Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/bV98FEGsTs33hm5BXlY4ZCO8XKc.cer
File:                     bV98FEGsTs33hm5BXlY4ZCO8XKc.cer (raw, json)
Hash identifier:          g3evtGcTSRcS0QgsakZIiEMX5i/dpVKJIZK+hnBjqas=
Subject key identifier:   6D:5F:7C:14:41:AC:4E:CD:F7:86:6E:41:5E:56:38:64:23:BC:5C:A7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4062
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365B85A/EEF658FE2E6F11F1B403BDCFDAE4EC9C/bV98FEGsTs33hm5BXlY4ZCO8XKc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365B85A/EEF658FE2E6F11F1B403BDCFDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 02 Apr 2026 08:42:59 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37329
                          IP: 41.79.28.0/22
                          IP: 102.207.50.0/23
                          IP: 102.218.12.0/22
                          IP: 2c0f:fd48::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16482 (0x4062)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Apr  2 08:42:59 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F365B85AAF, serialNumber=6D5F7C1441AC4ECDF7866E415E56386423BC5CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:af:3b:85:f3:72:e4:45:30:4d:9e:fb:5c:3f:
                    b7:fe:5e:a6:9e:ce:a7:01:9a:f9:e7:af:d6:52:d8:
                    01:aa:12:66:ee:1f:e2:dd:b8:46:99:43:4c:27:22:
                    c4:76:f9:4a:a0:ab:af:2a:47:76:0a:42:c4:14:ea:
                    66:11:21:39:dd:c6:24:31:c1:b0:16:4c:a7:ee:75:
                    57:8e:b6:5c:70:22:a6:ca:01:1b:97:4f:09:24:c6:
                    bb:fb:ea:ba:1a:8a:c7:4a:e4:03:48:d5:fb:5c:99:
                    30:61:8f:59:5e:b8:54:d3:58:c2:13:f4:2b:3c:22:
                    ea:9a:b7:19:c8:e4:9d:92:df:c6:a3:18:69:b5:fd:
                    df:95:df:df:c7:df:95:06:1b:52:3d:b4:21:94:8a:
                    5b:3d:c0:49:48:22:8e:35:79:c0:bf:1f:28:d7:88:
                    3e:32:c1:2b:f9:be:48:40:b7:89:0d:8f:ac:57:08:
                    80:c1:7b:76:ba:b2:98:ec:4a:e7:11:45:e3:50:01:
                    4b:fa:42:0d:5a:33:f5:d8:f6:b9:46:20:12:dc:5e:
                    ef:81:d5:ae:ef:3c:24:d3:c9:eb:44:a6:a3:93:cf:
                    ca:3a:67:5f:83:e7:7c:92:c2:90:d8:56:b5:02:3c:
                    68:fd:e0:39:70:eb:13:c0:ef:9c:95:78:ca:e2:2b:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5F:7C:14:41:AC:4E:CD:F7:86:6E:41:5E:56:38:64:23:BC:5C:A7
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B85A/EEF658FE2E6F11F1B403BDCFDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B85A/EEF658FE2E6F11F1B403BDCFDAE4EC9C/bV98FEGsTs33hm5BXlY4ZCO8XKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37329

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.79.28.0/22
                  102.207.50.0/23
                  102.218.12.0/22
                IPv6:
                  2c0f:fd48::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:84:cc:b5:ba:47:ab:16:83:c8:be:82:9a:db:33:a9:d9:db:
         81:dc:ab:08:15:80:0b:45:ff:2e:51:66:89:bc:b5:59:75:65:
         e0:fe:59:6d:c5:72:cb:47:80:07:eb:55:21:82:f8:ea:fd:8a:
         2a:65:f6:d2:9e:08:9b:68:1c:e7:9c:54:9f:d8:e7:45:2b:d3:
         63:02:e2:e4:0c:db:5b:00:94:93:bf:e0:60:75:5e:b3:cf:c0:
         55:06:d3:e4:65:7c:e1:b8:8f:87:db:f2:8b:62:5c:e4:75:bc:
         6d:b1:b6:ca:32:99:12:c7:43:b7:97:5a:fa:e1:20:65:10:a0:
         03:5c:33:c1:6d:44:67:0b:dd:b0:a7:3f:64:19:ca:b0:ab:e5:
         da:6d:b7:2c:d6:ee:7d:1a:46:0e:ef:e3:aa:80:c1:3b:29:15:
         5f:3b:22:f3:da:17:88:67:01:68:3f:87:1e:97:2b:27:29:dc:
         22:7d:ad:b4:7b:00:79:6b:c6:e7:83:7a:f2:4d:ee:08:d7:ab:
         50:67:4f:ad:93:d0:18:f8:79:29:8d:e2:4f:3c:58:e8:6e:cf:
         cf:ed:f7:61:84:d9:cb:16:4e:1b:84:48:79:b8:ed:bc:f5:ea:
         3b:19:80:5d:d5:ee:ad:3e:32:8d:93:38:f0:04:2a:b3:81:d1:
         08:2c:fd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:07 2026 by rpki-client