
Error: rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
File: GB73GjT5LPYtzRHXkAfFhUg5was.mft (raw, json)
Hash identifier: Pwu9R/md2k0DWljsKQVFgtdZLejgkIM74ABBX3gwu+4=
Subject key identifier: 97:F1:53:F6:BA:C3:1B:B1:AF:73:C1:85:93:64:4D:F2:7E:7C:C9:F1
Authority key identifier: 18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB
Certificate issuer: /CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
Certificate serial: 0D78
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
Manifest number: 0D76
Signing time: Tue 13 Oct 2026 01:09:06 +0000
Manifest this update: Tue 13 Oct 2026 01:09:05 +0000
Manifest next update: Thu 15 Oct 2026 01:09:05 +0000
Files and hashes: 1: GB73GjT5LPYtzRHXkAfFhUg5was.crl (hash: 8AfPhKvAkH+iniFNFMfXXVYjKOAP4NZntA5vR1zYvSs=)
2: 99C2D1746B9011E7A18C6069F8AEA228.roa (hash: xVFvLTZ6B74UBRcRd1aRKe2f4QIjw1iEzmityoLx5VY=)
3: 355AD4A683AE11E98A55D62AF8AEA228.roa (hash: yQuqYo4PP7qzl5R5FLB1AGc649ab7ChkeEyvocc2AL0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 00:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3448 (0xd78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668231AF, serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
Validity
Not Before: Oct 13 01:09:05 2026 GMT
Not After : Oct 15 01:09:05 2026 GMT
Subject: CN=6acd84b2-1e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6c:0e:05:bc:9f:16:02:01:0e:5f:24:3d:71:
d1:1c:9b:bc:6f:b1:26:1a:26:ce:61:82:1a:9b:1a:
48:5d:9b:fc:c5:7f:4c:ab:74:ff:a6:ce:7f:f1:ba:
a0:76:40:f9:3f:8d:85:24:06:0f:e8:bf:86:34:78:
e6:cd:c9:17:93:d8:4b:a8:67:59:83:2d:13:6d:8d:
76:65:ce:5d:ea:3c:9b:7e:78:ef:4d:a5:40:a9:ac:
9e:39:75:00:a2:df:0e:aa:cb:4a:a4:ca:e7:73:7a:
cc:6c:de:80:b7:c9:63:7f:55:3e:3a:88:d0:58:04:
48:36:a6:6d:2f:be:c8:cf:e4:56:d5:2d:cd:bb:2e:
d8:0e:35:cd:d4:7b:e1:01:0b:96:c4:f8:03:0a:1a:
7a:45:16:ae:dc:80:01:15:b1:4a:c7:17:20:68:ae:
ce:a1:a5:3d:cf:ca:66:01:c2:98:eb:e7:5b:3d:f1:
3e:70:2a:44:79:21:a6:d0:20:1f:63:c6:3e:3f:5e:
46:6a:13:a2:96:81:cb:84:95:f3:f0:f8:81:fa:d5:
3b:d7:12:1d:07:b9:2c:1d:58:9c:4c:47:43:62:24:
b8:3b:6a:dd:e3:1a:e8:3b:cd:4b:fc:73:d8:97:09:
a4:dd:f8:54:0e:c0:55:cd:ea:ce:a1:ae:e1:58:4c:
2d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F1:53:F6:BA:C3:1B:B1:AF:73:C1:85:93:64:4D:F2:7E:7C:C9:F1
X509v3 Authority Key Identifier:
keyid:18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:0c:03:64:db:2c:c4:07:5f:69:41:e5:24:c6:4e:93:a1:09:
d1:51:4a:8d:ab:fc:0d:6c:be:4a:a0:c7:c8:bc:cd:97:d0:72:
36:7b:fc:ae:14:8a:1b:1c:93:d2:45:25:4b:98:7e:23:72:bc:
ac:a1:4a:70:9d:3b:ab:a3:6c:a2:4b:9d:de:a7:05:58:e7:ec:
9d:32:8e:bd:fd:81:e6:cc:e1:b3:37:25:6d:e4:fc:af:a8:a6:
35:a8:5a:40:6a:46:62:60:d7:af:b2:46:43:3b:bb:f7:b3:95:
1d:24:22:a9:a4:7a:92:96:58:22:00:34:b6:8f:9e:ff:a0:44:
70:b5:b9:02:df:0b:7b:1b:d4:1d:25:de:fa:4c:e5:54:33:e7:
25:6c:7b:45:ad:c7:c3:f4:ff:91:25:54:9d:0f:bc:f4:d2:d9:
bd:4e:c5:be:a6:44:db:9f:65:f7:75:3a:9b:9b:a8:d8:0e:69:
1e:ee:6d:87:9c:82:07:83:2c:6a:57:a1:85:08:6d:43:e1:ee:
15:95:02:e2:2d:19:67:2d:f2:53:dd:fe:98:3c:3e:76:18:bc:
4b:63:eb:55:b4:ba:ac:4c:e6:ad:49:0e:41:46:07:e3:30:82:
47:b4:e4:c7:ab:c3:03:68:40:71:a6:bd:af:28:59:b1:89:5b:
f0:08:ec:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:52:56 2026 by rpki-client