
Error: rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
File: gVdGXshx9nfFuXh07KV5IzijWSQ.mft (raw, json)
Hash identifier: UtgFNBg5Q96hgyA+TPjbpfgHpFxV+vrJVV3XaMfQDV0=
Subject key identifier: 70:D6:01:18:B1:D3:A1:C5:E7:89:39:94:7B:9A:F0:05:9C:C8:A3:B4
Authority key identifier: 81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24
Certificate issuer: /CN=F3645EEFAF/serialNumber=8157465EC871F677C5B97874ECA5792338A35924
Certificate serial: 1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
Manifest number: 17
Signing time: Wed 23 Sep 2026 05:54:18 +0000
Manifest this update: Wed 23 Sep 2026 05:54:17 +0000
Manifest next update: Fri 25 Sep 2026 05:54:17 +0000
Files and hashes: 1: gVdGXshx9nfFuXh07KV5IzijWSQ.crl (hash: zpTDrNirpR9pXcgUwT/6wAV7sdcNwxjh7j96RmxuWQo=)
2: BCA47662AC3A11F1BD37C8CFCE1D38B0.roa (hash: 1aHOqjAbG/Vyek5fSEwl25glNibnEDDQivHJEhgfU/o=)
3: EBEE85F2AC3A11F1A5732FD0CE1D38B0.roa (hash: QwlK+QN112m44lVk1uPEgi3OJcDWCvd/zy8bamKKzqY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 05:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645EEFAF, serialNumber=8157465EC871F677C5B97874ECA5792338A35924
Validity
Not Before: Sep 23 05:54:17 2026 GMT
Not After : Sep 25 05:54:17 2026 GMT
Subject: CN=6ab3698a-25a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:02:0d:6f:bf:5b:25:b6:1f:2e:e4:f0:b1:
68:e1:3f:20:91:34:6b:e2:3b:51:1a:43:32:68:96:
23:48:18:5c:05:98:a5:0a:99:f4:be:57:65:17:e2:
48:60:67:81:aa:fe:eb:47:fd:aa:e6:88:33:43:31:
72:8f:48:95:f4:86:19:ae:31:06:01:d3:79:32:ee:
c3:e1:8e:0f:bf:cf:7c:d4:60:89:f4:eb:fb:1f:a0:
e3:05:6d:05:f2:69:b5:b7:be:ea:d0:c6:1f:32:82:
de:4f:72:04:1d:3c:ae:58:fd:ce:7e:bc:6c:df:53:
56:dc:ff:f4:b0:87:98:be:ba:48:f6:8c:39:4d:38:
b2:77:fd:12:9b:cc:db:5e:0b:99:96:94:bc:9f:42:
9e:a7:25:12:c0:c3:51:01:46:ba:d0:43:dc:4e:8b:
ed:1b:b7:85:84:12:ac:7f:8f:86:3f:43:2c:6d:a2:
3f:b7:c0:0b:1f:81:35:25:0f:16:5b:57:6b:71:39:
df:7d:4f:44:50:9b:87:7b:28:ba:cc:84:a6:5b:a2:
7e:74:13:d5:1e:63:e1:ab:91:a3:2a:5b:81:f3:92:
0e:4f:59:96:ca:08:e0:cf:fc:b0:ad:9d:03:9e:99:
03:52:91:c5:99:ca:e4:56:7a:3b:11:42:3a:42:c9:
78:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D6:01:18:B1:D3:A1:C5:E7:89:39:94:7B:9A:F0:05:9C:C8:A3:B4
X509v3 Authority Key Identifier:
keyid:81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:33:51:aa:91:5a:1b:c8:1c:72:4f:10:bf:22:a5:fd:4d:71:
2d:f3:25:5f:64:34:4b:a0:1a:29:f8:2c:8f:e8:d7:14:72:5a:
d9:30:b3:da:51:dc:90:ec:1b:86:78:cc:58:5d:31:8b:1d:7b:
5f:24:b1:44:cd:7a:68:9a:30:7d:d1:ba:95:c7:66:97:90:ef:
8f:fe:33:f7:ca:6a:b5:22:f0:78:95:20:d1:a2:65:25:13:7a:
5c:82:fa:58:50:4d:4c:64:a9:60:70:13:c6:71:c1:6a:87:ea:
bd:4f:b5:9d:e3:88:62:93:09:4e:ed:f1:ea:8f:b5:e3:1a:2a:
47:7b:30:55:19:bd:ec:43:5e:5f:f6:1b:cf:d8:86:d5:d8:32:
d2:77:9b:47:d2:db:75:a6:13:e5:14:e8:67:b8:89:99:7d:eb:
4e:29:9b:fa:f3:0a:de:0d:c6:53:25:61:e9:88:b1:6a:02:cb:
42:46:c3:57:4a:d9:d3:f1:95:ff:07:e4:c3:81:c6:14:24:51:
a1:fd:a5:9d:ee:e7:bb:eb:80:16:b4:cb:83:0d:7d:40:0f:69:
51:eb:1f:53:e3:54:bd:23:9e:c7:25:7a:4a:4c:37:dc:d7:e7:
68:24:a4:42:cd:c3:ff:4e:7d:0f:12:57:41:e5:1d:19:bf:fa:
ff:7a:83:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:26 2026 by rpki-client