
Error: rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
File: ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft (raw, json)
Hash identifier: VAeWIhmuFCq4hKPi7RT2dKHrJfoHpGp8zwsfhB5jjOM=
Subject key identifier: 4E:72:AB:48:D2:DD:77:FA:5D:3F:0E:40:B4:96:F1:72:48:0D:D4:91
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Certificate issuer: /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial: 0FCD
Authority info access: rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
Manifest number: 0FBF
Signing time: Mon 12 Oct 2026 01:00:54 +0000
Manifest this update: Mon 12 Oct 2026 01:00:53 +0000
Manifest next update: Wed 14 Oct 2026 01:00:53 +0000
Files and hashes: 1: ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl (hash: dJ8ewe6lwfRjgyng3dVd7Unlpbm4Gpdtc+ssoKksOGo=)
2: 12A260B4849111F195A5D2BBCE1D38B0.roa (hash: Zb+WC9W9F2kd9qzK90J/GHlkEMoKxwiZKn5a50rvWiY=)
3: 8378B942986E11EBA9B2860AF8AEA228.roa (hash: DCXxXlW0spouErSs20DWzGFXGGBNaPXmr93oX+0glto=)
4: B13DE26C980F11EBBA26A90FF8AEA228.roa (hash: yCbUwKaqaW0f/0Vl+tcwN9G6XJ8wrDKMmp+woAIv4Rg=)
5: 3E04DE108B7811F18705BAE8CE1D38B0.roa (hash: C1lsyEuFMUa4JVGq3Zk1ehqqctSAV2zoFX32Ak+7/iw=)
6: 87C7F2EE8B7811F18687D0E8CE1D38B0.roa (hash: VHPttPpUSEj/IMkJOgNZXqpouSQeuk9KI7TWIgiMsNo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 Oct 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4045 (0xfcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3699B8EAR, serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Validity
Not Before: Oct 12 01:00:53 2026 GMT
Not After : Oct 14 01:00:53 2026 GMT
Subject: CN=6acc3146-8576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:be:11:25:64:a7:ec:e9:46:03:82:81:aa:
34:b7:7e:8f:4a:96:46:98:0a:fc:2c:e2:33:3a:f8:
20:53:a9:9e:47:25:b3:2f:6e:ae:46:d9:f5:9a:14:
3f:60:7d:66:76:03:c0:f7:17:10:93:ce:d2:ad:ea:
66:a3:29:00:1b:b5:c7:9a:91:8b:b4:f6:20:78:ff:
21:85:7f:8b:ae:90:b1:e3:21:a3:ec:82:95:2f:c7:
29:d8:d0:69:30:93:2c:04:85:fe:88:bf:7b:9a:a3:
2a:0b:67:c5:03:22:b5:8e:80:dd:f4:99:0c:0e:1c:
7e:30:fa:cf:4d:1a:11:8a:48:f5:d4:ee:70:f3:62:
a1:41:82:05:4d:37:49:79:29:dd:c9:aa:e0:04:f1:
e8:50:21:9d:a8:03:d3:47:4a:8d:52:12:30:a5:b9:
92:09:9b:6f:d9:18:71:53:85:db:90:d2:b9:9f:f1:
05:bf:50:4b:5b:9a:fd:6e:8a:39:93:60:c9:06:50:
fc:fc:8c:6e:c3:d0:ab:0b:0a:c5:8f:c2:5d:03:c3:
0d:7b:29:a9:4f:cc:b9:0f:9b:d9:3e:b4:f3:e0:66:
1d:7e:93:bb:1b:02:b0:fc:d0:ce:4c:9f:66:39:67:
ec:aa:f5:f2:9b:ac:4b:9d:54:9f:f0:03:15:6e:d1:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:72:AB:48:D2:DD:77:FA:5D:3F:0E:40:B4:96:F1:72:48:0D:D4:91
X509v3 Authority Key Identifier:
keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:74:03:77:92:79:a7:66:0a:f1:88:a3:bd:02:cf:55:d5:d7:
19:0c:41:d9:7f:a6:d8:56:a0:36:12:86:6a:a3:f6:29:fa:43:
7f:9b:d1:30:b9:5f:84:e8:e7:f9:10:2a:ae:05:df:8c:30:b1:
9a:1b:e9:d3:2f:fa:a4:eb:86:1e:12:43:3d:8e:3a:84:4e:05:
d0:ca:f5:a1:ef:9e:9f:7b:ab:d6:69:a2:14:0c:c0:c4:ed:33:
48:c3:86:2f:80:ec:2c:51:5f:aa:89:55:91:0b:17:c2:b6:ef:
c2:33:20:6c:38:c1:56:8a:3f:18:59:a5:fa:f6:58:33:68:fe:
b2:53:4c:5b:f2:4a:8b:98:1d:4b:c5:eb:48:ff:55:05:d9:7c:
45:cb:77:8a:2e:b0:fa:3e:55:00:f8:63:a1:66:74:f6:4e:b5:
14:35:61:fc:1b:06:f7:52:c4:77:48:aa:a5:3f:80:1c:c2:62:
7d:42:40:2e:98:8b:d2:58:52:a8:ee:64:94:14:71:ee:5b:97:
f7:a1:2b:f1:9e:2c:d0:59:8f:d5:c7:5f:8c:19:3d:64:26:be:
a8:cb:2b:7a:12:89:e9:48:97:f8:72:c9:cf:40:73:0c:83:9a:
0c:53:26:68:8b:c9:1e:a5:77:00:dd:be:ac:6d:5c:e6:c3:7c:
c8:3d:79:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:18:28 2026 by rpki-client