RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer (download)

Subject key identifier:   31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 19676
    2: AS: 21280
    3: AS: 33768
    4: AS: 36942
    1: IP: 41.60.0.0/16
    2: IP: 41.72.192.0/19
    3: IP: 41.77.144.0/21
    4: IP: 41.79.132.0/22
    5: IP: 41.84.128.0/19
    6: IP: 41.160.0.0/12
    7: IP: 41.190.128.0/19
    8: IP: 41.191.224.0/21
    9: IP: 41.215.248.0/22
    10: IP: 41.216.96.0/19
    11: IP: 41.220.224.0/19
    12: IP: 41.222.0.0/21
    13: IP: 41.223.224.0/22
    14: IP: 154.120.192.0/18
    15: IP: 196.12.128.0/19
    16: IP: 196.27.96.0/19
    17: IP: 196.46.124.0/22
    18: IP: 196.201.1.0/24
    19: IP: 196.201.16.0/21
    20: IP: 196.201.228.0/22
    21: IP: 196.216.64.0/19
    22: IP: 197.155.64.0/19
    23: IP: 197.155.224.0/20
    24: IP: 197.211.192.0/18
    25: IP: 2001:4238::/32
    26: IP: 2001:42a8::/32
    27: IP: 2001:4328::/32
    28: IP: 2001:43b8::/32
    29: IP: 2c0f:f830::/32
    30: IP: 2c0f:f8f0::/32
    31: IP: 2c0f:fa10::/32
    32: IP: 2c0f:fe30::/32
    33: IP: 2c0f:fe40::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5576 (0x15c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:26:26 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:37:4b:7b:fc:f9:41:3e:68:f7:77:32:7a:
                    a9:de:58:b6:94:20:05:13:91:87:94:7d:b4:6e:4a:
                    26:e6:6b:1e:2f:57:8e:53:1a:6a:43:d3:88:ab:94:
                    20:db:7d:a3:c4:e1:64:91:5b:33:24:e7:59:36:d6:
                    fd:f3:60:03:22:71:9b:1a:37:cc:d3:9c:a2:5b:50:
                    fe:a3:6f:7c:38:8f:f9:53:0b:f0:a4:dc:2b:5b:7a:
                    6b:a7:1d:19:1b:63:36:2e:31:56:36:ff:26:22:83:
                    21:04:28:69:fe:70:5a:3c:e4:24:b7:f3:ba:c7:24:
                    8c:f3:01:99:af:6b:06:19:42:3d:01:44:bf:1a:5c:
                    02:82:27:1f:d2:3c:79:07:5c:5b:68:72:80:42:47:
                    9c:1e:b1:db:7b:21:46:07:59:d6:46:ed:bf:de:54:
                    8b:b9:d5:8e:58:b2:32:ea:82:0e:ad:3d:f0:75:b7:
                    48:55:80:b9:50:8a:39:86:37:e4:52:99:64:6c:a8:
                    68:35:46:b8:86:15:d1:ad:0f:b4:30:3a:10:a4:2e:
                    44:b5:be:f5:f1:25:ee:f6:3c:4f:21:33:c7:ec:a4:
                    ce:d5:ae:3f:01:8c:54:ad:d5:cf:43:fa:c6:dd:af:
                    b6:22:65:75:46:33:0b:a5:ce:39:d5:82:bc:ba:3b:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19676
                  21280
                  33768
                  36942

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.60.0.0/16
                  41.72.192.0/19
                  41.77.144.0/21
                  41.79.132.0/22
                  41.84.128.0/19
                  41.160.0.0/12
                  41.190.128.0/19
                  41.191.224.0/21
                  41.215.248.0/22
                  41.216.96.0/19
                  41.220.224.0/19
                  41.222.0.0/21
                  41.223.224.0/22
                  154.120.192.0/18
                  196.12.128.0/19
                  196.27.96.0/19
                  196.46.124.0/22
                  196.201.1.0/24
                  196.201.16.0/21
                  196.201.228.0/22
                  196.216.64.0/19
                  197.155.64.0/19
                  197.155.224.0/20
                  197.211.192.0/18
                IPv6:
                  2001:4238::/32
                  2001:42a8::/32
                  2001:4328::/32
                  2001:43b8::/32
                  2c0f:f830::/32
                  2c0f:f8f0::/32
                  2c0f:fa10::/32
                  2c0f:fe30::/32
                  2c0f:fe40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:75:42:63:d3:89:bc:9f:e3:c4:7e:31:c6:1d:85:a9:85:f7:
         56:b4:c5:79:01:c7:75:d9:18:af:c7:97:85:b7:df:45:db:e6:
         89:5d:61:c3:65:9e:a3:f0:3a:d7:5d:b9:f6:3d:df:c9:25:1d:
         fa:0c:5a:da:ee:0b:af:a1:77:46:bf:0a:8d:b5:22:14:c5:24:
         79:20:c4:24:2c:06:d1:52:f8:4a:8c:ea:83:40:46:75:84:92:
         22:56:2a:b2:d6:5c:a1:4f:db:0b:69:ec:23:c5:7b:18:e8:9f:
         47:d6:22:11:af:df:1c:97:6e:e7:fc:83:aa:1d:02:8d:57:79:
         0d:bb:d9:60:28:48:3a:70:8e:65:88:27:a7:9e:88:98:e6:95:
         74:c6:02:b7:69:e1:15:a4:3b:cc:4c:f3:6a:32:ec:84:c4:5c:
         86:6b:af:1c:a7:1e:ac:87:6e:60:fa:b1:2d:76:3b:f0:59:e7:
         59:85:39:7f:f6:64:b5:61:00:8b:51:0a:6f:f2:38:28:b9:d7:
         06:c5:87:f7:21:44:ff:77:62:50:dc:74:87:ad:be:0c:15:b9:
         e8:a1:04:96:9d:fb:c7:b1:ef:eb:6c:16:6d:47:75:ea:75:5a:
         f1:d9:25:b5:3d:1d:65:a0:df:b3:1a:6e:a2:2d:30:ca:3f:65:
         8a:c3:8e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 03:21:58 2022 by LibreSSL & rpki-client.