
Error: rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
File: ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft (raw, json)
Hash identifier: jsSspwtcPvYUFbvcyzZCJsJuNRn+J5fddRXhMgPWg+k=
Subject key identifier: AA:46:FB:54:C6:8D:B5:9C:F2:70:A7:0D:81:55:41:CC:C9:C6:69:AE
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Certificate issuer: /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial: 0FCB
Authority info access: rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
Manifest number: 0FBD
Signing time: Sat 10 Oct 2026 01:00:26 +0000
Manifest this update: Sat 10 Oct 2026 01:00:25 +0000
Manifest next update: Mon 12 Oct 2026 01:00:25 +0000
Files and hashes: 1: ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl (hash: TZs0lwhH7jefw11FomAv8TELC8rz2k8V/SH7d84lfJM=)
2: 12A260B4849111F195A5D2BBCE1D38B0.roa (hash: Zb+WC9W9F2kd9qzK90J/GHlkEMoKxwiZKn5a50rvWiY=)
3: 8378B942986E11EBA9B2860AF8AEA228.roa (hash: DCXxXlW0spouErSs20DWzGFXGGBNaPXmr93oX+0glto=)
4: B13DE26C980F11EBBA26A90FF8AEA228.roa (hash: yCbUwKaqaW0f/0Vl+tcwN9G6XJ8wrDKMmp+woAIv4Rg=)
5: 3E04DE108B7811F18705BAE8CE1D38B0.roa (hash: C1lsyEuFMUa4JVGq3Zk1ehqqctSAV2zoFX32Ak+7/iw=)
6: 87C7F2EE8B7811F18687D0E8CE1D38B0.roa (hash: VHPttPpUSEj/IMkJOgNZXqpouSQeuk9KI7TWIgiMsNo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4043 (0xfcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3699B8EAR, serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Validity
Not Before: Oct 10 01:00:25 2026 GMT
Not After : Oct 12 01:00:25 2026 GMT
Subject: CN=6ac98e2a-003e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:52:c0:e8:b8:98:c0:8f:63:de:6e:a8:84:
42:3b:e9:35:89:37:55:99:bd:e7:fe:80:e7:04:b7:
d6:9b:eb:7a:70:2d:fd:aa:52:cb:8a:98:bc:99:dd:
bb:f2:d5:83:b7:c2:fd:4a:7c:1d:ba:cb:7c:3c:ff:
df:f7:5a:0e:5b:36:ad:f0:f7:2a:8d:15:68:60:0e:
6f:49:d0:b8:93:bd:9b:ab:a9:33:f2:4f:11:80:98:
90:d1:04:ee:ef:5c:ae:71:98:ef:d8:97:99:31:40:
d3:27:a3:84:10:d1:08:0a:ef:33:4c:3e:89:b0:ee:
41:a1:42:f6:d2:9c:16:bf:23:dd:e1:5f:47:72:34:
99:03:7f:29:51:dc:bb:49:9f:b5:d9:ed:d9:0d:be:
f8:22:c4:12:cc:ba:d4:d6:4c:5d:55:40:97:d0:c7:
9e:00:1f:c8:30:7f:0c:0c:6c:60:25:6e:16:6e:c2:
73:66:9a:63:45:a3:a2:42:6b:d4:2b:a0:e2:28:7f:
76:71:23:17:9c:fa:75:e3:27:98:91:f4:bc:21:20:
bb:6a:c5:53:6a:33:6e:23:a2:78:89:11:57:09:63:
3e:a2:ee:77:99:d7:67:0d:1e:9b:2d:1a:a6:90:56:
41:15:9f:4d:46:54:92:6e:7b:50:34:1e:dd:00:15:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:46:FB:54:C6:8D:B5:9C:F2:70:A7:0D:81:55:41:CC:C9:C6:69:AE
X509v3 Authority Key Identifier:
keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:a9:66:f4:13:43:1b:37:ab:09:25:73:c6:05:a8:a8:7e:e4:
15:e4:da:28:c5:96:be:17:61:2b:c9:ad:5f:9f:7c:56:a0:f0:
64:92:45:ba:9d:fa:46:f7:fa:7a:05:eb:d9:3c:09:44:0c:99:
6d:2a:67:66:f6:58:32:13:53:95:83:12:2d:31:43:85:70:47:
5e:cb:ee:98:5b:75:53:72:21:69:31:a6:34:51:4e:82:f0:d3:
4b:49:c6:4d:5e:a5:0f:cc:3a:c7:c3:a5:10:89:2f:96:16:b6:
0f:6a:80:94:62:33:18:6d:7a:b1:0a:3a:3b:60:32:0c:81:3a:
6a:be:e0:ed:92:35:5c:83:ad:0f:22:6e:d7:f0:8c:ae:76:8b:
f9:87:a0:95:bc:9b:ed:08:49:81:64:85:2e:b3:c7:d4:18:90:
45:de:cb:0a:d1:d5:e0:77:f2:d6:fe:60:d8:e3:46:8f:aa:1b:
9e:6a:d8:d7:94:da:a6:87:aa:a3:b0:0c:04:3e:05:db:de:00:
b8:4a:a6:6c:0e:88:00:82:53:1f:e0:41:68:f5:23:c0:54:57:
bc:b5:14:ba:d9:d9:f9:51:64:82:d2:17:a4:60:d7:9b:df:2f:
86:01:50:aa:7e:fc:77:ba:70:f3:30:2d:12:f9:a9:ac:72:81:
cd:81:bd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:57:25 2026 by rpki-client