
Error: rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
File: GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft (raw, json)
Hash identifier: pVATmUemO0hX2isA1L9g5e3vDkVjqnZcoezswbNq6EE=
Subject key identifier: BD:0C:28:92:6C:1F:D8:90:A1:E8:62:B6:22:F2:FE:B0:0E:A8:D1:D4
Authority key identifier: 19:09:45:C5:04:73:97:68:73:EF:25:4B:4F:A8:33:BC:31:D9:48:4B
Certificate issuer: /CN=F361935CAF/serialNumber=190945C50473976873EF254B4FA833BC31D9484B
Certificate serial: 065E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
Manifest number: 0659
Signing time: Sun 11 Oct 2026 02:47:44 +0000
Manifest this update: Sun 11 Oct 2026 02:47:44 +0000
Manifest next update: Tue 13 Oct 2026 02:47:44 +0000
Files and hashes: 1: GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl (hash: K7WBT9aZq349X9Iw0rZXCajlNaJkzhFunkCaEJo2ZcU=)
2: F31DBFBA898411F1B4E85704CF1D38B0.roa (hash: 8PMDISLlU/TEBQnSnCiE3EbThwDUph7JmIcnQ4JcjVQ=)
3: 6B5534A2AFC311EE8606D196775412E6.roa (hash: pIBKsEr+yaxrxYpVZ5L4+xtRFFmaKt0HvuP5/hnszHs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl
rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1630 (0x65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361935CAF, serialNumber=190945C50473976873EF254B4FA833BC31D9484B
Validity
Not Before: Oct 11 02:47:44 2026 GMT
Not After : Oct 13 02:47:44 2026 GMT
Subject: CN=6acaf8d0-efa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:78:46:13:0c:c1:5f:e9:ba:bd:1b:e4:25:
38:04:f7:a6:8a:c1:e3:ac:3d:3d:7d:f2:13:54:da:
a5:f6:48:40:49:06:a0:21:ff:9b:15:e0:55:1b:f9:
44:3d:3d:65:f8:cc:0b:16:4e:e1:be:69:29:a9:48:
49:2d:f6:f5:02:c4:34:42:5c:df:95:2a:82:b4:f4:
70:23:69:ac:75:70:65:f4:da:29:33:d1:93:54:17:
2e:1c:31:8b:cf:6b:ea:1a:2f:07:e3:61:f1:35:68:
10:c2:d4:77:be:74:f1:06:8b:a7:2e:f9:99:87:56:
8c:d2:6f:5f:d4:88:74:d6:ce:0a:36:64:a3:f7:21:
2f:89:56:d9:0d:0f:63:ce:b1:bc:42:ed:b2:a1:5d:
ee:5f:80:f4:bf:80:e7:62:23:f3:55:2d:9d:fd:25:
1a:7e:80:af:65:ba:14:0b:f6:b2:35:03:4d:d5:98:
ab:58:e3:87:94:57:20:96:81:a7:17:52:3d:fe:ba:
af:e2:a1:4f:85:ca:7e:8f:73:3b:36:e1:47:e1:85:
50:9d:06:7f:7e:fc:e0:b6:c6:5f:11:b1:b9:3b:ef:
22:c2:5b:89:e2:da:13:82:39:2a:65:bf:92:76:14:
e2:04:1f:87:cf:6f:42:67:95:c0:b1:ac:02:b7:4e:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0C:28:92:6C:1F:D8:90:A1:E8:62:B6:22:F2:FE:B0:0E:A8:D1:D4
X509v3 Authority Key Identifier:
keyid:19:09:45:C5:04:73:97:68:73:EF:25:4B:4F:A8:33:BC:31:D9:48:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:e9:98:0e:a2:ff:10:14:65:79:bc:37:fd:8e:c7:2a:42:10:
40:3a:42:0f:ce:2d:5b:4a:45:21:e6:b6:5e:04:a2:6b:4f:7e:
0d:c5:f7:87:8f:a7:ed:76:77:51:da:c7:ed:b8:59:4c:95:d0:
69:28:30:15:bf:e3:e2:0b:0c:01:08:31:eb:40:88:3c:75:e4:
4b:da:f7:be:89:3b:fe:9b:1c:13:0e:74:e7:7c:0e:91:e2:d3:
06:a1:91:f7:b2:85:7e:55:1e:59:25:93:13:df:f9:ab:f7:2f:
f5:d5:4b:5a:0c:a0:28:b6:a9:6e:77:40:1e:9c:50:d7:28:da:
73:27:55:8a:57:e2:5e:56:b7:da:94:38:56:88:a9:14:b9:e5:
0c:bf:b8:95:be:e6:ce:81:f2:4c:b1:98:92:ba:0c:56:6e:80:
b3:13:5f:b1:08:0c:30:49:99:8f:fd:30:da:2a:30:fb:ea:76:
ac:0d:1e:82:63:7c:62:26:f0:e8:06:d6:8e:6a:ce:3d:fd:79:
5c:5c:36:66:ee:21:30:9a:fd:4b:90:e4:be:5c:73:f2:d4:3e:
df:ce:47:cf:1c:f9:7d:fa:25:31:6c:69:5a:b9:c5:20:a4:02:
c2:fd:90:70:5c:ba:46:01:a2:a9:e3:53:b4:5d:d6:88:58:21:
a8:1f:47:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:10:15 2026 by rpki-client