
Error: rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
File: GPDP5J-oAtYH_7cwFFeG05UL0jA.mft (raw, json)
Hash identifier: zTfCnI1yDsuX7oodcpbTMXl5Zjpj2UKxFF4/Z4QTpsM=
Subject key identifier: 95:35:B1:74:58:CA:CF:F9:B9:EE:65:4F:B8:A7:AC:AF:A5:BA:97:CF
Authority key identifier: 18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30
Certificate issuer: /CN=F36BD41EAF/serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
Certificate serial: 0156
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
Manifest number: 0154
Signing time: Sun 15 Nov 2026 05:17:43 +0000
Manifest this update: Sun 15 Nov 2026 05:17:42 +0000
Manifest next update: Tue 17 Nov 2026 05:17:42 +0000
Files and hashes: 1: GPDP5J-oAtYH_7cwFFeG05UL0jA.crl (hash: j0AZwPMHLsbjHvJWfgmFcgyVhcp5LNTOAFe7Nd3E6hg=)
2: 0B035958DA7311F0BD9C4B87DAE4EC9C.roa (hash: 1YCwQ08Er0/oJv0rugAKvka/AUZZE4KlC5UipfKoXzE=)
3: AF914E0ED9B911F0BC8E84F1DAE4EC9C.roa (hash: dpaLUZ7X2+eBahFfaBRBpZGcldL+iPoSovpQWiyqWHw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD41EAF, serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
Validity
Not Before: Nov 15 05:17:42 2026 GMT
Not After : Nov 17 05:17:42 2026 GMT
Subject: CN=6af94077-a9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:4a:ed:1f:c1:94:ff:c9:f7:9a:b9:e3:c5:
b1:9e:a0:ff:84:54:9c:ec:b5:7e:81:76:5f:e3:70:
44:86:d1:49:a4:2f:b9:f4:cb:43:b7:d9:e6:f2:05:
cc:0d:1e:7a:43:09:48:d2:63:f0:92:3e:37:22:8f:
c9:d7:02:de:1d:62:30:29:2b:44:b6:d1:29:0b:d7:
8e:c3:21:97:6a:4f:37:0e:d0:5b:b0:6e:8c:b9:32:
a2:be:f8:e0:d5:9f:6d:8a:f8:f2:35:0a:e6:f9:10:
78:b5:fd:7b:72:45:f4:48:af:9d:f8:86:2c:23:08:
30:df:d7:0b:85:0b:79:28:f0:9a:d9:c0:4d:5b:2d:
c2:04:d0:0e:5b:82:2f:0f:3c:1e:92:bb:f8:41:00:
98:88:8b:8a:0a:61:24:d0:23:54:62:5b:84:d3:99:
9b:71:e9:c0:c7:d1:e9:09:eb:5e:17:db:58:5d:8c:
2e:c2:08:e3:ee:b8:e7:11:2b:00:74:7a:85:f1:23:
2f:9f:de:64:71:b9:58:4b:bc:71:4e:73:f7:bc:e2:
01:f6:d6:6b:e1:b7:8a:04:40:5b:25:23:07:d7:7c:
be:da:ea:5c:5e:d3:cc:77:d8:e9:6e:a3:98:5a:37:
03:44:b8:a6:e6:80:d7:28:c0:59:81:53:30:a5:f5:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:35:B1:74:58:CA:CF:F9:B9:EE:65:4F:B8:A7:AC:AF:A5:BA:97:CF
X509v3 Authority Key Identifier:
keyid:18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:0d:b6:ec:09:1b:b8:82:ab:b0:69:35:27:97:b4:7d:3d:fb:
