
Error: rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
File: gBdkcAW5GRQgyZGxrgeYtayhTQw.mft (raw, json)
Hash identifier: gUepyl269eEHHxfZFNR/rSnScyDrOdMvmthObCuKMyc=
Subject key identifier: CD:C8:DF:A6:9E:65:7E:F5:9E:CE:8F:29:4F:11:EC:FB:22:D4:F5:B6
Authority key identifier: 80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Certificate issuer: /CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Certificate serial: 084F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
Manifest number: 0843
Signing time: Sun 18 Oct 2026 02:01:38 +0000
Manifest this update: Sun 18 Oct 2026 02:01:38 +0000
Manifest next update: Tue 20 Oct 2026 02:01:37 +0000
Files and hashes: 1: gBdkcAW5GRQgyZGxrgeYtayhTQw.crl (hash: kEkhMmpGZvwtt3dy2Ce6lnvE55fqAQB+I2JWvn4uQGo=)
2: 49BADED6E0AF11EBA4AE8C60F8AEA228.roa (hash: bfzLeABKt8iJaNdlc12joZPlW2B3ok9kJhlWiLncwS0=)
3: 40E2C4A2E0D411EBB731DB11F8AEA228.roa (hash: iNVwS1o0KwvedAC6eQYfYJ+BAcXsoI+clsk0jnqfrIA=)
4: 10C8FFEEE29F11EBAA580947F8AEA228.roa (hash: 387HhPDysnyOhc8pmgAp8wGABIBNWQ6h4D9Qi4Iokv0=)
5: 7A4D6530E0D411EB863D3F12F8AEA228.roa (hash: P26YxJOy6uRICshHfktO8hTsp7ut8yCkshcNludKd0A=)
6: 254A1146DE4A11EB99E5AD21F8AEA228.roa (hash: +hq36BifBeCSUhyFbBupJ4tam0DEvG9eurBQqxlzAcI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 20 Oct 2026 00:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127 (0x84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3632CFEAF, serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Validity
Not Before: Oct 18 02:01:38 2026 GMT
Not After : Oct 20 02:01:37 2026 GMT
Subject: CN=6ad42882-268b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:02:99:ad:ff:00:0f:ae:20:a7:71:9e:33:
6f:86:4e:eb:8a:6c:37:b5:c2:77:66:50:3d:68:ea:
7b:30:58:84:00:bf:37:68:01:40:86:d1:cd:c6:c8:
a2:7e:cb:f6:07:c9:6d:00:85:c3:07:38:08:82:60:
ec:ea:3c:46:f2:16:9c:c6:6d:f6:8a:dc:55:8d:aa:
51:d3:fb:a3:8f:db:5a:bd:af:a2:04:57:2f:bc:97:
75:36:81:6f:ff:be:4c:fd:cd:05:6c:38:fc:ea:57:
3e:b3:90:bd:8f:67:57:cd:67:01:33:b0:a7:f3:26:
95:14:f5:50:e7:2f:c3:f4:5b:f5:13:aa:7b:79:64:
70:a7:1f:1f:bb:26:e2:a8:cf:0c:29:40:86:0b:36:
ee:df:c7:7d:82:59:91:00:9b:e6:84:8b:27:ed:e8:
a4:23:f8:30:ac:ac:20:05:1e:05:76:87:1c:28:71:
c4:3a:52:df:15:a5:3d:f2:41:df:30:39:90:cc:4f:
bb:a4:4c:2b:ae:53:bc:a3:3e:da:27:41:18:43:2f:
f0:fe:fc:3b:6f:3e:ef:20:c9:31:5f:5c:f7:86:88:
6f:94:87:91:9f:59:36:75:b6:5b:87:c3:d8:fe:ed:
06:8f:87:0b:09:5d:94:98:88:50:a1:1f:43:8c:c0:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:DF:A6:9E:65:7E:F5:9E:CE:8F:29:4F:11:EC:FB:22:D4:F5:B6
