Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
File:                     mSzTGdelFaVjcylM4EkVP4w-AEs.cer (raw, json)
Hash identifier:          jqaNlghh0lDFbEKuLahTirV9lGdhS6sLwzhyOpy+ug0=
Subject key identifier:   99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4254
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 15 Sep 2026 00:06:23 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328723
                          IP: 102.201.48.0/22
                          IP: 102.206.116.0/22
                          IP: 102.209.84.0/22
                          IP: 102.222.20.0/22
                          IP: 2c0f:e990::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16980 (0x4254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep 15 00:06:23 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36DD92BAF, serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:fe:ee:14:97:e3:b7:f5:ec:bb:f2:11:c4:
                    d6:ee:aa:d3:99:c1:39:50:64:d6:a2:05:e7:a5:be:
                    09:84:de:a1:7a:c3:98:86:f3:bd:24:2b:db:b2:a5:
                    bb:1f:cf:81:f9:c4:0c:d2:9e:09:37:e6:50:3b:e6:
                    4f:02:b5:24:e8:ed:d8:bd:0e:6b:c1:99:a0:a6:b6:
                    b2:fa:b2:43:e0:ba:03:f3:63:f5:a4:71:27:b8:6b:
                    fb:82:0f:67:4d:cc:85:2d:78:5b:60:7a:f2:32:ac:
                    58:5f:09:5f:ce:e8:7a:53:f4:f7:bf:fe:df:7f:0c:
                    5c:51:e7:df:29:d3:52:e2:8f:9d:44:3c:70:a3:f9:
                    ce:dd:95:28:5c:12:e9:20:5c:13:5e:ce:80:60:f9:
                    ea:d0:23:b7:d8:70:f3:29:09:01:05:63:a2:dd:16:
                    7a:18:02:86:74:2f:9d:55:bc:c3:e1:23:08:26:f7:
                    c6:aa:ce:15:7e:52:71:03:7b:72:0a:34:3d:9f:41:
                    f1:15:5f:51:d2:30:c8:b7:c3:be:66:3e:7b:94:97:
                    8a:5f:23:d9:1b:01:f9:e8:aa:b7:55:13:60:77:b0:
                    1f:f7:d7:5a:0d:e8:08:f2:05:3e:83:0c:85:87:37:
                    10:63:ed:d5:30:e8:22:5a:f7:f0:1d:61:f1:58:c9:
                    20:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328723

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.48.0/22
                  102.206.116.0/22
                  102.209.84.0/22
                  102.222.20.0/22
                IPv6:
                  2c0f:e990::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:b3:50:cd:94:fc:36:84:b6:c6:2a:68:1d:df:03:4e:55:36:
         84:bb:e0:ef:cf:bb:ef:97:75:7a:4e:37:a1:6e:8b:9a:47:94:
         39:78:cd:6c:eb:2a:58:e8:db:0b:fa:7f:69:b6:c4:d2:71:61:
         21:06:67:c4:10:7b:3f:73:74:4c:16:bf:a0:fc:5d:64:02:16:
         34:ff:58:60:12:c3:c6:81:4a:6f:d7:46:6a:d9:5f:80:35:18:
         ac:c4:c9:e2:c1:ad:64:a3:62:eb:68:61:f9:d1:3d:bf:27:7b:
         17:83:72:42:df:33:54:11:cd:d4:4c:99:7c:e6:a7:d8:a0:c3:
         90:25:00:fe:4e:5f:39:3c:5e:8c:64:c9:d2:5e:fa:a6:6d:f3:
         b8:dd:b6:6c:dc:2f:73:15:82:f4:f8:87:d3:17:d0:58:84:d0:
         05:20:6c:27:8c:eb:3a:0c:94:21:30:f5:05:4c:c0:b5:64:d7:
         3e:22:02:f7:42:fb:00:a3:58:83:ab:00:6d:d0:d1:c0:07:b2:
         b9:3d:02:34:ea:4c:cd:0f:da:56:9d:45:af:9a:3e:6c:79:5f:
         15:5a:31:24:57:81:24:ff:de:0f:e4:ff:92:29:a6:94:e2:63:
         e8:f7:24:98:cc:cc:71:a8:5f:59:e1:87:90:01:e5:b2:30:7b:
         1f:23:6e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:07:29 2026 by rpki-client