19:51:0e:36:a9:f1:8b:5a:88:c9:f8:b4:33:6e:7b:38:d2:8e:
53:fc:4f:9b:94:79:b0:db:87:c0:f5:4c:62:3b:81:03:a2:86:
d4:98:9b:d0:b0:d0:61:99:fa:d3:5a:b2:7e:58:b0:ed:a1:78:
74:40:30:7f:37:a0:13:33:a3:6e:63:ad:5f:89:77:41:7f:a9:
27:a3:3e:77:29:3c:c7:29:70:b4:34:48:7b:38:9c:1d:48:42:
9a:e2:8b:1f:84:dd:25:21:d2:33:fe:1d:7d:bc:18:00:b3:35:
ec:b2:e3:a6:6d:72:fc:27:d9:9a:30:9a:58:f0:4f:27:75:76:
93:0e:fc:f5:ec:69:64:c7:22:bf:ad:e6:d7:69:27:f5:81:73:
10:73:75:9a:0e:ab:32:1e:76:b0:e2:ed:9e:b9:14:78:db:9e:
9b:50:0b:8c:5f:92:81:45:72:fb:1d:8d:3f:d8:65:3f:47:b4:
d2:6a:33:fe:15:d9:a0:38:6a:85:b1:55:7a:b5:b8:52:fe:dd:
4f:e5:28:65:30:a3:3f:da:57:26:82:88:fe:be:78:8e:13:32:
48:90:fa:dd:d3:22:81:07:5d:31:dd:63:f7:1c:ea:1b:e4:82:
c2:73:09:b7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkQ0MUVBRjExMC8GA1UEBRMoMThGMENGRTQ5RkE4MDJENjA3RkZCNzMwMTQ1Nzg2
RDM5NTBCRDIzMDAeFw0yNjExMTUwNTE3NDJaFw0yNjExMTcwNTE3NDJaMBgxFjAU
BgNVBAMTDTZhZjk0MDc3LWE5YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCznkrtH8GU/8n3mrnjxbGeoP+EVJzstX6Bdl/jcESG0UmkL7n0y0O32eby
BcwNHnpDCUjSY/CSPjcij8nXAt4dYjApK0S20SkL147DIZdqTzcO0Fuwboy5MqK+
+ODVn22K+PI1Cub5EHi1/XtyRfRIr534hiwjCDDf1wuFC3ko8JrZwE1bLcIE0A5b
gi8PPB6Su/hBAJiIi4oKYSTQI1RiW4TTmZtx6cDH0ekJ614X21hdjC7CCOPuuOcR
KwB0eoXxIy+f3mRxuVhLvHFOc/e84gH21mvht4oEQFslIwfXfL7a6lxe08x32Olu
o5haNwNEuKbmgNcowFmBUzCl9SIvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUlTWx
dFjKz/m57mVPuKesr6W6l88wHwYDVR0jBBgwFoAUGPDP5J+oAtYH/7cwFFeG05UL
0jAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJENDFFLzMwNDBFMUQ2RDlCNTExRjBBMTQzQThEN0RBRTRFQzlDL0dQRFA1
Si1vQXRZSF83Y3dGRmVHMDVVTDBqQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dQRFA1Si1vQXRZSF83Y3dGRmVHMDVVTDBqQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkQ0MUUvMzA0MEUxRDZEOUI1MTFGMEExNDNBOEQ3REFF
NEVDOUMvR1BEUDVKLW9BdFlIXzdjd0ZGZUcwNVVMMGpBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEDbbsCRu4gquwaTUnl7R9PfsZUQ42
qfGLWojJ+LQzbns40o5T/E+blHmw24fA9UxiO4EDoobUmJvQsNBhmfrTWrJ+WLDt
oXh0QDB/N6ATM6NuY61fiXdBf6knoz53KTzHKXC0NEh7OJwdSEKa4osfhN0lIdIz
/h19vBgAszXssuOmbXL8J9maMJpY8E8ndXaTDvz17GlkxyK/rebXaSf1gXMQc3Wa
DqsyHnaw4u2euRR4256bUAuMX5KBRXL7HY0/2GU/R7TSajP+FdmgOGqFsVV6tbhS
/t1P5ShlMKM/2lcmgoj+vniOEzJIkPrd0yKBB10x3WP3HOob5ILCcwm3
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:49:21 2026 by rpki-client