Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/W0T4JDSqcXoF9kUnlIPWmG92utQ.cer
File:                     W0T4JDSqcXoF9kUnlIPWmG92utQ.cer (raw, json)
Hash identifier:          AX/3jyZoN3DWMDJuyQ8rHhupI1cHCqR7xRTHberTWY4=
Subject key identifier:   5B:44:F8:24:34:AA:71:7A:05:F6:45:27:94:83:D6:98:6F:76:BA:D4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4000
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 23 Feb 2026 06:36:39 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328555
                          IP: 102.36.228.0/22
                          IP: 102.211.40.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16384 (0x4000)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Feb 23 06:36:39 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3633DE5AF, serialNumber=5B44F82434AA717A05F645279483D6986F76BAD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:2b:c0:46:f9:e3:60:1e:c4:76:bc:bc:54:
                    b3:3c:05:c4:c6:91:88:f9:19:ad:3c:66:b0:73:03:
                    34:00:67:35:3b:c8:be:6b:2d:4c:2e:1f:64:a5:b1:
                    4f:96:aa:7b:eb:2f:b1:93:dc:88:4e:75:5b:fe:81:
                    97:81:ce:88:c6:b4:ff:af:14:43:59:cf:5d:ec:d6:
                    a3:ce:56:d4:ff:cd:06:cc:30:12:6c:c3:86:ff:9b:
                    65:98:0c:b3:be:d6:ab:24:4f:a6:06:94:48:14:b1:
                    5d:e3:be:4a:c4:1c:a7:73:bc:36:d9:7a:73:41:6a:
                    18:2b:5c:2c:07:03:2a:41:3f:fd:2c:1c:e5:bc:91:
                    23:23:37:d0:e1:cf:66:cf:4c:5c:ae:58:83:2b:ea:
                    24:1a:23:1c:8d:c7:ea:e8:7c:f2:f1:a3:d7:e6:21:
                    76:0d:c6:d4:d2:b2:41:2c:51:af:11:cd:5c:85:72:
                    95:18:1e:08:32:fd:f6:36:7c:e3:25:84:4a:a1:73:
                    4d:77:10:b1:12:df:48:c8:83:51:7f:bd:b1:62:98:
                    40:64:59:ac:34:d8:ce:d2:79:01:a5:a3:39:75:93:
                    a8:8e:8a:3f:3f:9c:84:54:08:43:53:d6:76:11:ac:
                    f1:80:73:a4:3c:c8:8b:d3:5b:66:66:86:24:c8:83:
                    e0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:44:F8:24:34:AA:71:7A:05:F6:45:27:94:83:D6:98:6F:76:BA:D4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328555

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.228.0/22
                  102.211.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:41:13:91:44:01:c1:e7:27:e9:8b:df:62:4e:e6:64:02:2b:
         05:c0:a5:a4:14:6a:e1:bc:8d:54:70:2b:6b:cd:85:f9:e7:b7:
         91:fe:c9:af:3f:ba:7b:81:76:4d:63:f8:5f:79:77:e8:84:f4:
         a3:df:d5:d2:b4:5c:bc:15:19:b3:da:f2:b8:bc:ee:da:b0:b4:
         42:4c:63:f5:4d:67:8f:ff:ec:28:80:d5:c7:61:14:12:de:fb:
         b4:ee:4a:93:67:d9:72:b5:1c:91:49:87:cd:4b:08:1c:54:c1:
         2d:13:76:4c:99:1c:72:96:53:4d:80:b2:12:a6:21:db:de:a4:
         39:2f:2b:f6:26:4e:57:a2:45:cf:e5:f9:07:c6:95:8c:91:03:
         40:8e:4e:94:41:f5:5a:4e:86:af:9a:ff:29:d4:7d:93:b1:8c:
         1e:fe:97:aa:30:31:08:1e:76:06:9a:72:63:eb:13:ae:a9:3d:
         70:fc:d5:f3:c8:19:54:fa:04:df:f2:74:81:3c:56:61:0b:9f:
         de:64:bb:f3:c7:f6:81:e6:da:51:af:59:f8:7a:95:d0:55:db:
         5e:a6:d0:6e:e6:31:d8:88:f8:f6:84:43:2f:88:41:60:bc:45:
         ee:0f:8c:7b:d4:f4:de:08:ad:ee:04:c8:33:d1:9c:65:8b:18:
         3e:8c:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:15 2026 by rpki-client