
Error: rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
File: GPDP5J-oAtYH_7cwFFeG05UL0jA.mft (raw, json)
Hash identifier: OWGmlEeIZ24xtJ8MswJ2L7ZU9RlJ1sP6YpTmBxTFkck=
Subject key identifier: 3B:5E:69:02:05:1A:3E:8A:33:65:BC:9A:61:35:D0:F7:FB:CE:CF:15
Authority key identifier: 18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30
Certificate issuer: /CN=F36BD41EAF/serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
Certificate serial: 0141
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
Manifest number: 013F
Signing time: Sun 25 Oct 2026 05:19:22 +0000
Manifest this update: Sun 25 Oct 2026 05:19:21 +0000
Manifest next update: Tue 27 Oct 2026 05:19:21 +0000
Files and hashes: 1: GPDP5J-oAtYH_7cwFFeG05UL0jA.crl (hash: J2pYndYJ83A/btCZHsAUAJezFkXqlTv3yMl3yDOxi/Y=)
2: 0B035958DA7311F0BD9C4B87DAE4EC9C.roa (hash: 1YCwQ08Er0/oJv0rugAKvka/AUZZE4KlC5UipfKoXzE=)
3: AF914E0ED9B911F0BC8E84F1DAE4EC9C.roa (hash: dpaLUZ7X2+eBahFfaBRBpZGcldL+iPoSovpQWiyqWHw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD41EAF, serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
Validity
Not Before: Oct 25 05:19:21 2026 GMT
Not After : Oct 27 05:19:21 2026 GMT
Subject: CN=6add9159-01e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:af:8e:2f:07:71:5c:5a:4c:4a:6c:80:1a:
d2:64:ec:65:af:53:c3:e8:c4:9d:27:7b:ea:9a:a5:
6c:0e:c3:39:c8:da:af:18:66:61:24:8b:d5:31:70:
d6:ea:23:32:ec:9a:da:16:0c:72:c9:c8:5a:6f:5e:
ad:91:ec:f0:3f:a7:cf:93:63:23:31:be:1a:7f:8d:
d5:cf:c2:4a:1a:48:d9:71:c4:2f:e5:85:3d:4c:ad:
27:ee:e7:1f:dc:3a:e4:d8:32:84:39:7c:13:eb:88:
07:1e:82:c7:6b:a7:64:ee:5f:f2:b1:3a:0e:90:4f:
81:6c:f7:02:ba:74:f0:a6:eb:63:5b:6a:3c:e6:48:
5f:29:73:65:c7:9f:4f:b5:a8:32:a2:01:e4:16:88:
8a:76:ca:1e:ac:b8:7c:4d:43:6b:0c:c0:a7:0a:18:
57:3d:7d:5b:b2:85:81:51:46:78:1a:be:63:c8:c0:
b3:60:ac:fb:88:d8:c8:94:ae:6a:66:15:a6:0d:60:
bd:21:e5:94:65:25:67:58:7f:a2:5f:87:0d:15:91:
6d:d5:ac:9b:3e:fa:6e:5c:28:fd:1b:c0:24:bf:b6:
87:4d:70:1a:11:e8:55:da:3a:96:24:63:e4:bb:b5:
1e:80:ae:4e:94:3a:78:74:af:1c:b2:78:03:b5:17:
97:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5E:69:02:05:1A:3E:8A:33:65:BC:9A:61:35:D0:F7:FB:CE:CF:15
X509v3 Authority Key Identifier:
keyid:18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:84:4a:04:4b:7b:5e:99:73:5b:c9:a0:29:98:12:b2:dd:51:
46:5a:b3:40:e7:83:4c:99:89:6b:d9:c2:b1:49:58:96:59:d2:
5e:56:2c:60:6f:04:da:3e:47:1f:76:92:05:fa:46:79:8a:d7:
86:ab:07:ee:59:36:c7:9d:06:55:ee:cb:f0:5e:8e:e2:ae:8b:
7f:ec:2f:4e:86:86:fd:50:32:10:c8:22:80:dc:64:26:7f:c4:
02:b6:1c:26:25:66:d7:44:23:8d:f7:39:a7:a8:aa:c0:fa:6c:
2d:c2:48:96:65:bb:66:de:b2:4e:e6:d9:8f:8e:6a:5e:21:3f:
c1:4e:fe:1f:e4:53:39:73:0b:b1:57:c2:27:f5:ca:e5:44:c1:
09:1b:7c:cd:aa:01:7a:c4:d0:87:f2:eb:1e:4e:92:0b:57:83:
23:3b:6c:3b:bc:32:21:83:d7:9d:b8:1c:73:9e:cf:3a:87:d4:
21:63:dc:6c:9f:49:13:e4:f2:96:0a:b7:f2:b9:56:81:66:d7:
8c:45:29:e0:c5:d7:f8:df:91:58:a0:e5:93:31:0f:11:d2:12:
a9:11:8d:6d:be:29:b6:9f:ff:91:4c:bf:88:ae:87:28:4b:e4:
68:2a:eb:f4:63:5c:cf:fc:02:16:18:8b:c5:0a:1b:b3:64:a8:
5b:7a:1b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:49:52 2026 by rpki-client