
Error: rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
File: gnLCuLOzie4re71PvVUJZ28yebs.mft (raw, json)
Hash identifier: 1irHOrj3NaFB5JYdxS8nd4Ao2DpvRaesKavCeR0mR0E=
Subject key identifier: A5:1B:2D:79:19:05:C6:BB:38:B7:11:B8:59:18:C7:71:3B:3D:E8:74
Authority key identifier: 82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
Certificate issuer: /CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Certificate serial: 0674
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
Manifest number: 0662
Signing time: Tue 22 Sep 2026 02:46:54 +0000
Manifest this update: Tue 22 Sep 2026 02:46:53 +0000
Manifest next update: Thu 24 Sep 2026 02:46:53 +0000
Files and hashes: 1: gnLCuLOzie4re71PvVUJZ28yebs.crl (hash: jooFaaKGk7q6GzZ6ioDADVKoe+K/12XfE42iNsfu0ac=)
2: 392B415C962411F1ACFA44BBCE1D38B0.roa (hash: LxzFCi7JU4fjc8I/HMELOkIJrVr9JdHXpdpNxI6Cj2A=)
3: 2D8F57BA962511F1A1E11EC3CE1D38B0.roa (hash: iyI7OZNk5JxLuz97Rah8MP9qePaXqqI/w+K+KVaK3ZI=)
4: DADAC6EA962311F1B0C214BBCE1D38B0.roa (hash: 5MEKxws/tSLBDcD7RIUBQp5fH5C2lVDbBkZ8cZqbHD8=)
5: 28AC077E962611F1AE5DBBC7CE1D38B0.roa (hash: FX1gomZYkFfLAaFV89AIDDf6PT5MVpQU2gAZbD1m4AI=)
6: D10078C0962511F182917BC5CE1D38B0.roa (hash: qZiwreEQ5AVLAxnIrMCbPDBr4h7nRd6VecR32M2XQCY=)
7: CE1E54E8962411F1A72068BFCE1D38B0.roa (hash: R2CZNdQnuiZF5AcIv4DAPM1jIgHiwP8PJumaHo5AGno=)
8: 815FAFC6962411F1995CF8BECE1D38B0.roa (hash: fmHEZWmmyjoAMqBm3ElorytWO2heDwGjaJPbde41qy4=)
9: 985212B2962611F1BB996FCBCE1D38B0.roa (hash: azA9FLKur7HtQYuVsDfj8+2Et39GkA9EuUV1YVQs4x4=)
10: 86D242BA962511F1A6E696C3CE1D38B0.roa (hash: +aT643r7vwQVIvpoDdf8DbDfhgHMBDbc87UehjNsw8I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1652 (0x674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C94EAF, serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Validity
Not Before: Sep 22 02:46:53 2026 GMT
Not After : Sep 24 02:46:53 2026 GMT
Subject: CN=6ab1ec1e-e860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:52:90:55:90:55:12:8e:19:c3:cb:ce:cf:
b6:2b:f9:f6:06:32:7e:26:e6:de:f1:af:49:e5:5a:
bd:89:a3:22:00:64:f1:ff:42:53:3b:5d:10:df:52:
d1:bf:42:28:1b:75:02:b2:c9:0e:28:29:72:b7:c8:
1d:05:14:96:28:d7:41:2a:15:75:93:bf:c3:ed:59:
da:29:ba:5c:aa:09:44:0c:2d:9a:bc:10:68:8d:bf:
91:d0:cb:5b:70:9c:e6:f6:5a:f6:ed:c3:70:c8:c1:
d0:fe:76:b3:59:61:e6:d2:44:a6:05:c8:d4:b0:f4:
f2:60:d2:b4:2d:db:6d:4e:41:f7:66:d7:9d:74:c4:
73:e8:4a:d6:c8:bd:60:0a:82:2d:84:f3:24:e9:25:
f3:63:0e:a8:45:27:5d:b4:cb:09:ac:a1:32:ce:4b:
17:60:e6:55:16:61:36:ea:08:a1:45:c5:80:84:e4:
78:0c:8a:14:47:38:df:d0:34:f7:aa:51:3e:76:e3:
61:2e:08:13:8a:ae:6c:26:13:d6:c2:fe:8c:29:d9:
4c:33:ef:da:fa:d2:65:6d:5e:aa:0d:17:80:c0:83:
ed:f9:70:86:04:f2:63:65:dc:00:de:2d:bc:9f:57:
9b:a4:45:8f:5d:12:52:85:ad:eb:48:bb:80:90:a4:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1B:2D:79:19:05:C6:BB:38:B7:11:B8:59:18:C7:71:3B:3D:E8:74
X509v3 Authority Key Identifier:
keyid:82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d5:51:45:10:96:91:df:be:04:ae:aa:f8:02:f5:9b:0d:b5:
dd:8d:00:b6:eb:4f:fe:96:1d:44:ab:da:43:95:30:a9:c0:41:
9c:e4:3b:95:67:ea:92:e8:88:56:f1:0a:77:23:ec:91:13:99:
6a:df:81:b7:ff:bd:2c:0d:6f:51:4f:23:35:09:05:2a:ea:4e:
d2:7d:fe:9b:a9:c4:0e:96:63:58:a5:a8:91:0f:f2:95:84:d0:
b6:b5:7e:9f:dd:33:37:f7:00:8d:54:9a:a5:05:f1:54:07:54:
09:e1:49:6b:cd:9d:92:c4:14:d3:75:1e:ce:5e:90:48:39:03:
03:ec:c1:84:f6:96:19:d8:fd:c6:be:a7:db:bf:3c:cf:f3:df:
25:ba:af:e4:89:47:37:e8:4c:6b:29:0a:f4:38:d5:63:c2:e8:
08:17:82:3f:a3:4a:f2:b0:92:08:1e:55:db:07:d7:5d:4c:b8:
15:ad:47:fc:f0:cf:73:1d:bd:bb:25:59:b3:c7:52:60:98:4c:
0f:86:9a:ab:8f:c7:02:ca:40:c6:87:c3:9c:e7:6b:c0:05:8d:
06:84:da:51:64:fe:df:48:e1:ec:28:42:1a:7d:81:c0:3f:eb:
33:6a:3b:74:70:3c:b6:c0:5b:5e:bf:03:a5:ac:cb:b9:99:97:
18:62:25:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:06:15 2026 by rpki-client