
Error: rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
File: gBdkcAW5GRQgyZGxrgeYtayhTQw.mft (raw, json)
Hash identifier: 9pCg449NjJfwsS/Qql0Vkh8XdHx54sVLRRHsnPiQcdQ=
Subject key identifier: E9:C4:9E:26:2C:8D:CE:7D:B2:53:DA:4F:B7:D8:F1:20:A1:AA:5C:B3
Authority key identifier: 80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Certificate issuer: /CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Certificate serial: 0848
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
Manifest number: 083C
Signing time: Sun 11 Oct 2026 02:02:49 +0000
Manifest this update: Sun 11 Oct 2026 02:02:48 +0000
Manifest next update: Tue 13 Oct 2026 02:02:48 +0000
Files and hashes: 1: gBdkcAW5GRQgyZGxrgeYtayhTQw.crl (hash: zaTsqItgVrXmjcQh2r5mpznzoMdQc4GKkeb2A37kzMw=)
2: 49BADED6E0AF11EBA4AE8C60F8AEA228.roa (hash: bfzLeABKt8iJaNdlc12joZPlW2B3ok9kJhlWiLncwS0=)
3: 40E2C4A2E0D411EBB731DB11F8AEA228.roa (hash: iNVwS1o0KwvedAC6eQYfYJ+BAcXsoI+clsk0jnqfrIA=)
4: 10C8FFEEE29F11EBAA580947F8AEA228.roa (hash: 387HhPDysnyOhc8pmgAp8wGABIBNWQ6h4D9Qi4Iokv0=)
5: 7A4D6530E0D411EB863D3F12F8AEA228.roa (hash: P26YxJOy6uRICshHfktO8hTsp7ut8yCkshcNludKd0A=)
6: 254A1146DE4A11EB99E5AD21F8AEA228.roa (hash: +hq36BifBeCSUhyFbBupJ4tam0DEvG9eurBQqxlzAcI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2120 (0x848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3632CFEAF, serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Validity
Not Before: Oct 11 02:02:48 2026 GMT
Not After : Oct 13 02:02:48 2026 GMT
Subject: CN=6acaee49-221e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:2c:ea:55:d9:96:b5:f3:2a:5d:5c:af:f7:
c3:5d:88:7b:bd:16:0c:de:fa:07:d3:91:3a:5e:92:
04:ac:a6:4f:aa:33:d0:42:b4:ab:1d:64:0d:de:a1:
b0:d6:82:16:b0:fe:e6:b8:9f:ee:a7:8d:6f:83:ee:
ae:e8:28:38:db:45:5e:03:45:3d:33:1a:6f:fb:96:
1d:86:85:4e:23:f2:f4:b8:3e:c7:03:36:93:e2:b3:
2a:bf:50:67:ce:63:08:83:fd:2c:d9:06:74:15:36:
74:08:3b:48:67:76:f0:c7:9d:fb:e3:be:c5:23:cc:
ac:e4:c9:4b:e2:45:24:e9:12:c0:9e:c5:31:d9:dc:
5b:a6:52:22:69:08:94:bb:a1:7a:3f:a0:44:00:38:
e4:c4:31:1b:64:67:a0:e6:32:8e:87:70:31:89:db:
b1:78:f4:d8:aa:dd:c0:ac:00:8e:de:13:61:93:03:
27:ec:0f:d5:ba:6e:48:3c:f1:d8:b0:34:46:41:63:
ae:29:60:a4:91:6f:1a:a4:2a:e6:fc:aa:8a:e9:b4:
97:ba:5b:f1:96:e1:de:09:8a:f0:c9:b8:51:06:23:
56:5e:23:82:40:0b:ef:79:f4:35:11:b9:4e:ef:70:
93:0a:b8:72:89:ed:d3:c2:f7:2a:5d:57:8c:0c:c5:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C4:9E:26:2C:8D:CE:7D:B2:53:DA:4F:B7:D8:F1:20:A1:AA:5C:B3
X509v3 Authority Key Identifier:
keyid:80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a2:6c:18:64:0f:6b:62:00:46:5f:3e:4d:a6:0b:8f:9a:10:
af:1e:cf:d5:67:c0:9b:c8:64:db:04:7f:46:82:95:9e:72:8b:
1c:85:e9:c2:db:21:48:d4:e1:75:c0:72:67:33:9c:ed:16:1e:
34:1c:11:23:0a:33:b4:c6:ee:a3:f8:cd:78:de:67:c5:3e:e4:
8a:a4:18:64:80:95:5b:31:15:83:1c:28:8f:2b:91:be:33:18:
d5:f6:f8:ed:ce:26:e8:30:31:e6:e3:f8:22:bc:6a:4c:76:92:
4c:a1:48:79:aa:f1:ad:c9:ca:2c:c5:db:c2:b7:89:c7:d7:cb:
66:da:18:81:25:54:d6:04:4d:df:3e:19:5a:6d:d2:66:79:49:
61:5a:7f:59:cd:b0:20:d0:db:ed:d7:ed:ed:60:c9:c3:b0:65:
68:57:fe:f0:e5:e7:e2:bf:61:9f:0c:4a:e0:e1:22:8d:47:e4:
cf:2b:38:3a:90:e4:b9:49:57:a2:71:90:cb:df:3a:87:43:03:
3c:6e:a5:d4:c0:6a:c5:0c:c0:b0:30:2d:54:8f:cc:6d:eb:7e:
83:15:dd:40:fd:8b:4c:4f:a9:92:65:74:b9:89:00:10:e1:0f:
f4:a4:66:9d:4b:d7:76:b0:a0:e9:0d:18:e5:51:1c:4d:13:a0:
e2:8e:8a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:33:00 2026 by rpki-client