
Error: rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
File: gVdGXshx9nfFuXh07KV5IzijWSQ.mft (raw, json)
Hash identifier: XNKIRUyAzHqw/daEF6zkwFU4lqXlx4rEPfJFKJJsAGk=
Subject key identifier: 04:8F:AA:C8:ED:4E:95:1C:4B:13:84:CF:4B:71:AC:74:53:E1:03:E7
Authority key identifier: 81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24
Certificate issuer: /CN=F3645EEFAF/serialNumber=8157465EC871F677C5B97874ECA5792338A35924
Certificate serial: 50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
Manifest number: 4C
Signing time: Sun 15 Nov 2026 05:51:57 +0000
Manifest this update: Sun 15 Nov 2026 05:51:57 +0000
Manifest next update: Tue 17 Nov 2026 05:51:57 +0000
Files and hashes: 1: gVdGXshx9nfFuXh07KV5IzijWSQ.crl (hash: eBf6jcvTc+0bjKHBbaVbqgy5LNdf3Dd2xSebcSgdOxo=)
2: BCA47662AC3A11F1BD37C8CFCE1D38B0.roa (hash: 1aHOqjAbG/Vyek5fSEwl25glNibnEDDQivHJEhgfU/o=)
3: EBEE85F2AC3A11F1A5732FD0CE1D38B0.roa (hash: QwlK+QN112m44lVk1uPEgi3OJcDWCvd/zy8bamKKzqY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645EEFAF, serialNumber=8157465EC871F677C5B97874ECA5792338A35924
Validity
Not Before: Nov 15 05:51:57 2026 GMT
Not After : Nov 17 05:51:57 2026 GMT
Subject: CN=6af9487d-9973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:1c:8e:11:40:92:7a:7c:5a:98:03:eb:c5:
de:18:9a:ab:84:de:34:0a:63:1f:0f:24:5e:d1:81:
bf:2b:7e:d2:ed:01:1b:30:d8:dd:60:fe:6b:68:3a:
53:e4:cd:c2:46:19:31:e4:6d:56:1a:ea:91:b4:69:
4a:69:d0:63:00:b5:1a:36:05:5a:a7:29:3a:54:ff:
5c:27:10:22:33:0a:80:4e:23:55:65:d7:fa:8b:85:
70:37:ed:8c:00:95:e2:a6:b9:9d:85:4e:0c:7f:ca:
ce:9b:0b:69:d3:58:8d:29:db:43:de:5a:51:44:54:
38:0c:8f:73:8d:3e:99:d8:2f:e8:68:cc:5a:38:3c:
30:f9:84:0c:12:4c:98:9e:a4:31:de:74:bf:c6:a8:
f3:86:25:50:de:3d:89:2a:7f:dd:31:32:bc:a8:8b:
cf:8d:04:56:b4:90:c6:4d:f8:ad:04:7a:7b:fe:d9:
92:d7:5c:1f:19:a2:5e:c6:f5:c8:b3:8b:ae:1b:c9:
fa:05:66:60:6e:1a:95:86:d1:c5:d7:77:a1:7c:57:
76:c3:3b:e8:c6:e5:2d:47:18:b3:1c:1f:9b:0c:6d:
1b:d6:61:fc:c8:7f:df:a1:61:54:fc:77:61:ed:10:
49:2c:45:21:89:18:89:a2:4f:57:0b:ed:12:32:2d:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8F:AA:C8:ED:4E:95:1C:4B:13:84:CF:4B:71:AC:74:53:E1:03:E7
X509v3 Authority Key Identifier:
keyid:81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ce:e2:0d:e4:d7:df:b7:2b:59:bd:89:4a:36:d2:63:24:23:
76:af:fd:67:58:5d:59:60:97:7f:ad:88:7c:c9:48:b5:c7:07:
1e:e0:63:8a:e6:75:e7:89:9a:0b:04:cb:e3:1b:8d:8d:84:42:
ff:17:35:34:89:97:9c:ee:5d:a8:d2:30:7f:01:90:76:eb:54:
57:8c:d7:85:a6:24:d2:07:08:70:9f:da:f2:98:d0:e1:0f:b0:
ae:91:f8:5d:ca:42:9f:94:18:d6:53:52:22:b5:86:16:cf:0b:
b3:bd:28:31:89:8c:2f:9a:19:0b:29:71:d2:50:bb:b5:31:c3:
1b:f8:8b:ac:1c:e9:f6:4c:22:64:d4:d8:90:a4:38:0e:8e:44:
39:62:5d:19:a5:ba:91:c7:d3:4b:de:c9:fd:f4:07:47:5c:20:
c9:25:76:4e:37:a1:ae:17:cc:fa:e2:ce:84:b8:45:21:bd:03:
70:53:52:63:2c:53:be:cd:84:21:4e:38:ce:84:d3:b0:1c:87:
e8:b0:f7:3a:23:5a:f0:68:bc:c1:d2:a9:e4:a3:16:f7:dc:99:
84:ef:1a:b8:c2:a0:8c:1d:7d:40:a6:24:10:be:b6:6f:8a:bd:
21:ab:a1:bd:88:f8:b2:e4:fd:a6:51:4c:0b:19:0f:8b:3a:d4:
e2:25:58:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:43:12 2026 by rpki-client