RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer (download)

Subject key identifier:   88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 327750
    2: AS: 328047
    3: AS: 328101
    1: IP: 102.23.224.0/19
    2: IP: 102.69.248.0/21
    3: IP: 102.164.192.0/19
    4: IP: 154.126.192.0/19
    5: IP: 2c0f:f368::/32
    6: IP: 2c0f:f4e8::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5364 (0x14f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:05:16 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d6:1f:6a:4b:06:73:30:c4:c5:da:ce:e5:72:
                    7d:cb:db:bf:a7:41:ea:ea:f9:d2:f0:26:ef:fa:4b:
                    83:fe:b8:01:3d:94:c5:12:7b:c1:01:79:cd:9c:25:
                    cf:8b:f4:7d:14:83:ae:2f:ab:71:a1:a5:31:73:10:
                    af:40:e4:eb:4e:83:f5:c1:7a:57:c8:24:36:f8:27:
                    08:94:aa:0f:8a:28:60:ea:64:9d:9c:d9:b4:2e:d9:
                    be:b6:d1:64:91:81:8b:c8:e6:49:9a:e9:af:f9:35:
                    ac:40:85:e7:39:90:b2:ab:3a:fb:58:66:90:30:9a:
                    74:7e:88:4e:64:3b:49:96:fe:01:e0:45:80:48:9c:
                    e5:88:69:7e:1a:15:54:7f:ed:d0:5e:97:a6:4a:63:
                    67:f6:86:b1:f9:64:be:a4:38:ff:f2:09:a6:74:8f:
                    e6:a0:97:f7:9d:80:d7:b4:17:a9:6c:53:99:c4:ae:
                    af:a2:41:fb:f1:b6:6d:49:b2:21:05:ae:bf:60:b1:
                    94:82:ce:f1:a6:b3:91:3b:46:a6:3c:ee:49:3f:86:
                    b1:63:32:8d:c6:eb:d5:59:ea:8d:5d:28:0c:26:84:
                    54:c6:08:d7:dc:51:d2:97:8b:ff:73:77:67:0f:fe:
                    2b:15:03:9a:7d:ff:bd:d1:8f:9e:d8:15:6e:59:0f:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327750
                  328047
                  328101

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.23.224.0/19
                  102.69.248.0/21
                  102.164.192.0/19
                  154.126.192.0/19
                IPv6:
                  2c0f:f368::/32
                  2c0f:f4e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:4a:41:44:f0:9b:b2:ab:09:aa:e8:c2:f2:e2:1c:db:04:05:
         30:02:64:57:12:d8:65:66:cc:81:b5:d1:44:78:b3:56:74:93:
         a6:c9:15:1e:0c:9b:59:c3:f4:9d:96:87:d4:bf:af:e4:59:65:
         41:37:a4:3f:9a:79:14:11:ca:eb:f9:d7:59:e2:f4:ba:24:e6:
         ee:b6:81:13:09:80:42:8b:23:c6:45:66:50:af:7e:fc:3a:65:
         1d:ca:e8:ad:5b:1b:74:b3:5f:e8:61:94:3e:eb:89:a7:34:27:
         0d:c1:d1:11:60:df:88:39:d6:01:70:26:32:2d:ae:2a:58:c1:
         19:d9:81:c6:1d:7d:7e:a8:a9:dc:a1:23:68:4a:9b:56:2e:bf:
         44:c0:8e:ed:d6:86:aa:70:63:a6:3a:f2:b7:4d:93:16:3d:74:
         60:4e:1d:9f:85:43:0d:65:90:ed:fb:5b:ad:a8:d9:05:4d:d8:
         18:5b:9d:ef:0a:03:5a:aa:7c:3b:6c:a0:13:e3:57:33:c7:f8:
         f6:e6:71:7c:55:7a:9b:a2:7a:d8:c3:19:b1:50:02:96:b8:67:
         06:00:df:57:5f:84:87:b9:c1:8a:ff:29:12:fb:93:cc:89:90:
         71:6d:41:05:a9:c7:83:b5:bd:17:dc:9a:d5:af:e6:18:92:af:
         c5:e4:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 01:44:36 2022 by LibreSSL & rpki-client.