
Error: rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
File: GAGTeoaGkejdxAoaQ6Y47cyb134.mft (raw, json)
Hash identifier: ux8b1O8OG7yW31qBDBblx9lnKcMw3o2q/ZyTA/VLiAY=
Subject key identifier: A5:6B:DC:5E:B6:89:B2:81:9A:12:EA:08:A5:87:A5:64:F2:56:F0:B0
Authority key identifier: 18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E
Certificate issuer: /CN=F3645A60AF/serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
Certificate serial: 04E3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
Manifest number: 04E2
Signing time: Tue 27 Oct 2026 03:31:54 +0000
Manifest this update: Tue 27 Oct 2026 03:31:53 +0000
Manifest next update: Thu 29 Oct 2026 03:31:53 +0000
Files and hashes: 1: GAGTeoaGkejdxAoaQ6Y47cyb134.crl (hash: w2z5GgnM8IHgQ7k5WrkUF2ua8NWVYggDil7+nKAXDpE=)
2: D9BB7DAA119111EE9EC8824F4AD9E6FC.roa (hash: z8n6q+oUQGHtnZrxmlHyDPpdETGxOMXPu63Xt71Wevg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 03:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645A60AF, serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
Validity
Not Before: Oct 27 03:31:53 2026 GMT
Not After : Oct 29 03:31:53 2026 GMT
Subject: CN=6ae01b2a-e5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:07:53:6d:4e:0c:52:1b:14:70:a7:4e:27:
87:ad:5d:17:dc:e0:c8:e0:88:d4:f4:e8:90:98:fc:
ca:ff:92:70:ee:87:6b:73:24:fa:6c:84:0a:af:78:
29:a6:0b:80:6e:c8:ae:4e:e9:4b:6f:80:f0:ea:a9:
6b:35:86:a9:31:90:c3:a7:60:fe:af:fd:98:02:44:
e1:fe:0e:46:03:ab:f0:4a:1b:90:0f:9f:dc:36:45:
a2:ca:31:de:a6:63:0d:43:d3:27:3f:3f:48:11:cc:
be:e0:cf:e8:76:94:10:08:a9:85:4b:a4:10:92:6d:
d8:d2:48:af:3f:9c:92:95:85:c1:d3:9d:85:a7:df:
ea:b9:fa:77:c9:72:ad:38:a7:48:87:8e:40:6c:97:
26:e6:3c:b3:ac:03:e0:ca:78:42:96:09:b6:e6:36:
38:18:66:c8:ec:03:bf:81:36:5b:c7:06:8c:67:82:
fc:5d:57:cb:12:fc:dc:b1:01:26:b3:84:b2:ab:b0:
fb:49:45:da:d4:5d:bf:04:05:fd:5c:3e:11:9e:6b:
d7:c2:9b:86:73:29:e0:cf:8e:40:f3:1b:7c:a9:86:
05:37:d2:53:c3:b2:2e:75:b9:9a:01:32:55:3f:fc:
52:99:84:23:58:d4:49:82:3b:34:f8:16:d3:e3:b9:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6B:DC:5E:B6:89:B2:81:9A:12:EA:08:A5:87:A5:64:F2:56:F0:B0
X509v3 Authority Key Identifier:
keyid:18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:68:a6:37:ce:81:79:65:9c:51:d0:7c:2b:5a:1c:52:be:4f:
45:63:95:73:87:06:75:ba:a6:fd:9d:21:c4:cc:1b:a7:a5:b0:
96:f8:79:e7:8a:92:25:9d:7c:ec:23:89:57:66:20:c8:98:1f:
9e:ee:16:34:90:d8:00:36:f1:8d:79:cf:4a:c4:11:4b:0c:23:
54:52:bb:f7:82:33:86:3b:4f:1f:4d:c8:38:9d:6d:cc:c1:45:
45:c6:13:b9:47:3c:d1:9f:af:86:f5:26:a0:1c:98:20:81:da:
bd:1c:75:a8:56:60:bf:21:37:cd:eb:37:ec:9e:21:f1:7c:48:
6c:3b:71:00:c2:5f:5b:72:c1:87:d4:15:0a:77:f2:a8:1c:b8:
8c:96:2f:7e:f5:92:43:2f:ab:4a:ca:e7:31:1b:ff:83:c9:5b:
73:52:56:05:39:60:b9:3b:0d:9c:56:d8:88:4a:6d:85:2a:d1:
83:12:f1:91:da:89:79:d7:a9:4d:10:5e:22:67:51:1e:7b:c9:
e4:d9:04:a8:bf:15:88:81:75:21:c2:89:85:5f:20:af:66:76:
9b:1d:01:4c:b5:9e:9b:ed:e8:eb:34:37:76:0c:89:7e:93:03:
78:32:fc:06:69:7e:66:e3:e3:d0:44:2d:2c:0c:fc:56:3a:13:
4a:08:ea:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:18:03 2026 by rpki-client