
Error: rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
File: Ga2syP-jkxMYpsdToKwbKukpXgM.mft (raw, json)
Hash identifier: jIMHivhhLG3WTTcWzG04WLbEy0UMSNrnc89AzNZyrps=
Subject key identifier: 0C:C2:67:F8:9E:17:79:B4:D7:F4:96:A8:FD:6C:A5:5D:B2:59:61:92
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Certificate issuer: /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial: 0AE2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
Manifest number: 0AD7
Signing time: Thu 24 Sep 2026 01:18:39 +0000
Manifest this update: Thu 24 Sep 2026 01:18:39 +0000
Manifest next update: Sat 26 Sep 2026 01:18:39 +0000
Files and hashes: 1: Ga2syP-jkxMYpsdToKwbKukpXgM.crl (hash: THYxR8jqs/DRE2+WFx4AiB8cnhVYBhZnQTlmPhaq068=)
2: 40F0EA0C864C11EF8B0D4162762E951A.roa (hash: 5nZTReAvtcbgPm+oRDhQ83p7XciRK3gVMtmCqG06N7Q=)
3: 19DBEAFC864C11EF91E74660762E951A.roa (hash: ssNbfh+xyxoJkv8ui9GVFM6RQk48tyv7Wmx8dqGtWao=)
4: 8F04BF5C864C11EF8F687464762E951A.roa (hash: MFVB+4npBxn/Yh83eigumhh31Iuk3EG7QH/ll1Qzce0=)
5: DF0FB1A6864B11EFAA421C60762E951A.roa (hash: wcCwWJ/0MHVkGO7m4+40u82BAL5x3asIQ+jyQE9ovPY=)
6: 325E4A4E864B11EF9931C05B762E951A.roa (hash: uilxINn6WdcvcjXq+Nwl5lpnynygHnR6cPspfvXc/m0=)
7: EB320A3E864511EF82F333B8762E951A.roa (hash: AOcstZS+3TqPjLs5Onnwkaac6jTexzGQCvTnjKOL0G4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 01:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2786 (0xae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B52A6AF, serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Validity
Not Before: Sep 24 01:18:39 2026 GMT
Not After : Sep 26 01:18:39 2026 GMT
Subject: CN=6ab47a6f-ff8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:10:14:9c:48:d6:68:60:ca:81:d7:56:f9:
d8:59:91:0e:1f:75:7a:4b:04:58:f1:91:71:05:6e:
ec:b1:f0:f0:b0:3f:e4:87:01:7e:07:22:d3:da:f0:
f6:fb:9f:01:3d:c4:f8:fe:69:d5:f0:77:76:4e:2f:
97:08:b0:89:b2:ae:50:3f:90:fe:3b:a4:36:ae:78:
ae:a7:77:f4:36:ae:71:fa:3e:c2:51:21:22:9b:57:
d6:98:e8:21:bc:8d:37:57:50:58:d6:a3:31:56:32:
db:36:30:46:fe:15:bf:8f:4d:ed:e8:2d:42:06:3e:
5d:b6:57:ba:e9:5b:bf:94:91:e7:fe:c8:41:d9:a5:
66:0a:b1:3c:6d:d4:05:21:06:d2:24:ef:04:4b:2e:
aa:4a:56:1b:12:c0:05:1e:17:9b:42:1d:22:56:72:
80:b8:d9:4a:fe:95:33:c1:22:11:36:c9:08:43:45:
6e:18:8d:e2:2c:22:2d:c6:87:82:e1:24:96:b8:21:
6b:fb:39:07:0d:af:c0:05:7d:01:8c:19:6d:a9:c5:
69:dc:64:38:0e:5e:17:99:49:a8:ac:95:df:3e:eb:
da:40:c6:39:bf:25:b2:43:04:4d:96:8f:c4:fc:bf:
3d:1b:6a:0b:8f:5c:66:eb:e7:cd:04:f5:26:43:34:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:67:F8:9E:17:79:B4:D7:F4:96:A8:FD:6C:A5:5D:B2:59:61:92
