Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
File:                     rF31MEgJu3g-uWISaVigB4bo9nw.cer (raw, json)
Hash identifier:          bBupJsU3JYn9dpiD8dKahMKGrGOaOHcq+dcFPbmm9is=
Subject key identifier:   AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4222
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 08 Sep 2026 13:25:32 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 15399
                          AS: 16907
                          IP: 41.212.0.0/17
                          IP: 102.140.192.0/18
                          IP: 102.214.16.0/22
                          IP: 102.214.156.0/22
                          IP: 102.215.188.0/22
                          IP: 102.219.248.0/22
                          IP: 102.222.220.0/22
                          IP: 154.70.0.0/18
                          IP: 196.200.32.0/20
                          IP: 196.207.128.0/18
                          IP: 197.237.0.0/16
                          IP: 2c0f:fef8::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16930 (0x4222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep  8 13:25:32 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36724C2AF, serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:94:5a:49:3f:93:67:a2:6f:cb:6f:0f:84:
                    90:18:1f:f4:26:a8:c7:1e:17:fa:32:a8:36:e2:7a:
                    e3:27:64:10:f6:4a:4b:2d:50:08:72:d7:44:af:0d:
                    79:2e:ae:86:fc:59:ca:c0:ee:cd:df:70:a3:b8:07:
                    de:6c:40:9b:21:51:fd:77:5d:c0:d4:bd:d3:36:ee:
                    78:cf:b2:dd:ec:74:7a:18:00:8a:c2:5f:46:12:85:
                    8c:28:a4:37:ad:ae:4f:e1:8c:b2:2a:37:04:ee:2a:
                    ad:49:7a:43:df:8e:d3:d3:fc:ff:59:fb:90:59:98:
                    9d:86:7b:6a:c5:9d:77:ef:04:84:e7:94:0b:ac:0c:
                    83:26:d8:57:bc:76:84:23:b9:aa:2d:da:74:ad:20:
                    f2:bf:55:ed:5f:db:fd:02:aa:17:46:13:7e:d4:f9:
                    44:04:00:3b:0a:11:d5:94:6c:91:dd:37:d7:e4:63:
                    cb:6f:2b:a0:64:a0:a4:d4:cc:42:13:5e:4e:fc:d3:
                    1d:ae:68:89:6a:02:54:ba:b7:9f:c3:22:f8:45:d7:
                    69:ff:d9:a4:db:d4:a5:6e:8c:b3:97:11:c2:ec:cc:
                    04:ce:3f:44:7d:18:db:0b:f0:29:9e:b5:8e:29:4e:
                    30:8f:0d:07:1a:0e:be:f0:2b:ba:62:5d:14:dc:c4:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15399
                  16907

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.212.0.0/17
                  102.140.192.0/18
                  102.214.16.0/22
                  102.214.156.0/22
                  102.215.188.0/22
                  102.219.248.0/22
                  102.222.220.0/22
                  154.70.0.0/18
                  196.200.32.0/20
                  196.207.128.0/18
                  197.237.0.0/16
                IPv6:
                  2c0f:fef8::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:f0:07:b7:45:24:fa:4c:d2:0d:c4:03:30:cb:37:38:09:c8:
         80:2b:b8:bc:7a:f5:ec:0a:9c:55:1a:85:20:b9:60:76:31:68:
         ae:1b:17:d8:df:cc:23:a0:9f:51:1d:1e:a7:e2:29:0c:3d:4f:
         bd:0a:ca:31:73:40:eb:73:24:b5:33:80:8b:fe:62:26:13:b0:
         43:33:d2:75:62:73:a7:2e:2b:87:d2:b4:a1:a2:be:5f:88:bf:
         5c:75:a0:15:ae:14:c7:66:be:e0:5e:51:9e:87:a0:15:9c:3a:
         29:22:e1:32:05:1b:f6:17:96:8c:12:08:3e:ab:0b:08:a6:99:
         ad:8f:35:62:c2:4a:07:dc:18:60:cd:ed:04:53:28:77:a3:1d:
         82:74:4e:6e:45:b8:a5:0f:d8:9e:98:d6:dc:9e:db:75:51:02:
         e5:55:bc:e5:07:92:12:4d:08:57:49:ba:1f:a5:f5:f0:84:38:
         ae:d0:b3:38:f9:fc:cd:c4:26:a3:7d:01:54:23:cd:47:38:2f:
         a4:78:9e:ee:67:d1:5d:1a:ee:73:2f:63:90:13:c5:a1:f7:86:
         8a:01:44:2d:a1:2f:c6:15:36:00:3a:4e:1d:47:2f:85:96:3d:
         af:d5:10:29:ad:1c:8f:c0:92:d0:cd:b5:7a:99:9e:c6:50:45:
         23:00:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:39:38 2026 by rpki-client