RPKI Certificate
Location:                 rsync/rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer (download)

Subject key identifier:   93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subordinate resources:
    1: AS: 33791
    2: AS: 37710
    3: AS: 37769
    4: AS: 37777--37779
    5: AS: 327844
    6: AS: 327852
    7: AS: 328022
    8: AS: 328294
    9: AS: 328325--328326
    10: AS: 328700
    1: IP: 102.223.0.0/24
    2: IP: 196.49.5.0/24
    3: IP: 196.49.12.0/24
    4: IP: 196.49.20.0/24
    5: IP: 196.49.50.0/24
    6: IP: 196.49.52.0/24
    7: IP: 196.49.54.0/24
    8: IP: 196.60.0.0/24
    9: IP: 196.60.48.0/24
    10: IP: 196.60.50.0/24
    11: IP: 196.60.52.0/24
    12: IP: 196.223.5.0--196.223.6.255
    13: IP: 2001:43f8::--2001:43f8:6:ffff:ffff:ffff:ffff:ffff
    14: IP: 2001:43f8:14d0::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4446 (0x115e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  3 09:02:25 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:41:88:b9:34:8c:68:93:69:2c:56:23:97:
                    50:7c:95:30:e7:83:af:e2:f4:fb:24:ac:9b:32:b8:
                    15:a2:67:25:14:9c:47:01:29:7f:da:1e:dc:55:4e:
                    98:3c:a6:01:b2:48:2b:cb:62:86:59:a5:0e:06:64:
                    ac:5e:bc:8c:e1:da:86:96:55:8a:ee:42:02:d7:48:
                    c9:77:6c:f7:0d:7a:02:19:30:35:ec:f1:36:04:5b:
                    fc:33:c2:f9:5e:20:fa:34:13:68:91:f2:78:9c:85:
                    ec:ad:31:f1:f2:92:6f:f6:e8:99:2e:07:e8:02:a3:
                    a1:2a:cb:c5:44:09:c5:67:eb:83:cb:f0:b5:4f:ef:
                    e8:a2:1b:77:33:09:4f:67:a8:7c:c7:eb:ae:01:39:
                    f7:3c:7d:f3:a0:81:d9:4b:d2:1d:02:11:ec:af:ca:
                    4c:f8:5f:1d:d3:2c:97:ad:5c:27:df:dd:37:93:58:
                    53:6f:8d:cb:ad:96:bf:51:2d:36:aa:a1:1d:b3:72:
                    0f:ea:22:fd:5d:8f:e2:6d:55:42:c4:6a:64:a0:26:
                    01:79:53:c0:d2:81:cb:b6:2e:55:eb:7b:1e:b9:d1:
                    25:e9:39:7f:4e:42:75:c6:22:6f:a3:2f:fa:d6:9e:
                    e5:2f:24:db:2c:5d:ed:78:c0:62:ff:00:69:e2:dc:
                    32:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft

