:ef:8c:a2:20:2c:50:a0:7e:ff:7c:2b:dd:df:93:6e:
         cc:7c:a1:40:69:99:79:20:b9:3c:35:5f:ce:36:ad:e0:bb:82:
         59:4c:e0:31:f3:5f:b1:14:86:b7:f6:d8:27:4c:8a:04:9c:05:
         93:f7:44:4b:8d:42:e3:06:a6:2a:55:bc:4d:5c:52:54:7e:1f:
         b7:14:b1:56:d7:2a:90:a5:a0:c0:45:27:c8:cd:61:c6:37:b6:
         fc:da:50:59:88:a0:d0:0e:1b:61:4d:fc:ff:4b:44:20:cb:50:
         14:5c:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----