Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
File: Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer (raw, json)
Hash identifier: CH3aIvzqcD1lfb3S2rx+apnPtn5zRSzGO7pGRq9cmQ0=
Subject key identifier: 5E:3C:3F:19:D3:41:50:AB:3D:3B:F4:C2:7F:6B:11:65:8A:DD:51:BC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 41B2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 28 Jul 2026 06:26:59 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328388
IP: 102.130.16.0/20
IP: 102.204.224.0/22
IP: 2c0f:25c0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16818 (0x41b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jul 28 06:26:59 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F3664F7BAF, serialNumber=5E3C3F19D34150AB3D3BF4C27F6B11658ADD51BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:89:ae:f9:e4:45:44:08:de:30:24:ee:64:
03:d8:7c:a4:e3:ce:82:fa:49:ba:90:47:7b:95:6b:
e4:8d:d8:2b:89:c4:af:e6:c4:c6:f8:91:41:7a:ba:
6f:62:43:15:4e:49:02:1a:5a:6b:07:04:ed:a8:45:
21:b8:d1:a1:e4:59:5c:55:ab:c4:c1:de:24:a1:8e:
26:2a:de:bb:b9:65:41:bc:eb:41:9a:de:1d:f1:c6:
26:29:ca:06:0d:1c:d1:c2:68:a1:25:be:91:64:48:
ad:71:36:27:82:61:c0:c2:79:b7:1c:c6:d1:73:4d:
62:58:e6:96:dc:25:2f:8b:c3:e9:ef:11:fc:b6:9a:
60:22:b5:68:a2:32:a2:5e:a1:5d:8b:e9:45:f7:0f:
0b:ae:3a:e4:ae:c5:77:7a:0a:6b:95:a0:10:01:f6:
fb:97:45:7c:67:dd:25:4e:05:9e:e1:29:53:57:c6:
43:8c:a9:b6:1c:dc:1f:69:ff:b1:62:c1:f1:d7:d5:
30:c6:c4:5f:bd:b4:a6:eb:c2:0f:7a:fa:8f:99:b1:
f1:d0:61:b3:ed:6c:86:46:0d:f7:d3:76:6e:9a:24:
73:97:61:10:07:4c:0b:b5:bf:ae:f6:0b:14:63:c1:
d8:47:76:19:61:01:f4:a3:cd:26:1e:c6:bc:56:16:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3C:3F:19:D3:41:50:AB:3D:3B:F4:C2:7F:6B:11:65:8A:DD:51:BC
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328388
sbgp-ipAddrBlock: critical
IPv4:
102.130.16.0/20
102.204.224.0/22
IPv6:
2c0f:25c0::/32
Signature Algorithm: sha256WithRSAEncryption
3b:60:70:a2:4f:f9:80:73:24:2c:15:e7:87:10:a0:a8:ff:fb:
3c:ad:73:98:e7:09:21:4e:b3:65:81:b8:55:4b:64:a9:11:da:
0a:8d:c1:b4:70:95:ff:6b:bb:de:4d:44:09:e0:3e:2c:6c:3e:
f7:f0:d9:7f:fa:b1:51:01:76:0f:cc:75:e0:f5:f2:cd:a9:82:
14:ee:4a:c7:9e:a3:9b:42:84:2d:19:44:5f:71:e3:6c:f1:31:
22:32:7b:5b:58:bb:26:a4:f8:04:37:2d:36:63:7e:12:0c:17:
aa:a0:79:d8:5f:14:4b:fc:cf:cc:98:59:1b:f9:ea:bc:e5:1d:
57:32:7b:ab:c1:80:82:d1:c8:e1:92:7a:5f:0e:4d:11:8d:ea:
d1:6b:d7:ec:a4:98:0b:30:10:dc:a7:68:9f:36:4d:3f:52:4a:
80:b2:94:b5:01:39:c3:87:41:c7:f6:16:90:a9:8e:59:74:67:
39:95:92:77:80:ef:5d:3a:46:0d:ae:62:81:61:3d:3d:94:06:
5b:93:19:89:1f:8b:0a:fb:98:6d:fe:6c:19:23:af:f8:44:32:
0d:35:ed:5d:12:8b:50:33:ef:5e:d4:a5:05:6e:05:b5:27:ff:
94:ef:db:3e:d1:c9:0d:e8:18:77:e8:0f:f7:93:32:9a:6f:2d:
ff:e8:74:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:20 2026 by rpki-client