
Error: rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
File: GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft (raw, json)
Hash identifier: 8z8dQ0AH9imoj5yFkCDGFXWfQ6MgWLFEps+a2kdj8tM=
Subject key identifier: 2E:90:F2:3F:3E:3B:B7:E9:56:CF:0F:68:85:5B:32:20:CD:39:5F:EF
Authority key identifier: 19:09:45:C5:04:73:97:68:73:EF:25:4B:4F:A8:33:BC:31:D9:48:4B
Certificate issuer: /CN=F361935CAF/serialNumber=190945C50473976873EF254B4FA833BC31D9484B
Certificate serial: 0666
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
Manifest number: 0661
Signing time: Mon 19 Oct 2026 02:47:12 +0000
Manifest this update: Mon 19 Oct 2026 02:47:12 +0000
Manifest next update: Wed 21 Oct 2026 02:47:12 +0000
Files and hashes: 1: GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl (hash: +JiLhc+RqrwXMINF6Js6mCFMv/qcPXycfTgzCNaCw0M=)
2: F31DBFBA898411F1B4E85704CF1D38B0.roa (hash: 8PMDISLlU/TEBQnSnCiE3EbThwDUph7JmIcnQ4JcjVQ=)
3: 6B5534A2AFC311EE8606D196775412E6.roa (hash: pIBKsEr+yaxrxYpVZ5L4+xtRFFmaKt0HvuP5/hnszHs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl
rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 21 Oct 2026 02:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1638 (0x666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361935CAF, serialNumber=190945C50473976873EF254B4FA833BC31D9484B
Validity
Not Before: Oct 19 02:47:12 2026 GMT
Not After : Oct 21 02:47:12 2026 GMT
Subject: CN=6ad584b0-7780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:69:c8:95:40:68:04:68:4d:45:5c:2a:9f:
03:86:56:30:4d:2d:a4:03:4c:cb:c3:73:27:22:6f:
fd:7b:5b:5a:a1:9a:18:a7:83:a5:f0:c4:53:df:af:
9c:1a:5a:54:49:0c:d7:93:a3:0b:8d:45:b2:3e:1e:
c3:fb:65:79:de:cc:e0:41:f3:75:27:9d:a9:07:58:
01:5e:d3:73:ef:5e:89:7c:1e:51:4f:f2:9d:c6:e0:
ef:66:d1:8e:9e:ee:47:47:bf:b7:82:ea:39:57:0e:
13:f1:ca:9d:85:52:83:80:28:c7:70:2a:aa:cd:7e:
58:e6:37:96:21:84:48:5c:45:9e:fb:ec:44:1a:f5:
12:b1:71:b2:4c:64:e6:96:59:62:d0:78:18:0d:dc:
2d:ef:0d:49:6d:61:37:0f:3d:86:5a:5e:6a:3d:75:
8b:8a:e9:b7:e8:e8:6e:7e:63:1d:90:98:db:02:e1:
1f:81:23:d8:b2:8f:47:b7:02:f4:67:9c:73:e7:f1:
5c:05:bc:62:76:51:92:da:b9:d7:72:f4:ff:99:06:
07:6a:b4:75:d1:bf:1a:6e:f3:10:df:14:4c:89:ed:
c6:67:e5:2c:86:c7:ae:56:25:29:1f:11:f5:34:81:
d2:f6:63:51:49:1e:d7:29:56:6f:1c:c5:e3:96:36:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:90:F2:3F:3E:3B:B7:E9:56:CF:0F:68:85:5B:32:20:CD:39:5F:EF
X509v3 Authority Key Identifier:
keyid:19:09:45:C5:04:73:97:68:73:EF:25:4B:4F:A8:33:BC:31:D9:48:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:35:c1:97:f3:85:0b:10:3d:0d:b0:ff:a1:42:6d:7a:13:8b:
8b:60:1b:99:26:62:2f:22:61:2d:1a:ec:65:0e:8c:d4:d7:07:
f6:4a:b1:db:4c:1d:ab:fe:f6:93:0b:1c:31:da:fb:ba:f4:dd:
af:d8:3f:82:3b:0f:bc:b8:e3:3e:66:2b:af:3d:45:93:e8:33:
b5:0a:b3:d9:30:fe:7d:5d:c9:46:60:28:74:14:16:af:84:59:
fe:96:39:8d:76:c0:a9:d9:f8:69:12:e4:89:f0:91:f4:aa:c0:
b7:fa:b6:a0:6c:01:d9:10:c5:39:05:e7:64:ec:e2:d6:96:38:
bb:11:68:81:36:94:1b:55:a7:9a:33:31:ef:66:e3:d1:ac:78:
20:c6:fe:57:88:75:55:53:a9:2d:42:bd:81:10:91:97:35:47:
91:b8:97:49:a8:6b:2d:02:a4:9f:d5:92:ac:40:16:41:3f:09:
14:ff:14:fe:16:97:af:2b:e6:78:ee:69:60:54:cd:2f:a5:46:
74:d5:69:a5:d7:17:c9:1e:b6:e7:11:4a:de:55:3f:18:b6:bf:
25:a1:96:12:0c:9f:c7:18:1f:8b:e6:14:43:85:b6:a7:1f:fd:
30:07:55:8f:00:13:38:e2:10:ef:de:b1:77:51:b4:74:00:79:
de:6f:0b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:36:00 2026 by rpki-client