
Error: rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
File: GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft (raw, json)
Hash identifier: xwRxgSaH1J/f0WlJm5uDBcyd/7jIm/VzxhQsLAYzqEA=
Subject key identifier: 70:08:4E:85:CD:5A:6C:51:8C:FF:F9:33:87:80:9A:AC:3E:E3:B8:21
Authority key identifier: 19:09:45:C5:04:73:97:68:73:EF:25:4B:4F:A8:33:BC:31:D9:48:4B
Certificate issuer: /CN=F361935CAF/serialNumber=190945C50473976873EF254B4FA833BC31D9484B
Certificate serial: 0671
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
Manifest number: 066C
Signing time: Fri 30 Oct 2026 02:46:19 +0000
Manifest this update: Fri 30 Oct 2026 02:46:19 +0000
Manifest next update: Sun 01 Nov 2026 02:46:19 +0000
Files and hashes: 1: GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl (hash: zP4u3CxAi+oHcM6/CG849C5jlaNoihCa4yxmG8J7fbw=)
2: F31DBFBA898411F1B4E85704CF1D38B0.roa (hash: 8PMDISLlU/TEBQnSnCiE3EbThwDUph7JmIcnQ4JcjVQ=)
3: 6B5534A2AFC311EE8606D196775412E6.roa (hash: pIBKsEr+yaxrxYpVZ5L4+xtRFFmaKt0HvuP5/hnszHs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl
rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 01 Nov 2026 00:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1649 (0x671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361935CAF, serialNumber=190945C50473976873EF254B4FA833BC31D9484B
Validity
Not Before: Oct 30 02:46:19 2026 GMT
Not After : Nov 1 02:46:19 2026 GMT
Subject: CN=6ae404fb-0eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:e1:81:cb:0d:72:3a:da:20:42:2e:f4:8e:
93:63:f5:62:73:6e:14:f4:4a:77:80:7b:2e:b4:5c:
f8:29:fa:82:34:9e:7f:f0:6f:28:29:79:c9:f0:3a:
e6:3f:f2:72:5c:1b:2f:cb:66:fa:bb:5a:d0:19:be:
0f:6e:35:c3:01:6b:49:f1:dc:cf:38:e3:c7:e7:48:
a3:fa:26:62:e0:af:e6:bc:14:6d:ec:0f:90:2e:ec:
ef:10:05:5c:9e:af:78:99:b3:54:12:0c:33:cd:15:
69:62:83:06:87:3e:f6:24:19:64:18:4b:98:15:c2:
6a:e7:5e:d7:82:8e:03:df:d2:1a:12:bb:87:1a:98:
1b:c9:4c:7c:68:fa:9b:07:ef:96:c3:ca:2e:03:35:
80:b9:e8:52:05:19:45:aa:88:60:f9:b2:79:20:4d:
91:11:01:a2:7b:84:89:59:28:7a:02:49:14:a6:7a:
57:14:5b:8e:4f:7a:c0:9e:84:cc:81:c8:79:f5:2c:
df:85:43:51:7a:87:54:da:e7:dc:94:13:35:b8:e0:
6d:f1:f0:b1:ce:55:22:06:ab:11:1f:19:72:27:e0:
88:bd:d3:a2:3e:bd:a4:c4:21:0c:1c:fe:fa:9c:a3:
d5:ae:c6:75:d8:c4:a0:71:ab:72:91:47:8a:45:51:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:4E:85:CD:5A:6C:51:8C:FF:F9:33:87:80:9A:AC:3E:E3:B8:21
X509v3 Authority Key Identifier:
keyid:19:09:45:C5:04:73:97:68:73:EF:25:4B:4F:A8:33:BC:31:D9:48:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:03:8f:a4:79:a7:8e:a6:0f:0a:35:d4:2b:fb:6f:b2:49:1c:
fd:1d:d8:38:6f:de:46:b9:eb:43:e7:65:ca:f7:cd:0f:e2:94:
bb:f8:cd:3b:ca:17:18:4d:aa:52:3e:76:89:7c:a6:0c:3f:09:
ad:85:52:12:86:ab:1f:54:15:1e:d0:5f:5c:fa:45:6d:da:b5:
cf:d3:c0:19:80:3d:8a:d9:fa:1e:44:b8:46:af:b2:e5:07:13:
2e:a9:7f:5b:6d:b1:8b:6c:fc:41:b0:03:fc:c9:1c:41:03:9f:
ea:84:f6:82:13:d4:f3:cc:0b:19:d3:f1:59:a9:94:c0:13:a4:
dd:a7:b5:fc:f2:3e:14:43:54:95:ad:c6:c6:ad:94:10:bc:53:
00:4e:f2:1c:a2:f4:c5:4c:ba:cb:ad:91:31:04:c9:d6:6c:b0:
71:03:c5:cd:ed:d4:d5:f7:eb:19:db:26:33:7e:f7:f9:dc:24:
58:43:6c:28:73:30:20:72:67:74:6c:b0:fc:d8:44:92:d2:f5:
12:11:13:46:24:f7:b2:7a:5f:85:c7:bd:df:07:17:fc:bb:04:
02:81:63:d4:61:88:a9:f0:97:41:57:54:53:e4:2c:73:f6:97:
16:c2:86:1a:61:a2:af:89:44:b2:1f:84:dc:0d:08:f3:33:1f:
3a:a6:18:3b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTkzNUNBRjExMC8GA1UEBRMoMTkwOTQ1QzUwNDczOTc2ODczRUYyNTRCNEZBODMz
QkMzMUQ5NDg0QjAeFw0yNjEwMzAwMjQ2MTlaFw0yNjExMDEwMjQ2MTlaMBgxFjAU
BgNVBAMTDTZhZTQwNGZiLTBlYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDC3uGByw1yOtogQi70jpNj9WJzbhT0SneAey60XPgp+oI0nn/wbygpecnw
OuY/8nJcGy/LZvq7WtAZvg9uNcMBa0nx3M8448fnSKP6JmLgr+a8FG3sD5Au7O8Q
BVyer3iZs1QSDDPNFWligwaHPvYkGWQYS5gVwmrnXteCjgPf0hoSu4camBvJTHxo
+psH75bDyi4DNYC56FIFGUWqiGD5snkgTZERAaJ7hIlZKHoCSRSmelcUW45PesCe
hMyByHn1LN+FQ1F6h1Ta59yUEzW44G3x8LHOVSIGqxEfGXIn4Ii906I+vaTEIQwc
/vqco9WuxnXYxKBxq3KRR4pFUX2LAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcAhO
hc1abFGM//kzh4CarD7juCEwHwYDVR0jBBgwFoAUGQlFxQRzl2hz7yVLT6gzvDHZ
SEswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE5MzVDLzIxQzkzNDhBRUYwMDExRUNCMzg5RTVBMUYxMjIyNDY4L0dRbEZ4
UVJ6bDJoejd5VkxUNmd6dkRIWlNFcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dRbEZ4UVJ6bDJoejd5VkxUNmd6dkRIWlNFcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTkzNUMvMjFDOTM0OEFFRjAwMTFFQ0IzODlFNUExRjEy
MjI0NjgvR1FsRnhRUnpsMmh6N3lWTFQ2Z3p2REhaU0VzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASA4+keaeOpg8KNdQr+2+ySRz9Hdg4
b95GuetD52XK980P4pS7+M07yhcYTapSPnaJfKYMPwmthVIShqsfVBUe0F9c+kVt
2rXP08AZgD2K2foeRLhGr7LlBxMuqX9bbbGLbPxBsAP8yRxBA5/qhPaCE9TzzAsZ
0/FZqZTAE6Tdp7X88j4UQ1SVrcbGrZQQvFMATvIcovTFTLrLrZExBMnWbLBxA8XN
7dTV9+sZ2yYzfvf53CRYQ2woczAgcmd0bLD82ESS0vUSERNGJPeyel+Fx73fBxf8
uwQCgWPUYYip8JdBV1RT5Cxz9pcWwoYaYaKviUSyH4TcDQjzMx86phg7
-----END CERTIFICATE-----
Generated at Fri Oct 30 23:23:02 2026 by rpki-client