X509v3 Authority Key Identifier:
keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a6:b8:f4:64:82:63:91:cd:aa:37:33:c9:be:6f:24:67:46:
a3:2c:b7:6a:d6:3c:b1:f7:70:ed:f3:4e:b1:7f:1c:d1:d4:1f:
a2:6d:5c:9e:4f:22:09:57:ff:30:a9:5f:3d:d8:35:3c:22:01:
9c:32:95:6d:ae:ba:7e:b5:98:31:5d:e8:a1:ae:6f:81:c4:59:
fa:f6:4e:f0:7f:d3:05:e0:d1:78:39:76:4d:0e:74:44:0b:68:
d4:b7:cc:be:81:1a:71:20:49:7b:04:10:e1:6f:98:cc:3f:ec:
9f:d0:41:a1:32:51:80:2f:80:30:83:ae:fb:d1:8a:5e:87:9f:
e1:be:c2:b7:71:bf:94:5b:c9:89:64:8c:2a:8f:87:0a:fe:b6:
07:15:fe:ea:35:9f:42:fb:ce:2f:a5:9e:87:7d:73:ff:48:a5:
2f:40:03:b3:1f:e9:b7:35:ed:fb:cf:a0:ab:49:ec:42:d7:5f:
c4:b4:82:ea:d6:fe:df:d5:e2:11:b4:5c:6c:3f:6b:ba:a9:68:
48:e6:14:c2:9f:87:d7:34:78:c0:d2:af:84:20:dd:cf:50:d6:
e1:ec:04:56:66:7c:c0:ad:db:ad:2a:3a:9d:e7:78:7d:d6:b6:
b8:66:c1:c5:ae:5b:bd:0a:a9:ab:56:5b:1c:69:20:58:4c:58:
00:23:6d:40
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCuIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjUyQTZBRjExMC8GA1UEBRMoMTlBREFDQzhGRkEzOTMxMzE4QTZDNzUzQTBBQzFC
MkFFOTI5NUUwMzAeFw0yNjA5MjQwMTE4MzlaFw0yNjA5MjYwMTE4MzlaMBgxFjAU
BgNVBAMTDTZhYjQ3YTZmLWZmOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLzBAUnEjWaGDKgddW+dhZkQ4fdXpLBFjxkXEFbuyx8PCwP+SHAX4HItPa
8Pb7nwE9xPj+adXwd3ZOL5cIsImyrlA/kP47pDaueK6nd/Q2rnH6PsJRISKbV9aY
6CG8jTdXUFjWozFWMts2MEb+Fb+PTe3oLUIGPl22V7rpW7+Ukef+yEHZpWYKsTxt
1AUhBtIk7wRLLqpKVhsSwAUeF5tCHSJWcoC42Ur+lTPBIhE2yQhDRW4YjeIsIi3G
h4LhJJa4IWv7OQcNr8AFfQGMGW2pxWncZDgOXheZSaisld8+69pAxjm/JbJDBE2W
j8T8vz0baguPXGbr580E9SZDNBhbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUDMJn
+J4XebTX9Jao/WylXbJZYZIwHwYDVR0jBBgwFoAUGa2syP+jkxMYpsdToKwbKukp
XgMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1MkE2LzZBRTMwN0I2NkZGRDExRTlBNjlDQzEzNEY4QUVBMjI4L0dhMnN5
UC1qa3hNWXBzZFRvS3diS3VrcFhnTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dhMnN5UC1qa3hNWXBzZFRvS3diS3VrcFhnTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjUyQTYvNkFFMzA3QjY2RkZEMTFFOUE2OUNDMTM0RjhB
RUEyMjgvR2Eyc3lQLWpreE1ZcHNkVG9Ld2JLdWtwWGdNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6prj0ZIJjkc2qNzPJvm8kZ0ajLLdq
1jyx93Dt806xfxzR1B+ibVyeTyIJV/8wqV892DU8IgGcMpVtrrp+tZgxXeihrm+B
xFn69k7wf9MF4NF4OXZNDnREC2jUt8y+gRpxIEl7BBDhb5jMP+yf0EGhMlGAL4Aw
g6770Ypeh5/hvsK3cb+UW8mJZIwqj4cK/rYHFf7qNZ9C+84vpZ6HfXP/SKUvQAOz
H+m3Ne37z6CrSexC11/EtILq1v7f1eIRtFxsP2u6qWhI5hTCn4fXNHjA0q+EIN3P
UNbh7ARWZnzArdutKjqd53h91ra4ZsHFrlu9CqmrVlscaSBYTFgAI21A
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:18:06 2026 by rpki-client