
Error: rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
File: gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft (raw, json)
Hash identifier: z6NCb0IsR+NhMyZXSCeXRA/DM1+QRAB7D7p+OPdPfzY=
Subject key identifier: 38:2E:63:0C:DC:AB:04:1F:46:9F:F7:13:CE:A7:17:EA:C7:68:3C:6D
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Certificate issuer: /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial: 0590
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
Manifest number: 0584
Signing time: Tue 27 Oct 2026 03:12:05 +0000
Manifest this update: Tue 27 Oct 2026 03:12:04 +0000
Manifest next update: Thu 29 Oct 2026 03:12:04 +0000
Files and hashes: 1: gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl (hash: zCXbD3W97L9EXkZxxcC7bBHXctyY9Hhd0BWi9HKrj/s=)
2: 3E89535C919511F19B87181ACF1D38B0.roa (hash: MgyMP7FWdkZNfngn7DBFq/fV8FrY6m8TI6YhhayywA4=)
3: 394C14068A7E11F1A4D6DEF4CE1D38B0.roa (hash: vSDt4zl37RwqgZMYebDjfzUw1LP8T1XqYFXWyiWhQbE=)
4: 69D8501C8A7E11F18852F6F4CE1D38B0.roa (hash: IcaGaoujxGgkNe1Mv/ecD9++237M3+OQM+9p4KWts24=)
5: 76290F528A7C11F18DE172EACE1D38B0.roa (hash: jHFfU1D2lcpOjyDVq5Ad204OjfgdXpwV2gg39IXTyHM=)
6: 3A9BE086FDB411F099781978DAE4EC9C.roa (hash: U6hJ3dexnNZP2bqRvlL6C7zK5n/16swAogkxNnyicoM=)
7: 92DED7E4FDB411F09FE4837CDAE4EC9C.roa (hash: srYqEe2mgDwJI6jUbBY0cU5cWPseHn/svqYOhlLojDc=)
8: F0A5BADC8A7C11F19B74A7ECCE1D38B0.roa (hash: qKuUkeEtmPFzxueo+0k+zPaf6dnnRZqCKDNqLOTGOTc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Validity
Not Before: Oct 27 03:12:04 2026 GMT
Not After : Oct 29 03:12:04 2026 GMT
Subject: CN=6ae01685-21c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:56:69:d1:3a:49:88:3c:4e:39:e2:10:fc:
4b:97:68:13:9d:1e:20:7a:24:4e:69:52:81:b0:e5:
e5:e2:6f:f5:db:b0:7a:a5:d3:f7:15:71:cc:d1:66:
9a:00:79:24:00:cf:28:c6:25:8e:cd:91:e1:37:8c:
15:6e:55:ae:53:3f:e9:34:59:6f:75:b5:46:a5:0e:
e4:18:0f:16:99:3c:3a:d8:d9:b6:36:c5:f3:70:95:
f5:17:52:7d:8a:ae:91:4b:40:61:8b:99:9b:2a:ba:
3e:dd:f3:22:ad:b6:8b:15:1b:4c:14:3e:34:81:13:
66:01:3c:9a:e5:ce:e1:67:2f:bc:c8:1e:4d:92:a9:
e5:b8:00:74:08:57:97:44:e5:ab:ad:f8:b8:c2:1f:
30:ae:db:af:bd:05:0d:77:7a:29:d4:47:dc:e1:77:
e1:e2:f9:50:87:9c:b0:6a:fc:db:a0:8d:9d:0b:94:
39:99:c2:ee:b3:f2:14:b1:32:7b:3d:01:d3:75:01:
3b:49:84:02:e4:57:f8:85:a5:51:76:b4:aa:09:6b:
0a:e1:6d:be:6e:db:7b:73:1d:32:6c:bd:1f:88:6c:
3f:73:f0:26:0b:b2:6f:84:d7:a6:fc:c2:05:e1:33:
0f:38:36:a5:fc:65:69:d2:a4:01:32:e6:05:12:72:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2E:63:0C:DC:AB:04:1F:46:9F:F7:13:CE:A7:17:EA:C7:68:3C:6D
X509v3 Authority Key Identifier:
keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:8d:e5:38:22:c4:b8:c0:a6:9a:bd:d4:87:b0:a0:2f:47:4b:
86:b1:4a:66:ac:00:6d:dc:a4:ce:f9:56:fe:89:3d:a1:5c:af:
ba:49:bc:eb:6e:05:e0:3d:6b:49:26:b6:ae:01:a1:90:c3:75:
5a:89:db:97:4b:55:b7:b5:eb:e5:8f:8f:18:28:8f:2e:f1:bc:
67:dd:7a:93:ce:18:ff:d7:64:73:d1:c3:5f:ad:cd:19:e2:a0:
34:ad:c7:3d:d8:47:9e:33:ca:90:61:ed:81:50:fd:57:66:62:
73:2d:a8:f1:39:1e:4c:48:14:88:2b:c3:f5:c9:77:33:c0:04:
9a:d3:92:9e:b5:8c:a5:e0:40:05:4a:11:da:b6:c2:56:9d:54:
5e:d8:a5:a0:9d:ea:b2:75:f7:78:e5:26:c6:bc:a6:48:3c:fb:
b7:ab:96:9a:50:55:7e:ad:49:34:b9:2a:ee:51:c6:8d:67:eb:
ec:1e:e9:c4:c7:0b:62:4b:a7:cf:09:7d:7f:a1:cb:65:3c:7a:
a2:ca:1d:44:de:ca:48:0a:65:eb:84:6f:eb:a6:cf:a4:4e:86:
41:2e:cc:8f:84:c1:83:0f:fd:e6:ca:d5:12:5c:8f:0e:07:38:
50:6a:f0:da:02:c1:9a:bf:19:95:08:16:f5:8e:48:81:90:13:
9c:b0:21:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:24:32 2026 by rpki-client