Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
File:                     u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer (raw, json)
Hash identifier:          o40wLIMYAA0eNMFe4EEpEH6hBX2dhay6/axJsCi39NY=
Subject key identifier:   BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4224
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 09 Sep 2026 00:06:39 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37578
                          AS: 37704
                          AS: 37770
                          AS: 37786
                          AS: 37789
                          AS: 328100
                          IP: 196.6.220.0/24
                          IP: 196.49.22.0/24
                          IP: 196.60.2.0/24
                          IP: 196.60.36.0/24
                          IP: 196.60.68.0/24
                          IP: 196.60.80.0/24
                          IP: 196.60.168.0/23
                          IP: 196.223.21.0/24
                          IP: 2001:43f8:60::/48
                          IP: 2001:43f8:c0::/47
                          IP: 2001:43f8:7b0::/48
                          IP: 2001:43f8:c40::/48
                          IP: 2001:43fc:4000::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16932 (0x4224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep  9 00:06:39 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36E084CAF, serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:f3:f8:fc:c0:11:7c:14:a0:53:c5:68:82:
                    60:ee:b5:96:ff:82:27:ff:36:57:e6:45:d3:58:35:
                    12:a9:82:ed:d1:56:dc:bf:97:37:19:69:0e:c3:ff:
                    b0:62:eb:1d:f9:1d:31:44:df:7f:06:33:60:b5:5c:
                    bb:96:dc:8c:44:f4:12:ea:45:af:6a:df:6d:84:56:
                    6f:55:b1:2f:b8:43:e8:1c:52:ec:1c:ce:3d:5b:a8:
                    81:b9:30:2c:4a:8a:56:af:05:e0:ea:cf:48:4d:c1:
                    18:f5:30:e6:7b:8d:71:a5:8c:35:6a:31:bd:7a:bd:
                    99:90:d0:b6:d7:1f:59:59:1b:ed:56:f3:f0:ef:26:
                    7c:8a:80:2f:17:37:77:b7:fa:ba:81:4c:7b:32:ff:
                    a6:08:a5:fb:44:2e:a7:35:e9:8a:2e:59:fe:ee:1d:
                    75:ee:73:5b:63:9e:93:70:5e:67:bb:75:ca:9a:27:
                    dc:2f:87:39:16:28:af:e3:ae:81:37:fe:8a:11:83:
                    8e:84:5c:74:33:a0:9c:db:d7:22:94:e3:10:13:ac:
                    53:16:d5:de:46:0a:db:4f:bc:71:6a:4a:08:48:ae:
                    ca:9c:50:fe:11:30:b7:0e:c6:d7:a2:b8:2e:4b:88:
                    9a:e5:fa:74:57:6d:d7:b3:75:0a:70:77:58:91:cb:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37578
                  37704
                  37770
                  37786
                  37789
                  328100

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.6.220.0/24
                  196.49.22.0/24
                  196.60.2.0/24
                  196.60.36.0/24
                  196.60.68.0/24
                  196.60.80.0/24
                  196.60.168.0/23
                  196.223.21.0/24
                IPv6:
                  2001:43f8:60::/48
                  2001:43f8:c0::/47
                  2001:43f8:7b0::/48
                  2001:43f8:c40::/48
                  2001:43fc:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:82:46:f8:0c:0b:7c:0f:06:98:1e:85:5d:cc:d3:3a:dc:84:
         9c:47:8c:34:56:07:34:14:0d:f7:c1:b3:83:4a:c2:87:5b:59:
         af:d9:6b:d8:cb:ab:42:58:34:ed:f9:31:16:e8:20:2a:fe:2e:
         e6:8e:25:81:62:d9:df:a7:a6:9a:38:47:57:ae:b0:c3:ce:f3:
         c1:84:43:bd:6b:62:4d:54:34:f0:f5:3d:1f:10:d0:7d:80:70:
         14:3f:34:1d:fe:07:54:6d:b3:c6:b9:80:34:69:b5:51:94:d2:
         63:0c:eb:93:0d:46:ef:98:db:07:3c:ec:72:81:4e:e1:c1:2d:
         d4:b1:14:65:1b:b0:e4:a8:f9:cb:dd:1f:85:76:1d:dd:3f:00:
         b2:ac:38:1e:ab:1d:99:7b:da:ba:6a:d7:24:ba:e2:7c:4a:57:
         e3:f1:a9:a1:ac:78:03:ed:be:29:76:79:a5:c2:4f:36:1b:48:
         47:8a:a0:b8:cc:8f:b7:e2:54:fb:ba:58:fb:c1:00:a0:6f:c6:
         46:74:2a:de:d3:25:4a:ab:dd:5b:a6:61:a9:d8:f2:ee:d4:95:
         07:e4:e6:f6:8f:c4:1f:87:97:4b:fb:9f:7f:93:2d:c2:4b:b9:
         c3:ef:9b:6d:d8:63:01:85:cd:ea:a2:ca:13:2c:d7:44:b6:0d:
         3b:bb:cc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:05:50 2026 by rpki-client