
Error: rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
File: GB73GjT5LPYtzRHXkAfFhUg5was.mft (raw, json)
Hash identifier: o5Ap+CZiI7s1a0kICX8R7M6E2PNd0olgZo/6sgP0fZo=
Subject key identifier: 06:DD:9D:3C:F8:96:6E:D8:77:6E:5D:6B:10:57:AB:B2:BB:BB:0D:BB
Authority key identifier: 18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB
Certificate issuer: /CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
Certificate serial: 0D73
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
Manifest number: 0D71
Signing time: Thu 08 Oct 2026 01:09:00 +0000
Manifest this update: Thu 08 Oct 2026 01:08:59 +0000
Manifest next update: Sat 10 Oct 2026 01:08:59 +0000
Files and hashes: 1: GB73GjT5LPYtzRHXkAfFhUg5was.crl (hash: BU5gWq6a/dkiK094ZOQcZ/CQmCasMweulJYgrk5C0LA=)
2: 99C2D1746B9011E7A18C6069F8AEA228.roa (hash: xVFvLTZ6B74UBRcRd1aRKe2f4QIjw1iEzmityoLx5VY=)
3: 355AD4A683AE11E98A55D62AF8AEA228.roa (hash: yQuqYo4PP7qzl5R5FLB1AGc649ab7ChkeEyvocc2AL0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Oct 2026 00:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3443 (0xd73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668231AF, serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
Validity
Not Before: Oct 8 01:08:59 2026 GMT
Not After : Oct 10 01:08:59 2026 GMT
Subject: CN=6ac6ed2b-b2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:dc:c6:91:c9:3d:ea:85:58:a4:28:85:c4:
af:ee:36:d2:06:81:74:0e:6f:51:a4:9c:99:2b:8d:
0f:1a:e4:bf:dc:fc:73:f0:65:45:88:5e:8d:60:f1:
6e:ac:74:a5:5b:e1:d6:60:65:b0:ac:0d:47:12:45:
fc:55:85:b2:3e:fd:6a:22:97:db:5d:04:1a:b1:37:
fb:47:bd:33:5d:f9:af:2c:ec:be:68:93:ee:0f:29:
a9:0d:09:fa:07:98:99:af:c4:35:35:3b:3b:93:ae:
45:53:95:e0:d9:0f:b5:aa:52:18:47:f3:0a:9b:7a:
ff:16:4f:19:0e:6c:e0:ba:aa:3a:65:4a:2b:eb:1a:
87:58:ce:a1:80:28:b6:35:4a:58:7b:5d:3b:5a:ed:
ef:84:99:35:3f:cb:31:fc:2c:c8:c2:dd:b1:45:c9:
9a:a6:9e:ac:0e:e1:c1:55:7e:7c:8b:ae:18:b3:46:
64:96:0b:ef:9e:29:31:75:be:22:dd:fb:60:6e:9c:
ea:ee:a9:1c:83:b2:50:a5:39:d6:62:8e:a1:66:91:
2d:34:08:77:96:8c:7b:92:43:64:c5:4c:ec:60:d5:
a6:61:4b:9c:84:b0:d7:2e:a1:76:73:cc:5d:fe:e9:
e6:47:3d:59:ee:c7:e4:33:b0:b5:19:83:33:8a:b2:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DD:9D:3C:F8:96:6E:D8:77:6E:5D:6B:10:57:AB:B2:BB:BB:0D:BB
X509v3 Authority Key Identifier:
keyid:18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:f0:81:02:bc:4a:b8:1a:6f:aa:a0:20:b8:09:ad:e3:38:66:
07:c5:0d:ca:30:ae:33:01:c1:39:95:86:57:64:c0:2a:ca:9a:
9c:f0:26:78:5c:a4:71:a7:9e:6c:6b:b1:9b:68:76:96:46:54:
df:48:dd:bc:ce:e5:66:30:d8:58:6e:33:8f:88:1f:b6:76:9c:
32:7b:62:fe:a6:ff:0a:0b:fa:2b:2f:36:ae:60:08:62:0d:83:
c9:4b:bd:96:d4:81:7d:9f:08:bb:ee:f8:6a:bd:ca:22:80:ae:
44:08:92:3c:c2:ba:0a:16:70:91:a2:9b:33:d0:f8:89:d3:e6:
d1:3b:5c:59:0c:86:48:04:2d:f5:04:4a:d6:9e:dc:19:c6:e7:
8b:3a:27:b2:ae:1f:e0:f3:f5:be:ed:b6:01:6c:48:bf:2f:c8:
c5:97:03:dc:89:69:ac:81:2a:48:85:1e:2e:64:5f:44:4c:03:
65:cd:9f:6b:e1:bb:08:4a:b3:5d:76:90:05:8d:f6:2d:6a:9e:
44:bb:c8:9c:ea:8e:56:f9:a8:d3:21:a3:fe:95:00:9a:b5:93:
4c:e3:f7:99:e1:91:55:73:e5:cb:0b:74:9f:e3:30:68:9c:28:
aa:8b:3b:ba:28:4e:bf:36:fe:8c:d8:28:e3:1a:06:92:37:51:
b8:c1:54:0d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDXMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjgyMzFBRjExMC8GA1UEBRMoMTgxRUY3MUEzNEY5MkNGNjJEQ0QxMUQ3OTAwN0M1
ODU0ODM5QzFBQjAeFw0yNjEwMDgwMTA4NTlaFw0yNjEwMTAwMTA4NTlaMBgxFjAU
BgNVBAMTDTZhYzZlZDJiLWIyZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDX1dzGkck96oVYpCiFxK/uNtIGgXQOb1GknJkrjQ8a5L/c/HPwZUWIXo1g
8W6sdKVb4dZgZbCsDUcSRfxVhbI+/Woil9tdBBqxN/tHvTNd+a8s7L5ok+4PKakN
CfoHmJmvxDU1OzuTrkVTleDZD7WqUhhH8wqbev8WTxkObOC6qjplSivrGodYzqGA
KLY1Slh7XTta7e+EmTU/yzH8LMjC3bFFyZqmnqwO4cFVfnyLrhizRmSWC++eKTF1
viLd+2BunOruqRyDslClOdZijqFmkS00CHeWjHuSQ2TFTOxg1aZhS5yEsNcuoXZz
zF3+6eZHPVnux+QzsLUZgzOKsqC5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBt2d
PPiWbth3bl1rEFersru7DbswHwYDVR0jBBgwFoAUGB73GjT5LPYtzRHXkAfFhUg5
waswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4MjMxLzNBQThCQTIwNkI4RTExRTc5M0MxQzU2NUY4QUVBMjI4L0dCNzNH
alQ1TFBZdHpSSFhrQWZGaFVnNXdhcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dCNzNHalQ1TFBZdHpSSFhrQWZGaFVnNXdhcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjgyMzEvM0FBOEJBMjA2QjhFMTFFNzkzQzFDNTY1RjhB
RUEyMjgvR0I3M0dqVDVMUFl0elJIWGtBZkZoVWc1d2FzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDe8IECvEq4Gm+qoCC4Ca3jOGYHxQ3K
MK4zAcE5lYZXZMAqypqc8CZ4XKRxp55sa7GbaHaWRlTfSN28zuVmMNhYbjOPiB+2
dpwye2L+pv8KC/orLzauYAhiDYPJS72W1IF9nwi77vhqvcoigK5ECJI8wroKFnCR
opsz0PiJ0+bRO1xZDIZIBC31BErWntwZxueLOieyrh/g8/W+7bYBbEi/L8jFlwPc
iWmsgSpIhR4uZF9ETANlzZ9r4bsISrNddpAFjfYtap5Eu8ic6o5W+ajTIaP+lQCa
tZNM4/eZ4ZFVc+XLC3Sf4zBonCiqizu6KE6/Nv6M2CjjGgaSN1G4wVQN
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:49:33 2026 by rpki-client