
Error: rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
File: Go8PdPo6YC9H_Ow2uLP3niHzABg.mft (raw, json)
Hash identifier: E9TLlWnpZ86iBT62BiAKvCgs0XCmAIuonxCXsOD8AqU=
Subject key identifier: F1:CE:40:6B:3A:C9:5C:EA:D6:99:18:01:BF:E5:EE:BF:42:96:D4:FF
Authority key identifier: 1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
Certificate issuer: /CN=F3656177AR/serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
Certificate serial: 0E48
Authority info access: rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
Manifest number: 2409
Signing time: Wed 23 Sep 2026 01:05:42 +0000
Manifest this update: Wed 23 Sep 2026 01:05:41 +0000
Manifest next update: Fri 25 Sep 2026 01:05:41 +0000
Files and hashes: 1: Go8PdPo6YC9H_Ow2uLP3niHzABg.crl (hash: Zj/1EeFX3mkwmW0fD9G5Uudc4XXzissVt8GBarhI4W0=)
2: B0CB3182C8C611E9B220F755F8AEA228.roa (hash: gqrU/z6iXLRtLiCnHFZa0s+2uBK1Ct+5G7ihg1BeuL0=)
3: 0E3B72CCC8C811E98D790458F8AEA228.roa (hash: itr9OUnzmKbdqppKMzcknLB4lBw9Ah9MK/Fp31d00b0=)
4: B6DAAC5EC8C811E9B566A258F8AEA228.roa (hash: Y4yGjlwVyROuEGeowY33dWqLnQRQW/byvC0cJpLJ8EA=)
5: 361323CCC8C711E9B652C156F8AEA228.roa (hash: ZDrsLI1RWkFdQohl1nTyw5JGa4/mTeCrLl2gQVNYxnU=)
6: 146302C4C8C711E984B79356F8AEA228.roa (hash: DdSuiwT/ngk7JQ1+7xZSJqCpSkRWy7BhZniM1rPy9e8=)
7: E73F0D38C8C611E98A095B56F8AEA228.roa (hash: B5Em/KidBogdtiGbZ1QNgeUY8m5bNBKn2AeQxhe44fA=)
8: 66123256C8C811E99A726E58F8AEA228.roa (hash: u5cowoJMX4Hxd12oQmnhhFSMAoh12QYhoXjiZuk5pKI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3656 (0xe48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656177AR, serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
Validity
Not Before: Sep 23 01:05:41 2026 GMT
Not After : Sep 25 01:05:41 2026 GMT
Subject: CN=6ab325e5-6689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:00:50:7b:62:b7:3f:62:46:60:65:14:9b:
09:df:dd:fe:d9:5b:d5:b6:ed:e1:4a:79:b9:64:d6:
65:0a:bf:76:51:57:20:3d:ac:0b:b8:97:22:c2:69:
d9:9b:ca:cd:e1:2e:53:4e:9a:9a:84:8c:25:f3:ce:
40:1e:64:d2:ea:c0:a9:c4:e5:66:23:79:21:2e:d0:
db:0c:0c:f5:56:3a:a4:be:18:6e:65:49:20:ed:f3:
5f:1e:e1:db:f2:23:c0:13:3a:22:94:4f:7e:c5:37:
a2:6e:30:0d:97:1f:77:09:8c:7b:d6:9d:81:72:b8:
db:fd:3f:e9:02:93:c2:a0:38:22:11:d4:da:df:6a:
40:92:21:1f:1e:5a:61:ea:08:36:82:b6:96:fb:6c:
79:d7:e8:c2:9c:36:84:40:4c:49:64:53:a0:3a:04:
3b:f2:a2:c7:c5:89:fc:fe:c2:3f:23:e2:cf:3f:8f:
3f:c1:ba:bb:b4:14:10:28:a9:65:48:c6:7a:f9:61:
e7:5e:7d:91:c5:55:d3:7a:d1:0b:05:67:f1:d2:96:
50:d0:f7:b4:a3:f7:6f:15:30:5e:33:9f:e9:f1:f3:
0f:1a:74:c8:bf:f1:46:81:f7:e0:f2:39:85:8f:7e:
95:cf:81:3e:ed:a7:44:55:62:fc:99:ac:7c:fe:a4:
