Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
File:                     w7UAblEUm7jKxFElONXFSJGYBRE.cer (raw, json)
Hash identifier:          dKeu6kYJ3CvNtq+RhI2S6mpcR4Zboz4Cc4IMP1/cNGw=
Subject key identifier:   C3:B5:00:6E:51:14:9B:B8:CA:C4:51:25:38:D5:C5:48:91:98:05:11
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       41AB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 27 Jul 2026 08:40:35 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37809
                          AS: 327724
                          AS: 329679
                          IP: 102.209.200.0/22
                          IP: 154.72.192.0/19
                          IP: 196.49.122.0/24
                          IP: 196.60.164.0/24
                          IP: 2001:43f8:1a20::/47
                          IP: 2c0f:f750::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 07:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16811 (0x41ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jul 27 08:40:35 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36F1706AF, serialNumber=C3B5006E51149BB8CAC4512538D5C54891980511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:68:a7:8c:72:c1:d7:2a:ac:70:b6:72:cc:
                    a9:98:6d:e3:7b:33:86:31:b0:44:b4:51:4f:c8:1e:
                    2a:4a:86:68:a4:79:31:99:d0:da:c6:c3:f7:85:d8:
                    81:99:a4:39:c9:76:25:d2:78:0e:10:6f:e1:9d:da:
                    97:32:70:40:cd:fe:55:21:da:fb:b9:1d:4e:6b:8c:
                    57:25:2c:d9:f1:20:c4:9b:53:2f:cd:f2:33:45:d0:
                    80:81:97:25:dc:52:2f:9f:c4:df:5b:f0:61:8f:dc:
                    46:7f:db:99:c9:80:33:a0:53:9a:a0:f0:4f:99:bb:
                    59:6b:5e:ec:ce:49:b0:57:a6:5b:d4:2b:99:7c:05:
                    c3:97:54:79:7b:bf:76:e5:91:9e:54:8d:45:c0:90:
                    bb:8a:f1:dc:08:11:41:e1:14:18:f9:c7:95:76:7d:
                    38:77:96:a5:9c:62:20:4e:fa:28:b3:6b:d2:01:de:
                    bd:b3:8f:81:01:4c:b8:38:e1:bb:fd:12:69:be:1e:
                    27:c8:4c:44:b7:0e:10:45:ec:6e:c8:21:b2:37:02:
                    2a:99:e4:f6:3d:ac:b0:b4:bd:16:32:63:13:67:a7:
                    c9:6c:c7:ed:a7:72:cf:94:72:b5:f4:f6:59:5e:68:
                    0f:16:92:79:a0:0a:80:07:e2:49:1e:5d:7d:21:4b:
                    6b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B5:00:6E:51:14:9B:B8:CA:C4:51:25:38:D5:C5:48:91:98:05:11
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37809
                  327724
                  329679

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.200.0/22
                  154.72.192.0/19
                  196.49.122.0/24
