
Error: rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
File: gnLCuLOzie4re71PvVUJZ28yebs.mft (raw, json)
Hash identifier: N3PtgpbX7KFZDBMMle7Z8voT+v1wPlxEaqi9PbnMzXw=
Subject key identifier: 11:45:69:93:3C:78:47:84:11:7B:18:52:DE:4B:3D:F9:F5:6F:A4:B9
Authority key identifier: 82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
Certificate issuer: /CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Certificate serial: 0676
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
Manifest number: 0664
Signing time: Thu 24 Sep 2026 02:47:35 +0000
Manifest this update: Thu 24 Sep 2026 02:47:34 +0000
Manifest next update: Sat 26 Sep 2026 02:47:34 +0000
Files and hashes: 1: gnLCuLOzie4re71PvVUJZ28yebs.crl (hash: 2QtN8wQOw/PJHVzIvT9xcsVj5rAZfouWoEdtT8KAoug=)
2: 392B415C962411F1ACFA44BBCE1D38B0.roa (hash: LxzFCi7JU4fjc8I/HMELOkIJrVr9JdHXpdpNxI6Cj2A=)
3: 2D8F57BA962511F1A1E11EC3CE1D38B0.roa (hash: iyI7OZNk5JxLuz97Rah8MP9qePaXqqI/w+K+KVaK3ZI=)
4: DADAC6EA962311F1B0C214BBCE1D38B0.roa (hash: 5MEKxws/tSLBDcD7RIUBQp5fH5C2lVDbBkZ8cZqbHD8=)
5: 28AC077E962611F1AE5DBBC7CE1D38B0.roa (hash: FX1gomZYkFfLAaFV89AIDDf6PT5MVpQU2gAZbD1m4AI=)
6: D10078C0962511F182917BC5CE1D38B0.roa (hash: qZiwreEQ5AVLAxnIrMCbPDBr4h7nRd6VecR32M2XQCY=)
7: CE1E54E8962411F1A72068BFCE1D38B0.roa (hash: R2CZNdQnuiZF5AcIv4DAPM1jIgHiwP8PJumaHo5AGno=)
8: 815FAFC6962411F1995CF8BECE1D38B0.roa (hash: fmHEZWmmyjoAMqBm3ElorytWO2heDwGjaJPbde41qy4=)
9: 985212B2962611F1BB996FCBCE1D38B0.roa (hash: azA9FLKur7HtQYuVsDfj8+2Et39GkA9EuUV1YVQs4x4=)
10: 86D242BA962511F1A6E696C3CE1D38B0.roa (hash: +aT643r7vwQVIvpoDdf8DbDfhgHMBDbc87UehjNsw8I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 00:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1654 (0x676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C94EAF, serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Validity
Not Before: Sep 24 02:47:34 2026 GMT
Not After : Sep 26 02:47:34 2026 GMT
Subject: CN=6ab48f47-51aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:0d:33:1a:0a:28:ed:86:28:34:33:22:c9:
41:7e:83:09:67:0d:57:a6:f9:05:d9:fd:19:ac:e4:
47:20:f0:e3:16:f8:88:68:5a:07:91:91:b3:c1:08:
b8:bd:12:08:47:cd:00:55:a8:e8:56:ff:32:59:83:
aa:21:22:a0:74:e5:d8:6f:8c:15:7b:4f:8a:be:65:
cb:9d:e1:4f:fd:b2:a6:42:81:b1:db:1b:b2:c5:94:
21:5a:15:81:d5:66:e7:27:03:e3:04:52:38:0a:91:
fa:ce:46:a9:eb:9f:ef:a2:54:47:52:2e:80:cf:75:
8c:ab:d7:00:52:90:15:6c:95:07:35:28:e6:d7:9f:
a1:e5:95:1a:3b:a8:e1:bb:a4:b8:68:d6:2c:42:cd:
e4:a5:cd:8c:95:f5:73:68:b1:bf:21:1a:04:ee:be:
85:6c:48:9c:fe:88:15:33:22:10:e4:b7:76:5b:df:
54:6f:9b:d2:f4:cb:80:ce:84:78:03:38:6d:f3:9a:
9d:15:78:6a:b1:2c:ff:28:1e:15:ad:d7:16:0d:0a:
a5:cc:5b:bd:c6:62:4d:91:48:44:70:d4:9a:bf:33:
c4:9f:d2:9c:9a:3f:2b:4c:bf:e9:2d:fd:63:24:72:
c8:63:9e:bb:63:35:9e:fa:05:d7:55:2e:ad:8e:09:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:45:69:93:3C:78:47:84:11:7B:18:52:DE:4B:3D:F9:F5:6F:A4:B9
X509v3 Authority Key Identifier:
keyid:82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:c0:e1:76:6a:40:84:20:32:7b:b0:31:cd:86:58:6b:40:26:
fb:3d:84:19:c9:0b:6b:ed:22:dc:84:1c:d4:6d:e4:8a:ba:53:
be:41:9b:ae:04:0b:a9:06:e7:ac:e4:48:cc:58:d2:56:0f:fe:
44:e6:30:6a:c0:98:4a:45:2d:16:e0:bb:b0:a1:32:a2:54:f5:
a3:f4:bb:db:8b:04:5a:cb:42:34:54:8b:f8:8e:93:74:6c:40:
0e:fd:aa:3f:cd:21:52:50:11:9e:35:d5:03:96:0d:56:f8:e1:
7d:dc:41:0c:5e:e5:2c:f0:21:45:e5:7d:dc:dc:7c:d6:7f:26:
c4:f1:6a:cb:5b:de:9a:a9:a0:a8:e5:a0:f7:8c:9d:b4:46:c8:
9a:da:d6:80:ec:29:71:38:84:8c:f3:7f:39:89:dd:bc:dc:2c:
81:92:82:59:fc:51:58:79:69:62:04:39:95:7f:6e:ba:e1:11:
e8:b9:2b:59:56:c5:98:82:91:74:64:01:83:42:77:d0:cb:0b:
bc:8a:31:b5:c1:52:8e:fa:1b:08:45:e4:8a:90:77:a3:3b:06:
a0:6c:40:8d:26:6d:86:05:65:4c:b7:e5:b9:b1:1a:f4:74:04:
e1:c5:57:2f:65:50:62:ce:3e:55:f0:14:80:18:83:d7:45:d5:
93:24:3c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:45:01 2026 by rpki-client