Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-g_6yHvTgP7bhzcer63RaQsq2C4.cer
File:                     -g_6yHvTgP7bhzcer63RaQsq2C4.cer (raw, json)
Hash identifier:          ZskKUJMNm1628AgurkxdMuQVO3ZckjIKaxajkux0Vl4=
Subject key identifier:   FA:0F:FA:C8:7B:D3:80:FE:DB:87:37:1E:AF:AD:D1:69:0B:2A:D8:2E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       35A5
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 17 Jul 2025 15:11:56 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329214
                          IP: 102.212.184.0/22
                          IP: 2001:43fe:9000::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13733 (0x35a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jul 17 15:11:56 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F363F154AF, serialNumber=FA0FFAC87BD380FEDB87371EAFADD1690B2AD82E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:7a:30:4e:cc:16:27:c9:8b:a8:9e:f2:da:
                    4a:8f:12:24:45:6a:19:b2:ad:a3:85:f6:5f:71:7b:
                    b4:d1:44:bf:a8:e5:1e:72:7a:2d:d5:db:6c:5e:a9:
                    ca:0d:f2:e0:9e:c1:50:22:d4:90:04:d3:0b:03:e7:
                    77:7c:14:05:a9:24:d5:d9:65:f4:9f:c8:d1:c4:bd:
                    22:ae:9e:37:23:cc:25:34:36:ba:db:22:ac:57:09:
                    9e:d8:f8:d6:4a:1f:fa:3a:08:02:01:2e:b6:ed:07:
                    68:e4:5b:52:d4:29:ae:a8:40:74:6d:03:ca:67:58:
                    87:59:e0:6e:5a:b1:10:d5:57:f2:e5:17:f1:e6:32:
                    18:b6:cd:2d:32:34:5b:d0:59:26:8c:93:cf:d3:db:
                    9b:3f:14:1e:6e:3e:77:07:d6:72:90:0a:0e:13:ef:
                    1c:9f:f3:15:fc:d5:73:d1:6b:7a:2b:41:a6:b9:6d:
                    4a:72:6c:b0:a9:71:2a:9a:0b:90:8e:a7:97:42:bd:
                    ca:30:3b:2b:ba:69:8e:5b:c4:ad:57:57:5b:c5:58:
                    f6:ce:6f:50:e5:c6:81:df:93:92:c4:7b:6c:d7:1f:
                    39:95:21:77:92:72:a8:ed:8a:81:cf:09:f8:0d:2d:
                    b7:f2:e5:8b:b2:66:a7:7e:5d:7c:b7:56:42:00:1d:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0F:FA:C8:7B:D3:80:FE:DB:87:37:1E:AF:AD:D1:69:0B:2A:D8:2E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329214

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.184.0/22
                IPv6:
                  2001:43fe:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:72:f8:91:f7:49:49:13:00:8a:e3:9c:f4:fb:43:80:4d:27:
         22:fe:39:1c:b1:ca:7b:df:98:77:21:57:1f:68:d3:00:f6:bd:
         59:09:9a:4a:8b:f2:a2:c6:8a:09:64:f4:62:6f:b2:45:93:4b:
         b6:9c:f1:ee:89:6e:f3:96:58:d0:0d:da:7d:7a:64:15:16:e3:
         3c:91:d5:3b:58:67:d0:a5:37:ca:85:27:b8:da:45:9b:41:b3:
         a9:cd:c3:1a:42:d3:c8:37:04:d7:82:54:5e:a1:fe:af:40:9a:
         36:2e:45:47:9d:9b:e4:9d:b1:31:93:1e:09:c1:92:53:e4:36:
         6c:08:74:aa:f9:52:82:92:20:9b:00:31:81:63:1b:9d:98:8b:
         0f:24:b9:fa:38:18:66:4e:61:09:c8:68:d8:5f:42:f8:9c:b8:
         88:63:a6:2f:5f:9e:20:9d:19:61:3f:51:1b:53:b1:f9:cb:b5:
         a0:df:02:96:42:3d:40:01:bc:ab:2c:9b:7a:b6:b4:ec:e8:a7:
         8b:80:1a:f0:cf:ee:98:6a:77:ab:89:53:f2:43:45:30:6c:4a:
         2f:25:e4:b4:c3:1a:f1:5d:6e:b5:6e:35:ee:8e:12:3f:9e:ec:
         ce:21:5e:15:aa:23:1a:12:ed:57:78:ee:a8:e2:39:fb:9e:35:
         37:1d:c2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:53:44 2025 by rpki-client