
Error: rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
File: gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft (raw, json)
Hash identifier: VC+ODuX0Ui3VQ80ktqjywxKV0hYxSLVrHUZf6K9zYos=
Subject key identifier: 4F:86:59:F3:6C:50:9C:FD:50:55:CA:09:8E:1B:77:5F:9B:7A:24:2E
Authority key identifier: 80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
Certificate issuer: /CN=F364744FAF/serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Certificate serial: 0952
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
Manifest number: 094E
Signing time: Sun 25 Oct 2026 01:50:28 +0000
Manifest this update: Sun 25 Oct 2026 01:50:27 +0000
Manifest next update: Tue 27 Oct 2026 01:50:27 +0000
Files and hashes: 1: gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl (hash: +O0QnBVVOi+cUaYoUBgpdlpIqhaLBA2bcpQKmqrqP3E=)
2: 1C467B5A8B6C11F1A58384A2CE1D38B0.roa (hash: 2c1rafmJ8uAX7I4T9KV6h7Qhuemf9XiHnWfTCcuaKOs=)
3: 7C4E6EFA8B6B11F1975A431DCF1D38B0.roa (hash: 5fNF9adn8hznCtC8W7/QFTQ4MXq5VVjvENhur/9sV/w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386 (0x952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364744FAF, serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Validity
Not Before: Oct 25 01:50:27 2026 GMT
Not After : Oct 27 01:50:27 2026 GMT
Subject: CN=6add6064-ac42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:37:43:e7:97:19:d4:00:13:95:07:79:03:
2a:82:85:92:dd:33:bf:04:0a:24:a2:26:0c:f6:40:
cf:d1:3f:fa:ca:ba:b4:de:c5:1e:86:fd:da:dd:82:
d5:f5:1a:cc:a6:b0:d8:bd:74:bb:8c:6c:ac:96:b8:
3c:ea:d6:01:9b:e1:85:18:af:0b:77:e5:27:00:cf:
ce:f5:da:a9:c7:25:5e:0b:c1:79:5b:ce:f3:6a:a1:
40:02:52:c4:54:4d:fa:dd:72:da:25:5b:05:38:69:
1a:2f:dd:a9:ec:84:13:e7:af:6f:4c:b5:41:2c:ce:
f0:28:37:71:b2:75:f8:15:51:bd:1e:bb:ea:47:bc:
c9:0b:e0:19:d1:f4:7c:bb:ab:3d:91:e9:2c:24:3e:
71:ad:7c:ae:01:82:76:0c:88:a4:c8:8c:d8:dd:dc:
1d:4a:f6:cc:a2:67:8b:94:3f:5c:bf:87:56:8f:bc:
e1:1d:00:af:56:6d:8c:1c:97:0a:40:7e:40:8f:eb:
de:b4:db:5e:c6:77:9e:e9:54:ae:90:79:e1:32:d9:
a6:c4:fc:d0:73:63:3e:d3:cf:92:35:48:81:d8:e6:
12:f7:b7:25:9a:71:4e:6a:81:65:0f:b3:47:ba:e5:
8b:0e:76:5c:2e:ab:47:7d:75:9e:ef:de:a0:b4:7b:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:59:F3:6C:50:9C:FD:50:55:CA:09:8E:1B:77:5F:9B:7A:24:2E
X509v3 Authority Key Identifier:
keyid:80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:ca:53:c8:34:20:e6:56:0e:87:a6:49:ce:50:09:54:b5:eb:
94:30:d7:e3:a3:dc:d5:60:5e:2a:80:3a:2f:f0:57:88:10:b4:
e6:fd:26:f5:0a:0d:4f:5c:66:65:87:16:c8:58:c0:5c:8c:86:
2e:7a:77:fd:61:88:9d:b7:10:39:ba:3b:3c:76:86:32:92:5f:
27:c5:3c:d2:c9:b8:16:9b:d4:3f:c5:d4:ab:03:37:88:be:3b:
35:99:0f:ee:1b:bc:d6:f5:4b:de:46:04:55:04:a9:36:fd:71:
c0:46:39:fe:e5:bb:df:f7:aa:de:ba:47:48:eb:ca:8f:f0:b5:
19:d1:aa:46:6f:5e:76:92:c7:a6:5c:43:cd:ab:0f:ec:c8:15:
d9:7f:5e:68:ea:83:1d:13:93:bc:5a:11:42:dd:21:87:55:82:
d9:04:d7:e3:c2:52:d1:87:0d:9f:f1:4e:0f:1b:d5:c9:9c:06:
ec:3f:a3:dd:4e:5b:6b:81:2d:04:c5:2a:05:96:82:30:dc:c1:
4c:c9:e4:2c:39:b0:84:6a:49:8c:f6:f5:94:35:59:46:7b:10:
a0:4e:8f:e1:8f:c5:99:f1:92:8c:27:73:ce:91:ca:67:f6:8e:
e4:35:fd:5a:f0:8f:73:ec:39:03:01:af:28:11:f3:c7:1e:a0:
35:bd:dd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:02:26 2026 by rpki-client