
Error: rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
File: gAEXeatK0jDEfjKtDyaMBltYJzk.mft (raw, json)
Hash identifier: 2xQygKHVDRX2pthrxTimtH45T4M3s11MwBqBTlGavUM=
Subject key identifier: 6B:F5:56:60:C2:DD:89:49:26:F4:16:F4:52:54:02:62:FC:2F:2A:56
Authority key identifier: 80:01:17:79:AB:4A:D2:30:C4:7E:32:AD:0F:26:8C:06:5B:58:27:39
Certificate issuer: /CN=F3678405AF/serialNumber=80011779AB4AD230C47E32AD0F268C065B582739
Certificate serial: 4D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
Manifest number: 4A
Signing time: Thu 08 Oct 2026 05:46:27 +0000
Manifest this update: Thu 08 Oct 2026 05:46:26 +0000
Manifest next update: Sat 10 Oct 2026 05:46:26 +0000
Files and hashes: 1: gAEXeatK0jDEfjKtDyaMBltYJzk.crl (hash: eUhFEyMJkeaBkBdLpjeWjKqb/fqmuCUteMIfaVpFlNg=)
2: EC3E8552925911F1861D7FC6CE1D38B0.roa (hash: wMxM6iiSP5VezernVRQAzC5Ti2yHn1gKly6ToFgfUc4=)
3: AFC3C4F48CFD11F1AEB72BB7CE1D38B0.roa (hash: SgKxF5/8dtqg/2YdGcT3nH3vWLieJxae9WqWx8WQJDY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Oct 2026 05:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3678405AF, serialNumber=80011779AB4AD230C47E32AD0F268C065B582739
Validity
Not Before: Oct 8 05:46:26 2026 GMT
Not After : Oct 10 05:46:26 2026 GMT
Subject: CN=6ac72e33-7b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:92:98:1b:64:68:8c:dc:9a:e6:70:e1:b6:
44:2a:da:0b:a6:89:0c:f5:1b:0c:ef:c8:02:ed:2f:
ff:b1:bd:c8:cb:3e:68:94:16:c5:09:7d:b0:72:29:
08:6f:23:d6:75:b5:55:eb:c8:97:99:ce:e2:7b:ad:
d3:30:d8:16:20:e0:fd:90:e2:07:52:8f:42:42:6b:
2c:36:45:84:3f:9d:f0:30:d8:f4:51:a1:42:14:0d:
9b:8e:ae:28:35:9b:26:d1:89:40:0d:9a:71:90:49:
64:6a:8c:10:f9:82:f3:4d:55:16:35:48:ad:69:de:
c0:4b:ac:54:46:33:2d:e4:26:3c:d5:e7:c4:65:4e:
aa:2e:40:aa:5d:95:cb:5e:6c:87:30:ca:75:1f:ff:
8c:ad:11:db:20:a5:c2:26:d3:23:ea:4c:59:30:d0:
79:6f:68:bc:3d:13:a9:ce:92:e2:27:1c:55:18:8f:
1c:0b:5d:2b:89:ce:28:f2:6c:e9:8f:eb:25:f7:95:
b2:93:19:51:95:ff:64:22:56:6a:81:28:92:6a:3d:
25:26:f3:30:07:b8:8a:5c:49:fe:e5:b0:58:0f:48:
28:56:73:72:4f:ea:4b:ba:fa:65:79:a4:f9:db:40:
d0:26:26:27:ad:c7:d6:70:3f:45:f5:1f:e2:6d:fb:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F5:56:60:C2:DD:89:49:26:F4:16:F4:52:54:02:62:FC:2F:2A:56
X509v3 Authority Key Identifier:
keyid:80:01:17:79:AB:4A:D2:30:C4:7E:32:AD:0F:26:8C:06:5B:58:27:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:a0:6e:40:60:be:d7:93:29:83:d8:3e:b2:ac:5b:45:84:d7:
58:48:9c:1c:e8:36:6c:2b:73:f8:67:13:11:89:78:12:54:19:
a9:3d:3d:19:0b:b1:8a:97:ea:b6:98:eb:5d:26:26:ee:fb:23:
0a:83:4c:e2:81:e2:bb:76:fe:5d:1f:97:cb:6d:e8:28:8f:5c:
bc:c6:7b:40:52:d1:5d:77:2a:53:56:14:e9:c9:fb:b8:76:40:
36:8e:e5:e7:70:45:18:0e:4d:0c:6c:a0:94:56:0d:8f:89:ba:
e8:0d:2c:89:9f:b9:74:78:6e:53:d1:ca:b5:98:c1:e2:e4:9d:
7e:b8:3d:fa:07:8d:a0:ba:67:a7:8a:03:71:a4:32:93:e5:f2:
b9:25:f4:09:ae:24:32:e5:69:dc:76:6d:76:5a:56:36:a1:b9:
b3:a0:f3:70:00:8c:f1:64:c6:de:7d:fc:59:e0:78:e7:3b:a5:
6e:4c:e1:5b:e1:ed:28:ba:80:d2:c4:f9:82:6b:fe:fb:b9:a0:
36:0c:ff:16:50:de:7a:1c:43:e5:ee:5a:ae:bf:e9:cb:22:f6:
bf:47:01:cc:da:c0:ac:5f:96:08:53:1c:a2:e6:7d:72:93:3c:
b4:11:89:ab:f6:77:e3:db:31:11:7e:e9:61:f6:6d:71:70:d1:
f3:69:52:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:32:12 2026 by rpki-client