
Error: rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
File: gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft (raw, json)
Hash identifier: gpwjf/XYJ8cGS026fTiZnbmx5BMBcy5Kt12oRoCfrRU=
Subject key identifier: FF:9F:D2:09:DE:25:C6:A1:6D:38:04:45:4B:1E:11:0E:BB:AE:C2:AF
Authority key identifier: 80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
Certificate issuer: /CN=F364744FAF/serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Certificate serial: 0932
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
Manifest number: 092E
Signing time: Wed 23 Sep 2026 01:51:27 +0000
Manifest this update: Wed 23 Sep 2026 01:51:27 +0000
Manifest next update: Fri 25 Sep 2026 01:51:27 +0000
Files and hashes: 1: gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl (hash: 1g+3009v4S4XSdJaTxhUCq3FPe3tNKkcy7D9zktb0As=)
2: 1C467B5A8B6C11F1A58384A2CE1D38B0.roa (hash: 2c1rafmJ8uAX7I4T9KV6h7Qhuemf9XiHnWfTCcuaKOs=)
3: 7C4E6EFA8B6B11F1975A431DCF1D38B0.roa (hash: 5fNF9adn8hznCtC8W7/QFTQ4MXq5VVjvENhur/9sV/w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 01:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2354 (0x932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364744FAF, serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Validity
Not Before: Sep 23 01:51:27 2026 GMT
Not After : Sep 25 01:51:27 2026 GMT
Subject: CN=6ab3309f-9e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:26:78:ed:1a:5c:d6:0c:5f:35:2b:fe:83:
06:b9:df:54:b2:32:99:dc:6d:6e:13:2b:f9:a5:5d:
7b:f2:31:00:62:f3:c8:19:cd:cb:0d:fe:31:18:c2:
cd:f2:bc:5e:a0:b9:db:32:bb:5a:63:b1:2c:04:9b:
33:b5:08:84:11:f4:62:f9:e2:17:66:66:25:78:90:
d7:31:8c:82:13:25:8e:ec:1b:09:65:1e:01:be:1c:
10:be:c3:ac:6f:a2:97:30:00:cc:fd:d2:af:5a:06:
b6:97:fc:dc:05:ed:b9:b2:55:cd:34:8e:e1:d5:45:
fa:96:b6:d9:46:2c:af:c2:bd:49:b9:c9:17:de:eb:
ca:91:01:34:ac:5e:59:4c:71:b4:0d:04:d7:94:a6:
0e:25:52:ef:6e:a0:a6:34:4c:22:9a:f3:68:d0:90:
e8:0a:d9:50:5e:bb:5f:de:20:4a:7d:43:5a:f3:98:
19:a6:c2:c7:f7:31:87:27:e1:79:f4:67:59:67:c9:
1a:bd:65:a6:20:5d:b1:38:c6:e1:d1:f4:da:e2:97:
c3:62:3b:33:c7:bd:89:db:ad:8c:6d:43:15:65:10:
dc:29:1b:47:27:33:11:96:df:fd:3e:33:13:1d:ec:
57:19:b8:6f:cc:c4:d4:d8:fd:a0:56:18:21:9c:27:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9F:D2:09:DE:25:C6:A1:6D:38:04:45:4B:1E:11:0E:BB:AE:C2:AF
X509v3 Authority Key Identifier:
keyid:80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:9e:3c:36:b2:76:3f:d9:fd:0f:c4:f5:ea:67:f5:41:2d:7a:
35:74:1f:ea:bd:73:7f:4f:d3:b5:8e:af:67:8f:8c:0b:3c:84:
e2:57:e9:82:27:f5:a1:62:31:d4:88:87:25:4d:77:f0:a3:b7:
30:23:54:9f:9a:c4:54:ce:45:d6:9c:02:57:84:fa:60:5b:d6:
a9:76:cd:6b:b0:57:5c:8a:a5:c4:83:6f:cf:a5:31:a6:27:6e:
04:98:ba:80:2c:04:65:f4:d0:8d:6e:28:86:7f:92:a4:d7:27:
03:fc:c6:88:3f:a2:17:34:12:75:d6:7d:06:97:29:e6:14:53:
b9:b6:40:4d:70:35:16:37:c7:4c:5f:6b:45:de:1f:58:7d:c9:
83:24:ab:7f:5f:1d:b2:5f:cc:26:5a:16:de:c1:6c:38:a5:7d:
1f:e5:e8:8a:ae:ae:30:50:a8:42:6a:0a:6f:30:92:0b:90:78:
b9:71:4d:19:15:c6:3d:28:03:be:ed:9f:57:c8:69:b3:3a:ef:
e2:c3:5c:c8:45:48:c0:42:60:40:36:49:0c:30:01:2c:bf:fe:
53:38:d1:e4:fc:12:66:45:bf:3c:9d:53:b4:ce:af:d4:8f:16:
ed:6f:53:00:49:e6:18:48:79:c2:28:20:39:96:db:20:dc:99:
8c:ab:dd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:13:49 2026 by rpki-client