RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer (download)

Subject key identifier:   02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 36985
    1: IP: 41.77.56.0/21
    2: IP: 41.223.172.0/22
    3: IP: 154.66.64.0/20

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5382 (0x1506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:07:05 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36252A7AF/serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:ab:8b:14:ea:e3:a5:a6:de:cb:ca:78:2a:
                    57:73:0c:19:03:0d:93:1a:0d:fe:31:32:2d:2f:1f:
                    f7:6c:47:e2:53:65:ca:c2:23:6c:28:50:37:24:72:
                    02:fc:af:9e:1e:d6:a3:a5:64:d8:c7:ef:cb:94:4c:
                    4c:e2:26:d3:48:aa:80:ea:b4:8d:41:83:83:35:c2:
                    0f:9b:c1:55:17:f1:b4:aa:00:9a:9d:ab:e8:27:44:
                    25:01:5f:eb:ed:f2:33:b8:32:81:cc:59:50:d6:d5:
                    2e:08:eb:2a:41:ad:da:9f:a0:63:06:41:5d:0b:15:
                    29:10:77:38:14:a4:3c:ed:8a:c6:06:98:a8:e1:34:
                    9f:fe:6e:98:62:ee:2c:4c:8e:fe:07:fd:0c:ed:f7:
                    63:c7:18:3a:4e:7b:d3:6d:60:4f:4f:7d:d8:bc:1b:
                    65:3a:3b:21:de:3c:74:ca:fb:16:b2:64:dc:13:5d:
                    0f:af:d4:ca:55:f7:17:d6:9e:5e:4b:88:65:b5:4d:
                    27:c5:6a:91:4a:50:77:4a:5e:1a:00:6e:c8:c9:f9:
                    51:f6:de:c6:79:bf:dd:f5:bd:70:2a:ac:c5:49:46:
                    bc:82:1f:7f:cf:9c:01:4f:0f:3f:38:81:04:5e:c9:
                    42:9c:12:ef:1b:fb:f0:88:96:a7:8b:44:31:36:e8:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36985

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.77.56.0/21
                  41.223.172.0/22
                  154.66.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:e6:40:53:eb:db:e1:b0:9e:40:a7:27:18:33:3f:e6:d4:1b:
         fc:5e:eb:01:ab:99:4f:a7:4d:5f:be:70:24:16:f6:9f:01:92:
         fa:01:89:f2:2b:50:10:15:e7:1c:37:c5:72:3a:12:9f:a7:19:
         ba:1a:31:fa:b8:3f:b0:e6:14:7a:9b:d9:c9:07:99:17:e5:62:
         3a:9c:e1:4a:3a:94:b7:14:ad:61:36:8a:4e:13:f0:8f:35:19:
         70:15:06:89:28:57:93:39:90:dc:7c:26:cb:73:d7:d9:49:89:
         af:df:46:a3:a0:6c:bf:09:a6:40:ca:f3:6f:73:a9:3b:c2:82:
         06:c8:31:16:2d:0f:4a:72:47:11:1c:75:95:8f:ba:9d:55:e5:
         b9:48:5b:42:c5:42:33:3d:db:5f:a6:2e:1c:dc:65:c1:08:79:
         de:b1:11:78:42:08:03:36:14:4c:d7:03:26:2b:53:81:71:2a:
         c2:1d:7a:18:6f:fa:ad:5c:51:ad:fc:00:fd:ce:ab:6f:02:a2:
         c5:ea:44:2c:de:54:b9:69:a8:a8:3b:b1:c0:9a:0d:30:09:79:
         b2:ce:71:b9:de:be:da:63:06:6d:34:f2:c3:89:bd:b1:e6:53:
         d4:56:ff:40:bb:77:43:e4:b0:7e:d4:5a:17:bc:73:77:c4:2d:
         1c:3e:91:24
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgICFQYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yMjAxMDEwMDA3MDVaFw0yMzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMMCkYzNjI1MkE3QUYxMTAvBgNVBAUTKDAyN0UxQTQ0NjNDNjg1RkJENjM4NjNG
OUQzQjIzQkFDMkQ5M0IxNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCuvquLFOrjpabey8p4KldzDBkDDZMaDf4xMi0vH/dsR+JTZcrCI2woUDckcgL8
r54e1qOlZNjH78uUTEziJtNIqoDqtI1Bg4M1wg+bwVUX8bSqAJqdq+gnRCUBX+vt
8jO4MoHMWVDW1S4I6ypBrdqfoGMGQV0LFSkQdzgUpDztisYGmKjhNJ/+bphi7ixM
jv4H/Qzt92PHGDpOe9NtYE9Pfdi8G2U6OyHePHTK+xayZNwTXQ+v1MpV9xfWnl5L
iGW1TSfFapFKUHdKXhoAbsjJ+VH23sZ5v931vXAqrMVJRryCH3/PnAFPDz84gQRe
yUKcEu8b+/CIlqeLRDE26FytAgMBAAGjggMXMIIDEzAdBgNVHQ4EFgQUAn4aRGPG
hfvWOGP507I7rC2TsWgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyNTJBNy84OTQ5N0E2MEUzODMx
MUU5OUU1NUY1ODVGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjUyQTcvODk0OTdBNjBFMzgzMTFFOTlFNTVGNTg1RjhBRUEyMjgvQW40YVJH
UEdoZnZXT0dQNTA3STdyQzJUc1dnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkHkwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAMpTTgDBAIp36wDBASa
QkAwDQYJKoZIhvcNAQELBQADggEBAAPmQFPr2+GwnkCnJxgzP+bUG/xe6wGrmU+n
TV++cCQW9p8BkvoBifIrUBAV5xw3xXI6Ep+nGboaMfq4P7DmFHqb2ckHmRflYjqc
4Uo6lLcUrWE2ik4T8I81GXAVBokoV5M5kNx8Jstz19lJia/fRqOgbL8JpkDK829z
qTvCggbIMRYtD0pyRxEcdZWPup1V5blIW0LFQjM921+mLhzcZcEIed6xEXhCCAM2
FEzXAyYrU4FxKsIdehhv+q1cUa38AP3Oq28CosXqRCzeVLlpqKg7scCaDTAJebLO
cbnevtpjBm008sOJvbHmU9RW/0C7d0PksH7UWhe8c3fELRw+kSQ=
-----END CERTIFICATE-----

Generated at Sat Jan 1 01:44:31 2022 by LibreSSL & rpki-client.