
Error: rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
File: GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft (raw, json)
Hash identifier: MouqOsvLJSwTjeskxDT64KMYJ3g2x5dsjzu4IJslAPk=
Subject key identifier: A0:E0:6A:A0:49:7B:90:1B:33:C0:0F:53:DD:DD:39:79:25:B7:0E:E3
Authority key identifier: 18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE
Certificate issuer: /CN=F36A9104AF/serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
Certificate serial: 0676
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
Manifest number: 0669
Signing time: Sun 25 Oct 2026 02:48:35 +0000
Manifest this update: Sun 25 Oct 2026 02:48:34 +0000
Manifest next update: Tue 27 Oct 2026 02:48:34 +0000
Files and hashes: 1: GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl (hash: cJY59GEBtkqTeJAPYMdIfxNjpPmAY0hhnt/PqcM4IRg=)
2: C1685DD2963011F1825F4F05CF1D38B0.roa (hash: fhqYnuykGs+Z520AWS4FDBIQhiN3E1HNW402LnbrByo=)
3: 55679E90963011F1807BD804CF1D38B0.roa (hash: 3umqNr8IQ+MIJAGZZyaKN9v+B3r8QBaBTRKQUxaThgk=)
4: EB112E62962F11F18E641F01CF1D38B0.roa (hash: lXP8jyvsXovBDVh6j5Lrjbv0fp3bHgsldxY2peoYWT4=)
5: C3B74EC82F1011F09BA573D8DAE4EC9C.roa (hash: De1WzwEpPZKq8ILtQhTT9NmJyj6jKrMY4SHBZFBEWUQ=)
6: E1379B68963111F1AF34890ECF1D38B0.roa (hash: cZ2UyVqYhnL/fYV1jsUwYDl9zBo3chxiEbTI6kmghc0=)
7: 76B62D0E963111F18A737009CF1D38B0.roa (hash: yEQI70whalELluED1cSmowIjp+TWQOgx7uMw+XMVnVw=)
8: 1DD2C4F4963111F190FF4A09CF1D38B0.roa (hash: r45TeHCOeqThkk/tJFSWz2bLDsF+FEVM5VykTp2GH1o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1654 (0x676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A9104AF, serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
Validity
Not Before: Oct 25 02:48:34 2026 GMT
Not After : Oct 27 02:48:34 2026 GMT
Subject: CN=6add6e03-b145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7d:c8:e4:12:a0:9f:77:ea:80:fe:56:c1:79:
d6:65:65:eb:3f:c2:57:e9:b8:d2:a6:07:42:24:7d:
07:0d:97:5d:58:8b:27:27:d9:05:3d:ab:4f:b7:14:
aa:8c:d2:82:07:7f:b5:ec:a3:02:b4:e4:25:2b:dc:
45:05:c9:e5:5f:e9:c5:6d:70:46:80:37:e2:27:0e:
7b:42:31:9f:b4:c4:e6:fe:7e:ac:f6:9a:9e:e0:7f:
54:43:86:8f:b1:8f:60:d4:17:79:4b:12:9d:4c:63:
be:16:e7:2b:b7:5b:75:3a:61:6b:b6:49:cf:e2:e7:
a3:0c:22:db:b5:e7:f0:2e:94:45:1f:cf:b0:33:af:
23:ca:86:d6:64:bb:e5:cc:2a:02:ad:5a:9d:58:4d:
be:47:22:ee:63:c8:8d:ed:4a:94:4f:d3:c9:53:23:
b0:08:02:64:25:67:4e:11:61:0f:6b:94:ff:ec:0b:
c1:40:10:23:af:7a:3e:2b:d9:13:57:95:c7:4f:ff:
3c:42:c7:ce:9d:c8:c0:91:33:b8:a4:8c:ec:91:54:
90:1b:19:16:12:b9:1e:da:92:3d:f0:c3:ac:ba:71:
74:85:bf:cd:8e:2b:21:e4:32:38:81:85:ef:ac:94:
55:da:c6:e8:de:33:a3:0c:ce:3f:f8:88:05:5f:91:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E0:6A:A0:49:7B:90:1B:33:C0:0F:53:DD:DD:39:79:25:B7:0E:E3
X509v3 Authority Key Identifier:
keyid:18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:cd:5c:ff:a7:59:f6:2e:14:99:85:3c:82:3b:68:a8:d7:63:
42:50:1e:a2:e8:b2:1c:6b:fb:0e:58:0a:48:cd:e6:12:1e:7c:
95:b6:a6:cf:87:36:a2:0d:ff:ab:c8:8e:29:9f:96:81:d3:55:
bc:5c:31:ea:cc:02:62:37:30:c1:b4:ac:14:be:9e:b4:1c:c0:
62:9e:e2:6c:27:c7:84:01:44:4c:74:59:29:ef:a0:e8:f0:77:
dd:43:e4:da:9b:a9:e9:0b:4f:25:a6:fb:f0:9e:ff:48:6d:4c:
25:f2:c1:a0:d5:26:0e:4b:ad:b9:cb:28:02:e7:3b:0c:a9:fe:
58:10:1a:72:47:8a:6a:2f:f6:a4:90:f0:00:cb:67:90:f0:c4:
8f:ac:e2:0a:61:22:6c:df:dd:6f:50:89:7a:50:4f:b9:88:b3:
bb:d1:60:32:98:82:4f:ef:5b:1d:3c:c9:8d:32:2e:92:59:46:
b1:b2:80:e6:e7:7a:e7:0c:68:ad:06:98:87:4e:ed:5e:cb:94:
db:0d:cf:d4:77:b2:29:26:49:e7:e8:61:78:2d:8f:94:db:90:
32:f1:6b:4f:a5:60:8e:4c:4f:d7:9d:e7:22:24:f6:27:5d:15:
96:6b:6c:c3:70:5d:72:9b:9c:69:06:1d:82:e2:dc:c1:b7:25:
27:86:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:50:29 2026 by rpki-client