RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/8l68ZgBmADqfrAAUrO-1ScuQsFw.cer (download)

Subject key identifier:   F2:5E:BC:66:00:66:00:3A:9F:AC:00:14:AC:EF:B5:49:CB:90:B0:5C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F366473B/57C2AA549E2611E98FC5C716F8AEA228/8l68ZgBmADqfrAAUrO-1ScuQsFw.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F366473B/57C2AA549E2611E98FC5C716F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 36953
    1: IP: 154.119.32.0/19
    2: IP: 196.201.6.0/23
    3: IP: 2c0f:f4b0::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/8l68ZgBmADqfrAAUrO-1ScuQsFw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5566 (0x15be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:25:24 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F366473BAF/serialNumber=F25EBC660066003A9FAC0014ACEFB549CB90B05C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8c:4d:8a:79:cd:0e:6a:5b:ba:45:36:ab:25:
                    a5:ec:61:ef:33:95:ee:28:6c:7e:db:b8:fa:95:9e:
                    b6:20:97:a1:d4:63:2b:bc:39:2b:9b:70:72:55:67:
                    a5:60:f6:32:aa:81:d4:8d:fc:57:f7:b8:ac:d2:61:
                    08:38:3d:4f:73:48:95:98:bf:9a:5a:25:b9:54:99:
                    f9:15:3e:40:8b:cb:79:14:c6:d7:a2:b6:6b:37:ff:
                    9a:1e:cc:c0:63:74:da:f9:ec:ba:5c:08:2d:be:95:
                    42:4e:a1:d3:a9:46:3b:4d:9b:1b:fd:c6:6e:5a:9a:
                    d3:f7:b7:9a:c8:39:64:95:ff:fb:e8:64:ff:f3:93:
                    62:bf:79:30:c8:fb:ea:7c:dc:72:5f:11:4b:ce:a5:
                    9c:4d:e0:0d:3a:6f:d3:cf:ce:d1:16:a0:5d:e4:9c:
                    6c:ae:a3:a6:9c:80:84:66:b5:d5:4b:54:c5:ae:1b:
                    69:ea:d7:1b:e9:24:b0:90:47:c3:d5:cb:5b:39:14:
                    a3:19:2b:1e:ad:d8:50:a3:d0:77:8b:3a:30:49:9c:
                    ce:e5:74:d5:e6:a9:1c:60:a3:f0:95:77:32:2e:cc:
                    96:76:92:97:0b:48:4f:32:c4:0f:8e:8b:24:f6:e4:
                    27:3e:f8:8b:ee:7a:12:5d:f2:f1:55:d4:df:85:aa:
                    ba:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F2:5E:BC:66:00:66:00:3A:9F:AC:00:14:AC:EF:B5:49:CB:90:B0:5C
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366473B/57C2AA549E2611E98FC5C716F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366473B/57C2AA549E2611E98FC5C716F8AEA228/8l68ZgBmADqfrAAUrO-1ScuQsFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36953

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.119.32.0/19
                  196.201.6.0/23
                IPv6:
                  2c0f:f4b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:ea:b4:0f:1f:45:0e:20:63:aa:74:0f:66:7b:d5:51:d1:77:
         c6:fb:14:08:d4:14:d3:71:a6:39:6e:6c:02:5c:55:b1:13:9c:
         9f:4f:2c:55:c2:24:6f:3c:09:82:65:89:f9:47:ea:a3:17:6d:
         c8:07:92:c5:75:94:77:8c:75:27:2a:78:c9:a9:bb:10:8f:9a:
         fa:46:e4:07:4d:f0:13:c9:f2:b4:36:c4:b5:8e:cb:8a:46:74:
         18:51:29:b9:87:fa:0f:5d:af:99:4e:53:bd:5a:27:6f:62:47:
         7e:a1:27:64:fe:8f:62:8d:dd:e7:d4:7a:c3:2f:ec:1e:75:26:
         10:c3:a5:1c:5d:13:05:bb:2f:f6:71:c1:ae:11:f5:c4:64:39:
         95:5e:11:cc:00:67:1c:a7:a3:ec:4a:f8:c2:69:27:44:5f:e0:
         ac:91:99:9d:b4:eb:7f:c6:cb:55:81:5f:41:dd:af:bd:61:a1:
         6c:06:6d:bd:40:82:7f:1d:11:4e:de:f5:4b:72:ef:c3:88:30:
         4e:35:17:1c:77:99:67:5f:69:8b:ea:3e:7e:af:51:6f:2b:a8:
         5f:04:bf:49:88:49:36:71:f4:8c:a9:4b:39:45:3c:f0:e7:68:
         4c:a4:9b:78:72:28:94:fc:6d:65:4f:2d:b3:d6:b5:04:be:b7:
         e3:75:d3:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Sat Jan 1 03:21:55 2022 by LibreSSL & rpki-client.