Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer
File:                     mHDlywkkDsWdzHR_wANn6a86DM0.cer (raw, json)
Hash identifier:          AbpgF7TnAfq/m5Yg72fSO9WJMNI92t6H6zTjhEDhRU4=
Subject key identifier:   98:70:E5:CB:09:24:0E:C5:9D:CC:74:7F:C0:03:67:E9:AF:3A:0C:CD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       40EF
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 19 May 2026 11:02:12 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329741
                          IP: 102.202.148.0/22
                          IP: 2c0f:4ba0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16623 (0x40ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: May 19 11:02:12 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3692D54AF, serialNumber=9870E5CB09240EC59DCC747FC00367E9AF3A0CCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:b8:65:a8:f1:68:eb:71:85:65:9f:55:14:
                    1c:27:5c:89:02:f3:d2:5f:e7:7d:95:95:fb:3e:de:
                    31:4f:29:a9:45:aa:4a:d0:6d:cb:33:d8:d8:d9:5d:
                    ff:b0:43:6c:0e:50:fd:46:0c:e2:16:9b:a8:4e:d9:
                    aa:b5:f5:ce:db:4e:f1:c8:22:9c:f4:66:74:64:dc:
                    a9:9a:a3:52:8a:59:93:ad:08:df:6e:7c:95:52:7f:
                    b4:ce:a6:af:35:44:50:90:bd:13:a1:25:b2:dc:9a:
                    0f:91:49:ce:5d:a2:71:7c:b4:9b:74:3c:81:66:a8:
                    8b:38:30:ec:94:c2:40:17:e5:cd:95:8b:75:4c:43:
                    05:89:28:51:50:7b:26:40:6d:e2:76:ef:cc:dd:a2:
                    bd:66:f4:ad:8d:a3:3c:10:92:da:58:b4:e1:51:1d:
                    c2:1a:c1:e5:42:6c:e6:cc:8b:f3:6b:2b:d8:80:7b:
                    0d:a5:7a:6a:19:4b:2f:2a:de:44:a5:45:d1:2f:80:
                    1e:49:21:5a:a6:a1:12:1c:34:15:d0:5b:4b:b0:e5:
                    53:43:df:95:41:1d:fd:63:55:96:d1:5f:aa:ca:c6:
                    30:40:0a:22:fa:79:95:d7:ff:fc:02:85:49:9c:45:
                    78:43:e4:cf:c0:a6:ee:9b:bd:ea:a8:cb:1f:a3:5c:
                    34:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:70:E5:CB:09:24:0E:C5:9D:CC:74:7F:C0:03:67:E9:AF:3A:0C:CD
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329741

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.148.0/22
                IPv6:
                  2c0f:4ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:c9:49:74:16:f8:89:6b:05:1c:d1:78:79:a9:70:f7:05:89:
         97:75:2f:8e:64:15:11:21:b2:32:a7:d6:78:1f:b3:cf:e6:f1:
         1c:42:dd:6f:bb:3f:3a:9d:21:11:e0:b6:62:0e:56:83:f3:df:
         0f:11:e2:0a:35:81:71:ee:a3:49:64:77:fb:cb:e6:ba:3f:17:
         e7:9a:f4:3f:6d:94:ba:6f:91:80:5d:d4:eb:e3:36:ae:ae:a8:
         86:ae:f0:ef:b7:09:65:27:4d:0c:75:e2:1b:1f:b4:38:c2:bd:
         cb:3a:d2:77:22:d2:a0:16:1e:0d:24:42:4e:c9:bf:80:b1:9e:
         ab:d7:a4:61:86:6f:78:97:12:05:c6:71:95:54:8a:bf:76:b7:
         18:3c:fb:a0:54:83:8b:83:dc:11:0a:09:8c:b0:12:62:f5:c4:
         6a:de:ea:c7:c4:45:ba:a1:2e:71:e8:23:e8:d2:c6:99:25:c9:
         23:a9:fe:74:fb:09:69:25:7b:d2:c7:4e:f7:cb:8b:12:16:14:
         13:d3:ce:f3:d9:ef:f2:62:f3:b3:23:26:a5:87:6c:e2:a2:b0:
         34:a8:55:06:cb:79:0e:25:23:d1:4d:a6:db:46:69:09:40:d3:
         be:c9:44:aa:17:1a:69:b1:43:d4:19:c8:b4:eb:22:10:a8:82:
         f7:3d:ed:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:25:02 2026 by rpki-client