            sbgp-autonomousSysNum: critical
                0D.B0@.........N.....0
........................V....f0
...............
            sbgp-ipAddrBlock: critical
                0{0V....0P...f......1.....1.....1.....12....14....16....<.....<0....<2....<40.............0!....0.0.... .C.... .C...... .C...
    Signature Algorithm: sha256WithRSAEncryption
         22:ae:b2:46:9e:a1:1f:2a:6f:55:70:05:38:d6:51:e5:8c:87:
         96:08:5a:c4:e5:11:01:d6:00:d3:db:1e:24:81:aa:ae:b5:2e:
         a3:d9:8b:de:80:0e:98:46:82:5e:2b:73:7e:e9:8f:fd:95:bf:
         69:8d:a0:3f:28:83:ec:56:c1:50:e3:17:85:a9:8e:86:05:b6:
         d7:c1:51:3a:12:e1:16:97:a6:38:4b:40:04:c6:2c:a3:44:22:
         75:2e:77:cd:e2:0b:86:d8:2c:89:e8:6e:46:ad:c8:43:d7:0f:
         d9:01:b9:72:7e:26:15:cf:8b:dd:eb:3d:4e:24:1a:2e:70:26:
         82:01:7e:75:0b:50:eb:50:ea:49:ee:46:3f:da:f2:88:97:3b:
         2e:66:6a:d6:7c:26:e4:f9:65:66:6c:54:fc:1b:51:e0:61:47:
         7e:cd:75:96:a1:b1:a3:4c:c0:19:b4:4b:6f:e7:eb:13:fe:8d:
         09:36:b0:69:a9:60:e1:de:a0:4f:a9:ac:8a:89:91:0b:58:e3:
         b4:ec:46:ea:60:2f:64:07:e6:02:a7:01:18:73:02:52:f9:26:
         cf:60:d9:fa:a8:ac:c9:62:d0:73:a7:0c:7a:06:79:7b:79:0f:
         b0:31:b1:27:17:ca:c6:4b:c2:d2:60:ca:63:c5:b8:ea:9e:18:
         92:53:4e:34
-----BEGIN CERTIFICATE-----
MIIGvzCCBaegAwIBAgICEV4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yMTAxMDMwOTAyMjVaFw0yMjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkZFQTZCQUYxMTAvBgNVBAUTKDkzQzJDOTlBRjBFQzREMUE0NjQzNDk3
RjVGOENCREM3RUM0NTc0OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNgEGIuTSMaJNpLFYjl1B8lTDng6/i9PskrJsyuBWiZyUUnEcBKX/aHtxVTpg8
pgGySCvLYoZZpQ4GZKxevIzh2oaWVYruQgLXSMl3bPcNegIZMDXs8TYEW/wzwvle
IPo0E2iR8nicheytMfHykm/26JkuB+gCo6Eqy8VECcVn64PL8LVP7+iiG3czCU9n
qHzH664BOfc8ffOggdlL0h0CEeyvykz4Xx3TLJetXCff3TeTWFNvjcutlr9RLTaq
oR2zcg/qIv1dj+JtVULEamSgJgF5U8DSgcu2LlXrex650SXpOX9OQnXGIm+jL/rW
nuUvJNssXe14wGL/AGni3DLLAgMBAAGjggO0MIIDsDAdBgNVHQ4EFgQUk8LJmvDs
TRpGQ0l/X4y9x+xFdI8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGRUE2Qi83QjI3OTIwRThCODIx
MUU5ODg4QjZGNzNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkVBNkIvN0IyNzkyMEU4QjgyMTFFOTg4OEI2RjczRjhBRUEyMjgvazhMSm12
RHNUUnBHUTBsX1g0eTl4LXhGZEk4Lm1mdDBVBggrBgEFBQcBCAEB/wRGMESgQjBA
AgMAg/8CAwCTTgIDAJOJMAoCAwCTkQIDAJOTAgMFAKQCAwUArAIDBQFWAgMFAmYw
CgIDBQKFAgMFAoYCAwUD/DCBjAYIKwYBBQUHAQcBAf8EfTB7MFYEAgABMFADBABm
3wADBADEMQUDBADEMQwDBADEMRQDBADEMTIDBADEMTQDBADEMTYDBADEPAADBADE
PDADBADEPDIDBADEPDQwDAMEAMTfBQMEAMTfBjAhBAIAAjAbMBADBQMgAUP4AwcA
IAFD+AAGAwcAIAFD+BTQMA0GCSqGSIb3DQEBCwUAA4IBAQAirrJGnqEfKm9VcAU4
1lHljIeWCFrE5REB1gDT2x4kgaqutS6j2YvegA6YRoJeK3N+6Y/9lb9pjaA/KIPs
VsFQ4xeFqY6GBbbXwVE6EuEWl6Y4S0AExiyjRCJ1LnfN4guG2CyJ6G5GrchD1w/Z
AblyfiYVz4vd6z1OJBoucCaCAX51C1DrUOpJ7kY/2vKIlzsuZmrWfCbk+WVmbFT8
G1HgYUd+zXWWobGjTMAZtEtv5+sT/o0JNrBpqWDh3qBPqayKiZELWOO07EbqYC9k
B+YCpwEYcwJS+SbPYNn6qKzJYtBzpwx6Bnl7eQ+wMbEnF8rGS8LSYMpjxbjqnhiS
U040
-----END CERTIFICATE-----

Generated at Fri Jul 30 01:33:41 2021 by LibreSSL & rpki-client.