
Error: rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
File: gBdkcAW5GRQgyZGxrgeYtayhTQw.mft (raw, json)
Hash identifier: 2NAsZK7mjK2d84GoWGaySYjgnU29guwj9YICXbdxL6U=
Subject key identifier: 7A:0E:81:7C:1D:11:C8:8F:E8:8A:10:20:89:1A:88:A7:D0:30:7A:99
Authority key identifier: 80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Certificate issuer: /CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Certificate serial: 0858
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
Manifest number: 084C
Signing time: Tue 27 Oct 2026 02:01:15 +0000
Manifest this update: Tue 27 Oct 2026 02:01:15 +0000
Manifest next update: Thu 29 Oct 2026 02:01:15 +0000
Files and hashes: 1: gBdkcAW5GRQgyZGxrgeYtayhTQw.crl (hash: e9vbXzmMk1hDSLzsfwaPS0ytp9yi1UPUyCJ7PwGX7YU=)
2: 49BADED6E0AF11EBA4AE8C60F8AEA228.roa (hash: bfzLeABKt8iJaNdlc12joZPlW2B3ok9kJhlWiLncwS0=)
3: 40E2C4A2E0D411EBB731DB11F8AEA228.roa (hash: iNVwS1o0KwvedAC6eQYfYJ+BAcXsoI+clsk0jnqfrIA=)
4: 10C8FFEEE29F11EBAA580947F8AEA228.roa (hash: 387HhPDysnyOhc8pmgAp8wGABIBNWQ6h4D9Qi4Iokv0=)
5: 7A4D6530E0D411EB863D3F12F8AEA228.roa (hash: P26YxJOy6uRICshHfktO8hTsp7ut8yCkshcNludKd0A=)
6: 254A1146DE4A11EB99E5AD21F8AEA228.roa (hash: +hq36BifBeCSUhyFbBupJ4tam0DEvG9eurBQqxlzAcI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136 (0x858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3632CFEAF, serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Validity
Not Before: Oct 27 02:01:15 2026 GMT
Not After : Oct 29 02:01:15 2026 GMT
Subject: CN=6ae005eb-8afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:2f:1a:6f:fe:4a:b0:de:2d:72:df:a4:af:
77:90:ea:30:ae:a7:1b:32:52:0b:2a:34:30:c8:02:
84:0e:7e:64:0d:62:0e:11:a0:5a:45:02:fc:3b:c5:
87:c6:f0:75:4c:e3:b6:55:3a:66:d4:5a:cd:ee:80:
f8:8d:11:27:33:65:00:ea:24:82:7c:ea:09:c6:6e:
f9:a3:70:58:9c:2f:44:6f:f9:28:d0:4b:a2:15:94:
ea:94:99:3e:25:43:a6:0b:5e:05:8c:9b:39:3a:82:
2c:e1:3b:35:07:88:47:8c:8c:1b:af:d5:3e:ca:bf:
1c:33:3c:97:e8:15:91:de:a7:37:98:a4:38:4b:da:
2d:e2:51:4d:62:95:3a:31:0e:14:88:81:33:66:c2:
3d:cc:fe:56:00:00:33:3e:74:9f:03:7f:c8:64:8b:
52:d5:c2:4c:79:0d:91:2a:d6:2d:e5:1c:52:f7:99:
1d:94:57:a0:9b:09:04:26:14:11:3f:a2:34:5c:b5:
a5:7b:51:ed:49:d3:4c:b3:64:0f:d9:42:6d:b1:e3:
0f:fc:bd:e9:c4:48:b4:37:9c:f1:9f:ba:60:d7:6b:
1a:fb:51:fc:c8:8f:d9:64:f5:03:6c:78:25:11:7c:
90:41:ae:6a:c4:16:47:5a:53:ba:92:43:5e:79:92:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0E:81:7C:1D:11:C8:8F:E8:8A:10:20:89:1A:88:A7:D0:30:7A:99
