
Error: rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
File: GPDP5J-oAtYH_7cwFFeG05UL0jA.mft (raw, json)
Hash identifier: vu3iINvjkrEboWarH5JzMczrVgBNW4Sidymx5y56vB4=
Subject key identifier: B1:78:9D:32:21:FE:96:B5:E1:10:B6:86:00:65:42:B2:5B:BE:C9:FB
Authority key identifier: 18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30
Certificate issuer: /CN=F36BD41EAF/serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
Certificate serial: 0122
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
Manifest number: 0120
Signing time: Thu 24 Sep 2026 05:19:17 +0000
Manifest this update: Thu 24 Sep 2026 05:19:17 +0000
Manifest next update: Sat 26 Sep 2026 05:19:17 +0000
Files and hashes: 1: GPDP5J-oAtYH_7cwFFeG05UL0jA.crl (hash: i8eJ2RlrvRYqJBjMWEg9TPMGvlclIszR1TVnmuiqWls=)
2: 0B035958DA7311F0BD9C4B87DAE4EC9C.roa (hash: 1YCwQ08Er0/oJv0rugAKvka/AUZZE4KlC5UipfKoXzE=)
3: AF914E0ED9B911F0BC8E84F1DAE4EC9C.roa (hash: dpaLUZ7X2+eBahFfaBRBpZGcldL+iPoSovpQWiyqWHw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 05:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD41EAF, serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
Validity
Not Before: Sep 24 05:19:17 2026 GMT
Not After : Sep 26 05:19:17 2026 GMT
Subject: CN=6ab4b2d5-8571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:1e:73:99:82:85:ad:59:82:e9:7a:74:b9:
e5:1f:6e:c4:72:f1:c0:d5:3d:a0:96:54:26:fc:d6:
69:a7:62:17:1b:77:91:53:ee:8e:57:21:58:e9:34:
0d:2e:4d:aa:bb:aa:6c:c3:0a:1f:d1:82:ce:27:d0:
ff:65:2d:c4:c3:e9:00:3c:a4:77:9b:8a:0d:e5:ad:
08:4d:b3:39:80:cc:c5:4b:b5:e0:fa:28:0c:c5:88:
d6:12:45:ab:90:84:e6:6f:93:b6:f4:32:6d:7b:c8:
62:bd:68:8d:02:96:18:b8:ca:3b:db:e8:ed:df:c0:
04:a8:8e:e0:51:57:3c:af:d5:c8:43:3a:7a:98:7c:
d7:56:5e:3b:9d:21:db:eb:55:85:a4:e9:67:91:2b:
7e:fd:61:b2:48:ce:bb:e7:71:da:1d:77:4d:f6:ea:
51:88:10:55:82:8a:5f:0c:b5:0b:7c:a2:25:e7:1e:
b6:17:a9:a9:b3:89:08:12:aa:44:51:cd:17:58:48:
fb:5e:fa:c2:e2:b7:12:45:7e:43:7c:81:31:bc:3f:
78:da:ab:01:e5:e8:3e:86:39:ad:ef:86:82:11:9a:
c1:db:5c:c2:54:1e:92:57:36:f3:fd:eb:6d:82:26:
f0:21:bc:13:e6:0d:4b:52:f3:7d:a4:d0:ee:08:43:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:78:9D:32:21:FE:96:B5:E1:10:B6:86:00:65:42:B2:5B:BE:C9:FB
X509v3 Authority Key Identifier:
keyid:18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:2c:b4:a6:b0:93:85:bf:60:d9:53:03:d5:b9:50:32:94:75:
db:23:1a:b2:41:da:af:77:94:1d:44:ff:55:4b:b1:1c:2b:8b:
8c:fc:ca:ef:b9:07:ec:1f:e1:40:c1:17:69:63:5a:37:30:b3:
fc:38:ab:7f:1c:2f:2b:7a:e5:1b:e7:12:d8:f9:1b:f8:65:d5:
42:54:07:1b:37:90:07:9a:db:eb:4b:ca:c4:35:bf:d1:82:a8:
5d:52:23:8a:73:af:cc:a9:86:c8:7e:28:a6:dc:58:65:03:31:
61:00:5f:c2:9d:29:e7:e9:05:b8:4a:ee:c3:11:a1:20:7f:ae:
ed:e9:7a:97:0a:4e:9b:7f:fa:b8:be:1a:2b:a6:02:5b:61:3c:
47:c4:4f:21:6a:9d:37:98:5f:8c:44:aa:e5:6c:c2:6e:86:93:
bb:85:8a:e9:24:fc:71:81:31:76:fa:a2:2c:18:95:ef:e4:6d:
ef:d5:2f:b1:72:69:21:4e:c7:19:05:a3:d5:19:30:54:84:94:
ac:50:2b:1e:c5:15:8a:ab:13:99:65:e6:cb:40:92:a3:e9:18:
53:2e:69:5d:d7:d4:fa:a5:18:4e:53:34:57:fa:09:fb:fa:b0:
d4:b8:cb:68:3b:9d:2f:b9:09:b8:98:e3:f2:ec:bc:29:81:db:
ca:1d:23:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:59:23 2026 by rpki-client