Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/kp7No4BWDKPskIVIcnhYFN9ixFA.cer
File:                     kp7No4BWDKPskIVIcnhYFN9ixFA.cer (raw, json)
Hash identifier:          yyHsctTpUtcuyU6Mk7TxGNAMuIfz2xep+UJZPGe5YpY=
Subject key identifier:   92:9E:CD:A3:80:56:0C:A3:EC:90:85:48:72:78:58:14:DF:62:C4:50
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4070
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 08 Apr 2026 13:06:18 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328746
                          IP: 102.222.72.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16496 (0x4070)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Apr  8 13:06:18 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F365FF1AAF, serialNumber=929ECDA380560CA3EC90854872785814DF62C450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ee:42:fb:a6:7b:fd:18:bf:41:79:e0:de:8e:
                    ad:48:29:79:43:07:80:51:f4:a5:b0:a1:a9:8a:cd:
                    74:4c:f3:00:c1:60:df:ba:74:c9:8e:66:34:3a:62:
                    bf:46:79:25:f8:a2:68:54:13:70:5b:84:a1:1b:d2:
                    48:43:a4:94:5b:7d:d7:51:1b:19:3b:06:81:9d:47:
                    8c:9e:6b:9a:1a:bb:36:0e:28:9f:dd:5e:66:43:4f:
                    0e:9a:54:1d:2b:b6:60:ce:00:9c:21:b7:3e:1c:25:
                    ef:56:df:36:93:cf:8d:c8:81:16:61:f7:b7:1f:f3:
                    f2:eb:2b:67:96:b6:0b:a7:4e:5e:ff:36:fc:b4:e1:
                    ba:5c:c5:49:39:82:cf:f9:79:9b:b5:9a:ce:0b:3f:
                    c6:84:38:d3:77:63:68:0e:98:a6:f1:fc:c3:28:a7:
                    e0:a0:47:70:4d:ab:e8:26:8a:97:b1:41:e0:d8:5a:
                    62:bc:2f:a2:fc:47:a8:3e:d9:64:37:86:3b:9a:6c:
                    ec:d5:ee:22:09:2c:9e:5d:f2:d0:03:93:5f:f0:52:
                    d3:df:8d:b3:49:56:30:37:38:d9:d4:94:aa:8f:0d:
                    d5:f1:1b:93:42:db:92:e8:df:21:90:0e:2d:52:ac:
                    00:71:37:39:28:b7:d8:67:c5:b5:7d:1c:a8:41:0a:
                    fe:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9E:CD:A3:80:56:0C:A3:EC:90:85:48:72:78:58:14:DF:62:C4:50
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328746

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.222.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:86:0c:06:40:b7:7c:60:00:1b:56:cd:74:50:3c:8a:bb:cb:
         44:1a:6b:6c:7c:f7:ea:db:db:0c:f4:46:f8:c0:a2:23:e5:2a:
         4e:db:89:34:98:b6:cf:73:87:8c:81:75:fa:f3:46:df:46:ef:
         40:ce:d8:8f:90:95:48:31:3f:44:2a:fd:da:08:cf:8d:fb:32:
         7c:71:59:d5:ae:6d:46:1e:1e:fa:9a:17:97:f3:e9:2b:2e:95:
         d7:9d:c5:be:64:8a:b2:44:8c:38:19:15:74:59:f6:99:47:22:
         83:6d:67:30:13:73:d5:3d:fb:f5:1f:5a:9a:9b:24:f3:98:7c:
         90:3a:26:04:ef:5c:1c:b9:19:45:b6:f7:41:7d:67:88:c7:cc:
         0f:c8:e9:80:1a:53:15:b7:07:3a:e8:4c:4f:c8:5b:98:8b:06:
         32:4b:18:3e:2f:e8:22:4e:60:e3:a6:3e:8e:10:a5:12:b7:e2:
         de:82:df:9a:e0:cf:26:5e:a2:27:19:03:99:95:34:22:3e:48:
         93:e9:4b:61:04:39:62:a5:46:94:28:ea:d4:d7:5d:cf:52:a5:
         18:05:3c:56:df:5b:8f:bc:72:1c:30:e8:e1:4a:07:e4:9d:c0:
         fa:fa:6d:7e:e7:c5:65:b9:c3:f1:90:34:ca:3e:ea:97:b0:30:
         88:cf:05:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:11 2026 by rpki-client