                  196.60.164.0/24
                IPv6:
                  2001:43f8:1a20::/47
                  2c0f:f750::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:55:e9:f0:0a:31:43:01:55:1e:ed:0b:df:d0:19:86:cc:13:
         a3:a9:99:38:97:96:d9:e1:c1:39:7b:8a:1b:24:b1:2a:cf:b0:
         32:e8:b8:28:cc:bd:e2:f0:d1:a8:a0:ab:98:a7:da:9f:0f:ac:
         bf:59:8b:a6:1d:21:42:58:88:d2:48:e8:45:34:8b:84:6f:dc:
         61:60:41:35:4f:52:64:44:f1:11:c4:99:81:01:e8:4f:e1:84:
         65:cc:f0:d4:dd:79:02:64:07:80:7e:f7:65:c0:9f:ed:e8:31:
         09:98:d8:28:78:d0:90:40:88:98:3f:3a:4f:87:8f:56:aa:b3:
         cb:68:13:18:ba:e1:70:78:59:7d:6d:f7:90:4e:3c:14:07:41:
         6a:18:f1:ba:8d:bc:72:d7:83:e5:ce:ec:83:e8:f7:78:b9:48:
         48:10:7f:79:54:69:8a:78:b0:fb:58:4f:34:63:c8:dd:7e:51:
         24:63:d5:84:21:f8:aa:23:4c:4f:fe:44:11:f2:f1:75:8a:e1:
         9d:e1:e0:8f:e6:e0:90:61:d7:b7:9d:19:55:01:d6:1c:09:9c:
         91:84:03:52:bb:37:50:c3:16:80:c3:9a:c6:9f:b1:59:c8:0b:
         cf:8f:87:ed:f0:dc:bf:4e:5f:e5:86:59:0a:78:b8:a2:b9:cd:
         ba:a8:42:66
-----BEGIN CERTIFICATE-----
MIIGSjCCBTKgAwIBAgICQaswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjA3MjcwODQwMzVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkYxNzA2QUYxMTAvBgNVBAUTKEMzQjUwMDZFNTExNDlCQjhDQUM0NTEy
NTM4RDVDNTQ4OTE5ODA1MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDhGinjHLB1yqscLZyzKmYbeN7M4YxsES0UU/IHipKhmikeTGZ0NrGw/eF2IGZ
pDnJdiXSeA4Qb+Gd2pcycEDN/lUh2vu5HU5rjFclLNnxIMSbUy/N8jNF0ICBlyXc
Ui+fxN9b8GGP3EZ/25nJgDOgU5qg8E+Zu1lrXuzOSbBXplvUK5l8BcOXVHl7v3bl
kZ5UjUXAkLuK8dwIEUHhFBj5x5V2fTh3lqWcYiBO+iiza9IB3r2zj4EBTLg44bv9
Emm+HifITES3DhBF7G7IIbI3AiqZ5PY9rLC0vRYyYxNnp8lsx+2ncs+UcrX09lle
aA8WknmgCoAH4kkeXX0hS2shAgMBAAGjggM/MIIDOzAdBgNVHQ4EFgQUw7UAblEU
m7jKxFElONXFSJGYBREwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGMTcwNi9EMTlGQ0MyMjg5OTYx
MUYxODZGQjg1RjFDRTFEMzhCMC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjE3MDYvRDE5RkNDMjI4OTk2MTFGMTg2RkI4NUYxQ0UxRDM4QjAvdzdVQWJs
RVVtN2pLeEZFbE9OWEZTSkdZQlJFLm1mdDAkBggrBgEFBQcBCAEB/wQVMBOgETAP
AgMAk7ECAwUALAIDBQfPMEkGCCsGAQUFBwEHAQH/BDowODAeBAIAATAYAwQCZtHI
AwQFmkjAAwQAxDF6AwQAxDykMBYEAgACMBADBwEgAUP4GiADBQAsD/dQMA0GCSqG
SIb3DQEBCwUAA4IBAQAiVenwCjFDAVUe7Qvf0BmGzBOjqZk4l5bZ4cE5e4obJLEq
z7Ay6LgozL3i8NGooKuYp9qfD6y/WYumHSFCWIjSSOhFNIuEb9xhYEE1T1JkRPER
xJmBAehP4YRlzPDU3XkCZAeAfvdlwJ/t6DEJmNgoeNCQQIiYPzpPh49WqrPLaBMY
uuFweFl9bfeQTjwUB0FqGPG6jbxy14PlzuyD6Pd4uUhIEH95VGmKeLD7WE80Y8jd
flEkY9WEIfiqI0xP/kQR8vF1iuGd4eCP5uCQYde3nRlVAdYcCZyRhANSuzdQwxaA
w5rGn7FZyAvPj4ft8Ny/Tl/lhlkKeLiiuc26qEJm
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:23 2026 by rpki-client