
Error: rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
File: gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft (raw, json)
Hash identifier: u6b6DBGGkhNZCBqzaFTWvPeQ5NvvBHw/aUhsWFTIQnY=
Subject key identifier: F6:A7:74:AC:0C:84:46:39:1F:6A:9D:E7:2C:6A:63:15:E4:97:E1:C9
Authority key identifier: 80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
Certificate issuer: /CN=F364744FAF/serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Certificate serial: 0930
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
Manifest number: 092C
Signing time: Mon 21 Sep 2026 01:50:08 +0000
Manifest this update: Mon 21 Sep 2026 01:50:07 +0000
Manifest next update: Wed 23 Sep 2026 01:50:07 +0000
Files and hashes: 1: gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl (hash: pqqaYZ4BUOgLcibqnVcaa+kRdS/1VAetVOsk1pOawxs=)
2: 1C467B5A8B6C11F1A58384A2CE1D38B0.roa (hash: 2c1rafmJ8uAX7I4T9KV6h7Qhuemf9XiHnWfTCcuaKOs=)
3: 7C4E6EFA8B6B11F1975A431DCF1D38B0.roa (hash: 5fNF9adn8hznCtC8W7/QFTQ4MXq5VVjvENhur/9sV/w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 01:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2352 (0x930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364744FAF, serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Validity
Not Before: Sep 21 01:50:07 2026 GMT
Not After : Sep 23 01:50:07 2026 GMT
Subject: CN=6ab08d50-cfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:4a:4d:9c:18:11:7e:72:8f:1d:ba:06:c7:
a9:ea:69:ae:47:df:ca:d0:49:65:51:8e:44:7b:b9:
f1:e5:1e:7b:2d:09:7d:1b:00:45:94:cb:41:10:b4:
26:4e:94:8e:c6:db:c3:6e:60:08:58:b1:12:31:e2:
cf:e5:6c:f1:d0:78:e6:6e:1a:37:d5:e2:55:7a:6a:
22:c5:63:40:9b:45:23:78:41:a0:17:80:0c:07:15:
b3:61:26:4a:80:9e:e2:e3:c2:a6:9a:df:64:ac:52:
39:6f:f2:8c:19:1a:9c:18:5c:d2:2a:97:d4:db:f7:
0a:69:ca:af:1b:2e:01:6d:8b:49:17:4c:0f:9c:c5:
7d:2d:28:63:5f:cc:26:9b:ce:05:07:49:cb:e2:f1:
71:ab:c1:13:8d:e9:ad:88:28:6c:19:19:ff:b4:bb:
63:b2:42:90:46:85:50:72:88:f0:9a:5a:8b:16:41:
31:e2:29:14:e7:ae:0a:c5:c2:39:0b:d2:c4:89:e2:
21:ab:59:34:16:8d:7e:66:ea:7b:d3:ab:4c:54:cf:
68:86:ad:51:dd:b2:2a:6c:9e:81:e2:c4:42:57:b3:
05:5c:a8:62:62:b3:e9:11:64:11:33:50:98:95:9e:
90:77:a5:10:4c:19:36:7e:a1:3f:f2:b8:fd:55:51:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A7:74:AC:0C:84:46:39:1F:6A:9D:E7:2C:6A:63:15:E4:97:E1:C9
X509v3 Authority Key Identifier:
keyid:80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:af:e0:ab:81:c0:06:4a:8c:28:f4:1a:99:35:72:db:ba:d9:
