
Error: rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
File: Go8PdPo6YC9H_Ow2uLP3niHzABg.mft (raw, json)
Hash identifier: JjklCwnXptepLYFYmznLb2obtu2GTlEG2wjjOWv+wEM=
Subject key identifier: 25:6C:04:F1:3C:C6:8A:8F:87:2E:61:0F:26:05:02:B9:EB:D3:DE:7A
Authority key identifier: 1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
Certificate issuer: /CN=F3656177AR/serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
Certificate serial: 0E4A
Authority info access: rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
Manifest number: 240B
Signing time: Fri 25 Sep 2026 01:05:37 +0000
Manifest this update: Fri 25 Sep 2026 01:05:36 +0000
Manifest next update: Sun 27 Sep 2026 01:05:36 +0000
Files and hashes: 1: Go8PdPo6YC9H_Ow2uLP3niHzABg.crl (hash: 97yghg6XSZmheiIK9bxI+ZwaRBjYCXGvkQ0pDKphu3k=)
2: B0CB3182C8C611E9B220F755F8AEA228.roa (hash: gqrU/z6iXLRtLiCnHFZa0s+2uBK1Ct+5G7ihg1BeuL0=)
3: 0E3B72CCC8C811E98D790458F8AEA228.roa (hash: itr9OUnzmKbdqppKMzcknLB4lBw9Ah9MK/Fp31d00b0=)
4: B6DAAC5EC8C811E9B566A258F8AEA228.roa (hash: Y4yGjlwVyROuEGeowY33dWqLnQRQW/byvC0cJpLJ8EA=)
5: 361323CCC8C711E9B652C156F8AEA228.roa (hash: ZDrsLI1RWkFdQohl1nTyw5JGa4/mTeCrLl2gQVNYxnU=)
6: 146302C4C8C711E984B79356F8AEA228.roa (hash: DdSuiwT/ngk7JQ1+7xZSJqCpSkRWy7BhZniM1rPy9e8=)
7: E73F0D38C8C611E98A095B56F8AEA228.roa (hash: B5Em/KidBogdtiGbZ1QNgeUY8m5bNBKn2AeQxhe44fA=)
8: 66123256C8C811E99A726E58F8AEA228.roa (hash: u5cowoJMX4Hxd12oQmnhhFSMAoh12QYhoXjiZuk5pKI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3658 (0xe4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656177AR, serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
Validity
Not Before: Sep 25 01:05:36 2026 GMT
Not After : Sep 27 01:05:36 2026 GMT
Subject: CN=6ab5c8e1-fa38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:a2:c5:9b:71:e2:c6:da:4d:79:77:60:6e:
41:84:9c:cb:73:8e:11:ff:43:e3:82:4c:92:c0:a3:
91:ad:07:f9:fb:30:45:9e:2b:5c:65:3c:02:98:74:
09:59:33:24:25:79:03:48:60:e2:d1:31:aa:6e:d0:
1f:ff:ee:fb:3d:4c:ac:8a:72:54:2a:a5:95:b5:17:
ce:7b:d0:9e:cf:d3:ad:70:9e:62:33:2f:da:17:19:
d1:c1:6b:70:08:ab:4c:2a:de:fa:a3:c5:5c:99:f1:
bb:39:63:bb:ef:ca:72:d9:3f:15:b3:c1:56:d3:ff:
4d:bb:6f:0a:10:0e:89:51:61:83:3c:d8:a6:48:5a:
6c:75:8d:fc:b9:8c:b2:57:cd:e3:a4:95:54:23:64:
f4:5b:de:0d:0a:ce:da:5b:fb:6c:15:3b:21:60:a0:
d2:db:2f:ee:5c:22:39:1b:33:05:76:b6:ad:46:cb:
f4:90:66:4b:a7:2f:ea:24:29:3e:07:69:5c:46:7d:
95:1e:8d:c9:b0:c1:b9:bd:7b:f9:0b:f2:df:eb:2e:
c4:7e:4c:3a:f3:8c:38:8d:8e:32:da:76:15:a2:df:
70:17:a3:ad:83:ec:e7:a4:68:83:94:bd:f7:76:79:
f8:2a:66:6f:f8:25:f4:27:da:e3:09:4a:ee:1f:74:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6C:04:F1:3C:C6:8A:8F:87:2E:61:0F:26:05:02:B9:EB:D3:DE:7A
X509v3 Authority Key Identifier:
keyid:1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:06:67:3b:5b:eb:da:4d:1f:85:7b:29:06:09:10:09:12:a3:
a4:8c:76:f1:1d:85:57:16:de:6f:2c:37:69:33:6a:24:dc:43:
08:88:3a:96:fb:97:c2:9c:13:19:8c:81:c6:b2:1c:5f:ec:47:
8f:12:76:1f:27:00:fe:3e:1d:27:94:c5:25:2d:43:1d:4c:d9:
12:5b:38:a1:33:94:d8:46:eb:d8:c1:d0:70:65:8b:99:ca:9a:
5f:d8:a9:5d:a3:8e:33:83:8e:b7:b7:92:b0:7d:a8:c5:1e:0f:
63:9c:f2:e2:fb:07:08:58:74:52:07:6a:62:c7:06:48:0e:bb:
79:88:5e:d8:37:a9:27:d3:0a:6c:68:01:da:12:67:11:5c:d1:
9a:94:78:7a:14:5f:58:9f:50:f1:b4:7c:c7:5d:18:21:3d:61:
2f:27:3e:cb:96:fa:6d:1f:d3:b3:73:b7:a7:88:02:aa:cf:42:
07:bb:48:8a:ca:63:ac:ab:7e:63:b1:31:e2:84:d8:86:fc:73:
85:f6:d6:b6:46:db:2e:53:60:43:89:1f:8f:95:3a:2d:86:28:
d2:ec:ca:9a:6b:a3:d3:b6:e5:2b:ed:cc:cd:2b:5d:8f:8b:de:
bd:7e:e0:3d:e7:b7:94:42:0d:93:fd:17:6d:d6:7a:9f:e8:e6:
f7:6a:ba:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:57:33 2026 by rpki-client