X509v3 Authority Key Identifier:
keyid:80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:54:68:ba:92:bd:7e:d5:49:66:85:ba:bb:d2:76:0b:14:75:
fd:35:83:f4:b3:5d:09:01:a5:37:79:ba:90:54:84:91:00:26:
2e:5e:dd:1c:cf:23:70:8a:9e:d1:2a:b1:3b:58:ea:10:41:ee:
f4:78:71:5c:5c:1b:4b:49:bb:2b:0a:b4:ea:55:94:be:9b:10:
34:b5:98:1f:13:a4:01:a3:14:a0:c6:fb:31:e9:64:2b:02:cf:
dc:73:a0:40:4b:3b:4e:e4:07:04:c5:18:3c:29:c0:27:5e:03:
a5:77:ff:f4:b1:f4:47:30:18:15:9d:23:e3:39:f2:49:17:ad:
10:7a:e1:b0:80:42:00:5f:76:43:53:f1:af:3a:7a:a0:a1:9d:
7e:23:b4:4d:ee:0b:63:4b:0f:a3:28:1b:f9:df:ec:d3:1f:2d:
ec:6a:be:3b:8c:82:18:9b:82:47:dd:83:89:34:78:ed:52:c1:
bc:e7:89:5d:c5:d2:f4:d6:5c:a6:fc:64:52:53:d4:0d:bb:e1:
04:4b:4b:da:26:5f:b9:be:7f:19:ec:65:71:8a:28:97:fd:49:
a3:6a:cb:cb:08:3a:60:c9:58:8d:1a:7d:bd:88:d0:19:00:d6:
8f:5b:f3:3d:ae:60:cc:68:7a:00:4d:b7:b3:04:73:fc:f1:cf:
8e:3f:cd:8b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzJDRkVBRjExMC8GA1UEBRMoODAxNzY0NzAwNUI5MTkxNDIwQzk5MUIxQUUwNzk4
QjVBQ0ExNEQwQzAeFw0yNjEwMTgwMjAxMzhaFw0yNjEwMjAwMjAxMzdaMBgxFjAU
BgNVBAMTDTZhZDQyODgyLTI2OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCddgKZrf8AD64gp3GeM2+GTuuKbDe1wndmUD1o6nswWIQAvzdoAUCG0c3G
yKJ+y/YHyW0AhcMHOAiCYOzqPEbyFpzGbfaK3FWNqlHT+6OP21q9r6IEVy+8l3U2
gW//vkz9zQVsOPzqVz6zkL2PZ1fNZwEzsKfzJpUU9VDnL8P0W/UTqnt5ZHCnHx+7
JuKozwwpQIYLNu7fx32CWZEAm+aEiyft6KQj+DCsrCAFHgV2hxwoccQ6Ut8VpT3y
Qd8wOZDMT7ukTCuuU7yjPtonQRhDL/D+/DtvPu8gyTFfXPeGiG+Uh5GfWTZ1tluH
w9j+7QaPhwsJXZSYiFChH0OMwEozAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzcjf
pp5lfvWezo8pTxHs+yLU9bYwHwYDVR0jBBgwFoAUgBdkcAW5GRQgyZGxrgeYtayh
TQwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMyQ0ZFLzUwMEIyOTkwODI4NTExRUI4MEM3RUY3OUY4QUVBMjI4L2dCZGtj
QVc1R1JRZ3laR3hyZ2VZdGF5aFRRdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dCZGtjQVc1R1JRZ3laR3hyZ2VZdGF5aFRRdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzJDRkUvNTAwQjI5OTA4Mjg1MTFFQjgwQzdFRjc5RjhB
RUEyMjgvZ0Jka2NBVzVHUlFneVpHeHJnZVl0YXloVFF3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcVGi6kr1+1Ulmhbq70nYLFHX9NYP0
s10JAaU3ebqQVISRACYuXt0czyNwip7RKrE7WOoQQe70eHFcXBtLSbsrCrTqVZS+
mxA0tZgfE6QBoxSgxvsx6WQrAs/cc6BASztO5AcExRg8KcAnXgOld//0sfRHMBgV
nSPjOfJJF60QeuGwgEIAX3ZDU/GvOnqgoZ1+I7RN7gtjSw+jKBv53+zTHy3sar47
jIIYm4JH3YOJNHjtUsG854ldxdL01lym/GRSU9QNu+EES0vaJl+5vn8Z7GVxiiiX
/UmjasvLCDpgyViNGn29iNAZANaPW/M9rmDMaHoATbezBHP88c+OP82L
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:49:24 2026 by rpki-client