Certificate
$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/q8dHcDs8OmElBW0TmYePr4S5kLk.cer
File: q8dHcDs8OmElBW0TmYePr4S5kLk.cer (raw, json)
Hash identifier: qxCemACypD0M2oZ4mtz35Gj60YW4gAoQHZ5t/zUqdpA=
Subject key identifier: AB:C7:47:70:3B:3C:3A:61:25:05:6D:13:99:87:8F:AF:84:B9:90:B9
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 4288
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/q8dHcDs8OmElBW0TmYePr4S5kLk.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Fri 25 Sep 2026 19:44:39 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 23549
AS: 36901
IP: 41.220.0.0/20
IP: 41.220.208.0/20
IP: 2c0f:59c0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 25 Oct 2026 09:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17032 (0x4288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Sep 25 19:44:39 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F361A88EAF, serialNumber=ABC747703B3C3A6125056D1399878FAF84B990B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:3f:97:b3:fa:cc:4d:b3:7a:b5:f8:7d:52:
c0:73:57:d5:33:ba:26:be:5c:97:a4:d3:f1:26:22:
d9:fd:fe:dd:af:89:6e:0c:5b:d1:a8:c3:b0:d8:3f:
c7:47:de:db:0c:b0:f3:71:0f:40:38:cf:a3:a4:43:
9f:79:16:ad:ab:ae:03:7f:0c:19:08:2c:f8:2a:c5:
c9:13:0c:4a:fb:85:d4:05:13:b6:0c:4d:21:86:b9:
3d:13:cf:f7:71:db:44:4a:9f:40:cb:69:4b:1b:fc:
ea:5c:9b:66:a4:6d:4a:69:55:9f:cf:84:52:8c:e4:
c4:b3:7a:4b:ef:07:3f:f3:7d:0a:32:67:04:c0:15:
f6:1c:7a:bd:21:b1:5a:48:5c:62:55:56:a8:97:06:
72:fb:a3:16:5f:c4:11:6e:e8:3c:97:b6:79:45:c4:
d8:0a:6c:85:18:a4:10:4e:0d:14:76:24:69:97:25:
41:44:84:44:38:34:b1:f1:b6:af:78:4e:ae:6b:c0:
6a:c0:db:8f:24:bf:44:da:75:4e:b7:57:1e:86:74:
0b:a9:dd:bb:5d:31:af:b0:8f:5c:ba:e1:74:45:6b:
de:59:f5:e7:2d:c3:8d:e6:5c:21:e0:8b:86:db:4f:
cf:a9:4f:75:6e:bb:1a:d7:f1:48:91:f1:6b:35:35:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C7:47:70:3B:3C:3A:61:25:05:6D:13:99:87:8F:AF:84:B9:90:B9
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/q8dHcDs8OmElBW0TmYePr4S5kLk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23549
36901
sbgp-ipAddrBlock: critical
IPv4:
41.220.0.0/20
41.220.208.0/20
IPv6:
2c0f:59c0::/32
Signature Algorithm: sha256WithRSAEncryption
78:ba:36:46:8e:70:12:0e:49:ff:8c:de:34:96:e3:f8:73:fb:
d8:8a:c7:48:89:2d:df:0f:ad:ad:a3:67:a1:74:72:59:aa:12:
dd:75:cf:d4:97:cc:3d:7f:07:80:0b:89:11:12:a6:d1:c7:34:
f9:44:d0:aa:2f:2e:c6:9d:bf:e9:bc:9e:38:f1:c3:15:86:d9:
f9:2b:51:34:ad:6f:78:6c:72:c7:e5:e8:36:92:16:bc:c9:ba:
12:7d:a2:ec:2f:ed:c6:c3:db:ed:6b:b1:a6:df:c3:7f:e5:eb:
eb:2e:70:a3:68:b0:21:2b:e7:99:65:6d:0a:4c:7c:ac:07:57:
d3:7f:df:56:c1:c7:30:a4:61:a6:32:d6:69:8d:43:00:5c:28:
28:1f:98:ca:78:55:5e:91:3e:b0:46:66:53:94:4d:8f:4d:da:
51:de:f4:01:ab:76:48:c3:d7:59:7e:e0:25:01:95:b6:d8:a3:
7d:9d:4e:ce:d6:2a:a8:41:48:63:4d:01:ba:a2:8b:d6:0d:8a:
f1:78:b4:c1:0c:9b:a8:13:cd:5b:4a:12:31:95:df:38:db:61:
3f:94:13:59:f4:17:20:8a:0a:85:98:0d:ad:9a:8e:08:3b:5f:
39:04:95:c0:3e:43:a9:ce:96:87:be:16:13:99:4d:ec:be:1c:
4e:22:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 18:50:14 2026 by rpki-client