X509v3 Authority Key Identifier:
keyid:80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:0d:99:c4:d6:fc:5f:bd:50:0d:ac:09:9a:f2:63:83:f8:68:
49:9c:d1:50:ba:15:fd:4a:27:0c:8d:b6:ef:76:1f:ee:e6:ea:
42:32:9e:7a:30:f4:61:0f:1a:c5:79:36:c3:fb:cd:fc:c1:77:
96:6e:86:f7:39:67:01:36:e6:2a:39:70:e7:39:9e:8a:cd:89:
61:ce:2a:37:3c:f4:38:4b:c6:49:05:38:37:9d:85:14:2d:ba:
48:d8:04:e9:c6:58:0b:61:ff:7d:29:6a:45:92:51:b1:67:e2:
ce:e6:1d:6e:1a:84:0c:cd:e9:74:b7:e0:1f:5d:39:73:e5:94:
d2:47:e7:ee:86:7e:33:5c:67:46:ac:43:1d:f6:fb:f9:1a:9e:
9d:05:8f:81:02:2d:90:57:95:02:e0:4e:d9:5a:66:57:6d:5d:
ef:73:48:f9:d2:f9:ea:f9:56:2b:7c:0d:74:b9:61:7d:3a:c0:
0a:88:54:8b:05:3d:74:90:08:73:64:7b:1e:a9:a1:00:58:b3:
b7:cf:e3:f5:1a:21:3c:b8:c1:d0:86:e4:65:c0:27:81:fb:aa:
5d:d2:b6:22:d1:16:05:8b:a8:9a:88:16:54:1c:a9:ca:48:54:
f3:2f:31:e4:ee:87:29:66:eb:d2:8b:02:4c:6b:ae:14:08:b2:
29:0a:f3:ff
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzJDRkVBRjExMC8GA1UEBRMoODAxNzY0NzAwNUI5MTkxNDIwQzk5MUIxQUUwNzk4
QjVBQ0ExNEQwQzAeFw0yNjEwMjcwMjAxMTVaFw0yNjEwMjkwMjAxMTVaMBgxFjAU
BgNVBAMTDTZhZTAwNWViLThhZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCXmC8ab/5KsN4tct+kr3eQ6jCupxsyUgsqNDDIAoQOfmQNYg4RoFpFAvw7
xYfG8HVM47ZVOmbUWs3ugPiNESczZQDqJIJ86gnGbvmjcFicL0Rv+SjQS6IVlOqU
mT4lQ6YLXgWMmzk6gizhOzUHiEeMjBuv1T7KvxwzPJfoFZHepzeYpDhL2i3iUU1i
lToxDhSIgTNmwj3M/lYAADM+dJ8Df8hki1LVwkx5DZEq1i3lHFL3mR2UV6CbCQQm
FBE/ojRctaV7Ue1J00yzZA/ZQm2x4w/8venESLQ3nPGfumDXaxr7UfzIj9lk9QNs
eCURfJBBrmrEFkdaU7qSQ155kiynAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeg6B
fB0RyI/oihAgiRqIp9AwepkwHwYDVR0jBBgwFoAUgBdkcAW5GRQgyZGxrgeYtayh
TQwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMyQ0ZFLzUwMEIyOTkwODI4NTExRUI4MEM3RUY3OUY4QUVBMjI4L2dCZGtj
QVc1R1JRZ3laR3hyZ2VZdGF5aFRRdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dCZGtjQVc1R1JRZ3laR3hyZ2VZdGF5aFRRdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzJDRkUvNTAwQjI5OTA4Mjg1MTFFQjgwQzdFRjc5RjhB
RUEyMjgvZ0Jka2NBVzVHUlFneVpHeHJnZVl0YXloVFF3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjDZnE1vxfvVANrAma8mOD+GhJnNFQ
uhX9SicMjbbvdh/u5upCMp56MPRhDxrFeTbD+838wXeWbob3OWcBNuYqOXDnOZ6K
zYlhzio3PPQ4S8ZJBTg3nYUULbpI2ATpxlgLYf99KWpFklGxZ+LO5h1uGoQMzel0
t+AfXTlz5ZTSR+fuhn4zXGdGrEMd9vv5Gp6dBY+BAi2QV5UC4E7ZWmZXbV3vc0j5
0vnq+VYrfA10uWF9OsAKiFSLBT10kAhzZHseqaEAWLO3z+P1GiE8uMHQhuRlwCeB
+6pd0rYi0RYFi6iaiBZUHKnKSFTzLzHk7ocpZuvSiwJMa64UCLIpCvP/
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:44:37 2026 by rpki-client