a6:e8:4a:4d:d7:30:dc:87:bc:2a:63:95:73:b8:6b:f3:e5:91:
72:1c:e4:27:3e:ac:c4:70:21:30:a9:ef:cb:34:3e:01:ba:92:
21:8c:bd:f5:7e:9f:f2:71:b2:ff:40:af:f7:3a:4a:ff:fd:7e:
52:2d:2a:51:73:d5:f8:5e:dc:be:b7:17:f8:e4:2e:06:18:f4:
dc:e1:68:fe:ee:18:0c:a8:b4:3c:07:03:86:57:b2:83:c4:6f:
00:97:f7:3a:30:c6:8d:ec:57:ab:c4:6e:ab:d3:ad:b3:1b:94:
ea:42:d7:2d:f3:53:c8:99:92:07:f8:59:71:8e:6a:8b:46:10:
e3:a8:26:87:e2:89:d8:7e:68:f9:3f:3a:e9:cf:87:45:64:ed:
95:f4:c1:be:d7:4d:af:5c:08:4f:6a:c2:b2:27:3b:6c:87:58:
c5:ed:3a:32:3e:43:8d:41:5c:92:d7:aa:38:2b:0d:bd:b8:06:
19:cf:29:0a:a4:76:0e:92:6d:53:47:44:0c:9d:3c:3a:30:ac:
f8:7b:f7:4c:0f:82:a9:f7:0c:66:a5:75:f4:69:bd:c4:3c:5f:
d5:27:69:fb:8d:74:86:26:79:5b:0c:2a:93:d4:a4:f9:3a:9b:
b0:8e:f5:71
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCTAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDc0NEZBRjExMC8GA1UEBRMoODBBRjA2MEU0NjQwQzMyNjUzRDBGMDBDMzAyNDUx
NEE5RjE0OTUzODAeFw0yNjA5MjEwMTUwMDdaFw0yNjA5MjMwMTUwMDdaMBgxFjAU
BgNVBAMTDTZhYjA4ZDUwLWNmYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtj0pNnBgRfnKPHboGx6nqaa5H38rQSWVRjkR7ufHlHnstCX0bAEWUy0EQ
tCZOlI7G28NuYAhYsRIx4s/lbPHQeOZuGjfV4lV6aiLFY0CbRSN4QaAXgAwHFbNh
JkqAnuLjwqaa32SsUjlv8owZGpwYXNIql9Tb9wppyq8bLgFti0kXTA+cxX0tKGNf
zCabzgUHScvi8XGrwRON6a2IKGwZGf+0u2OyQpBGhVByiPCaWosWQTHiKRTnrgrF
wjkL0sSJ4iGrWTQWjX5m6nvTq0xUz2iGrVHdsipsnoHixEJXswVcqGJis+kRZBEz
UJiVnpB3pRBMGTZ+oT/yuP1VURf9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU9qd0
rAyERjkfap3nLGpjFeSX4ckwHwYDVR0jBBgwFoAUgK8GDkZAwyZT0PAMMCRRSp8U
lTgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3NDRGLzNCMDJGOEIyQURDMzExRUE4RjQyRUY3N0Y4QUVBMjI4L2dLOEdE
a1pBd3laVDBQQU1NQ1JSU3A4VWxUZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dLOEdEa1pBd3laVDBQQU1NQ1JSU3A4VWxUZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDc0NEYvM0IwMkY4QjJBREMzMTFFQThGNDJFRjc3RjhB
RUEyMjgvZ0s4R0RrWkF3eVpUMFBBTU1DUlJTcDhVbFRnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABr+CrgcAGSowo9BqZNXLbutmm6EpN
1zDch7wqY5VzuGvz5ZFyHOQnPqzEcCEwqe/LND4BupIhjL31fp/ycbL/QK/3Okr/
/X5SLSpRc9X4Xty+txf45C4GGPTc4Wj+7hgMqLQ8BwOGV7KDxG8Al/c6MMaN7Fer
xG6r062zG5TqQtct81PImZIH+FlxjmqLRhDjqCaH4onYfmj5Pzrpz4dFZO2V9MG+
102vXAhPasKyJztsh1jF7ToyPkONQVyS16o4Kw29uAYZzykKpHYOkm1TR0QMnTw6
MKz4e/dMD4Kp9wxmpXX0ab3EPF/VJ2n7jXSGJnlbDCqT1KT5OpuwjvVx
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:50:42 2026 by rpki-client