5e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:40:6B:3A:C9:5C:EA:D6:99:18:01:BF:E5:EE:BF:42:96:D4:FF
X509v3 Authority Key Identifier:
keyid:1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:b6:a6:c2:3f:5e:c6:f7:de:8a:39:c8:29:48:96:b0:29:dd:
8e:b1:85:51:c1:09:4a:41:d4:d4:4e:e8:09:8f:e1:53:61:6c:
b8:3c:2d:29:d5:42:03:8b:84:a6:04:0d:ad:32:f8:b9:20:33:
94:4e:0c:59:01:fe:8c:34:e6:8c:47:b9:df:77:3c:80:69:bd:
31:58:de:7e:e0:44:26:3e:3a:35:9c:f1:16:c2:ea:93:64:4e:
94:2f:dd:ef:bb:91:78:79:74:c3:95:03:1a:8d:d7:4b:03:dd:
62:13:8b:6b:d4:51:97:1e:ce:33:37:7d:5a:89:3c:62:59:32:
7e:c6:23:7c:63:ed:d5:cf:bd:67:1e:97:54:95:09:47:c0:9b:
72:74:8f:44:c3:16:3f:41:f6:87:00:47:ab:b2:14:a2:34:01:
ea:de:ec:cd:4c:d4:7c:f3:e9:1b:54:cb:85:d9:cc:ac:e8:da:
7d:f2:29:d7:ad:df:8e:52:88:62:4c:c4:0e:fd:ea:90:39:f3:
33:ba:69:4e:ea:42:2f:8a:c8:82:66:3a:63:7b:44:7e:ac:96:
37:9a:e4:e5:d6:b4:a5:b4:92:c1:1a:1f:96:a8:cb:db:00:82:
69:d1:af:9d:64:56:91:b0:5b:b2:ff:e5:13:96:48:56:78:cb:
84:2d:f2:25
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDkgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTYxNzdBUjExMC8GA1UEBRMoMUE4RjBGNzRGQTNBNjAyRjQ3RkNFQzM2QjhCM0Y3
OUUyMUYzMDAxODAeFw0yNjA5MjMwMTA1NDFaFw0yNjA5MjUwMTA1NDFaMBgxFjAU
BgNVBAMTDTZhYjMyNWU1LTY2ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqPQBQe2K3P2JGYGUUmwnf3f7ZW9W27eFKeblk1mUKv3ZRVyA9rAu4lyLC
admbys3hLlNOmpqEjCXzzkAeZNLqwKnE5WYjeSEu0NsMDPVWOqS+GG5lSSDt818e
4dvyI8ATOiKUT37FN6JuMA2XH3cJjHvWnYFyuNv9P+kCk8KgOCIR1NrfakCSIR8e
WmHqCDaCtpb7bHnX6MKcNoRATElkU6A6BDvyosfFifz+wj8j4s8/jz/Buru0FBAo
qWVIxnr5YedefZHFVdN60QsFZ/HSllDQ97Sj928VMF4zn+nx8w8adMi/8UaB9+Dy
OYWPfpXPgT7tp0RVYvyZrHz+pF6vAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU8c5A
azrJXOrWmRgBv+Xuv0KW1P8wHwYDVR0jBBgwFoAUGo8PdPo6YC9H/Ow2uLP3niHz
ABgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU2MTc3L0MyODU3MjY0Qzg1ODExRTZBOEVFNDY1RkY4QUVBMjI4L0dvOFBk
UG82WUM5SF9PdzJ1TFAzbmlIekFCZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0dvOFBkUG82WUM5SF9PdzJ1TFAzbmlIekFCZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTYxNzcvQzI4NTcyNjRDODU4MTFFNkE4RUU0NjVGRjhBRUEy
MjgvR284UGRQbzZZQzlIX093MnVMUDNuaUh6QUJnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHtqbCP17G996KOcgpSJawKd2OsYVRwQlK
QdTUTugJj+FTYWy4PC0p1UIDi4SmBA2tMvi5IDOUTgxZAf6MNOaMR7nfdzyAab0x
WN5+4EQmPjo1nPEWwuqTZE6UL93vu5F4eXTDlQMajddLA91iE4tr1FGXHs4zN31a
iTxiWTJ+xiN8Y+3Vz71nHpdUlQlHwJtydI9EwxY/QfaHAEershSiNAHq3uzNTNR8
8+kbVMuF2cys6Np98inXrd+OUohiTMQO/eqQOfMzumlO6kIvisiCZjpje0R+rJY3
muTl1rSltJLBGh+WqMvbAIJp0a+dZFaRsFuy/+UTlkhWeMuELfIl
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:31:21 2026 by rpki-client