
Error: rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft
File: GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft (raw, json)
Hash identifier: O9wfD20eqC1/kne1wYk5AgsMeyOdwLEkWt2ibGh/MNU=
Subject key identifier: 2C:0D:DD:41:2E:D0:26:76:34:D6:AD:63:9B:5F:A3:B2:26:34:31:B9
Authority key identifier: 18:44:13:EA:D0:EC:C5:BE:11:C7:11:B3:E6:DF:E4:B4:DC:C8:D8:4F
Certificate issuer: /CN=F36CEBD2AF/serialNumber=184413EAD0ECC5BE11C711B3E6DFE4B4DCC8D84F
Certificate serial: 0447
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft
Manifest number: 0440
Signing time: Sun 11 Oct 2026 03:52:50 +0000
Manifest this update: Sun 11 Oct 2026 03:52:50 +0000
Manifest next update: Tue 13 Oct 2026 03:52:50 +0000
Files and hashes: 1: GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl (hash: McUpkOTYTE89kBNXCZ8KE7+EhujT8h2jK/bJTUwEWx8=)
2: 03A4AAAE8A9311EE88C966154AD9E6FC.roa (hash: UhEZBD7+ZxP9l8n+vkehEuSNBmWkzQmQERKAHbI7sAk=)
3: 3B55469ADD5111EF99B2679F762E951A.roa (hash: 4buSDwLbI/rqa8c0nC/9yYisirrzvtwPW6bajd5/Dps=)
4: 399EC6ACDD5E11EF94E31475762E951A.roa (hash: gAeSPAZ0k2oD4rBDBXtSvp2FI22GocUMJrD0WxJ/to4=)
5: EF37A816D8EF11F0B7873D83DAE4EC9C.roa (hash: bWMppRJbwYhIJPdXrXCt5XruoowhYb5EoWsWNOjjVOU=)
6: 5191F380D50411F0BC245BECDAE4EC9C.roa (hash: afv1bndW7vihEyhjF6fKICZH7yzP+jyfZdeg4IjFUCI=)
7: 0FF374D2987311EEA3CBC46ED25BE465.roa (hash: BHH7zUUW9dkSFd6Vm0HYgvG7mdDbrxJsOem3Aruk+8Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft
rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095 (0x447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CEBD2AF, serialNumber=184413EAD0ECC5BE11C711B3E6DFE4B4DCC8D84F
Validity
Not Before: Oct 11 03:52:50 2026 GMT
Not After : Oct 13 03:52:50 2026 GMT
Subject: CN=6acb0812-d4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7c:fa:02:19:18:fb:bf:13:d2:49:b0:e5:c0:
13:c0:2f:c4:62:af:c3:d1:bf:d0:d8:de:a6:d5:08:
34:d1:85:f2:fa:8d:c9:e2:e2:a0:e4:d8:a4:80:75:
05:f2:28:e7:00:d1:2f:4b:7e:1d:1e:70:2e:de:41:
1d:08:de:de:a7:84:3e:db:ab:ad:9c:f9:f6:d2:2d:
2a:a4:ed:ec:ed:ed:cb:1e:e8:97:0d:20:8b:2a:34:
a2:1b:2b:9b:2c:a1:bc:bc:0a:3b:43:f0:c6:4b:6c:
f8:f5:1d:76:9c:9c:fb:2e:a1:19:97:03:84:73:2a:
cf:9a:3f:3d:8f:d4:ed:75:1e:a5:9d:9f:82:0b:89:
ae:b3:23:f3:66:be:8f:06:ec:1f:c8:b0:17:28:11:
39:83:af:4c:02:2e:8d:4e:f2:ca:41:46:b7:92:bc:
68:6e:50:79:6a:1f:87:41:44:d1:a4:9b:92:3b:40:
f1:de:f1:d7:75:54:60:71:01:da:0e:19:a6:e7:e3:
02:07:28:99:24:87:34:df:9b:9b:97:99:4f:61:c2:
f7:83:ab:46:e2:37:bd:04:27:43:23:44:d4:74:a3:
a8:30:ac:70:03:0a:29:44:45:a8:42:bd:be:e5:69:
52:f6:35:43:52:65:32:8f:45:37:f5:f7:02:81:98:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0D:DD:41:2E:D0:26:76:34:D6:AD:63:9B:5F:A3:B2:26:34:31:B9
X509v3 Authority Key Identifier:
keyid:18:44:13:EA:D0:EC:C5:BE:11:C7:11:B3:E6:DF:E4:B4:DC:C8:D8:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:2c:95:a7:d9:4f:46:9b:9d:58:f6:27:0b:0a:2c:e0:63:9f:
db:eb:ba:c1:19:05:e8:ba:be:9d:8c:8b:65:72:08:c8:a0:f0:
40:1d:e6:2d:0a:aa:ac:8e:22:a8:b2:c5:f8:43:42:2d:d6:60:
e2:dd:78:5c:eb:15:1f:6a:6f:e0:a1:e3:4d:2b:21:fe:43:be:
3c:73:51:70:3d:41:30:a9:9d:4f:20:f4:16:d1:bb:1f:5e:59:
d4:08:bc:29:15:4e:2c:05:80:13:32:a2:1a:09:f2:bf:02:3a:
4d:27:81:9e:1f:08:10:b3:98:d6:6c:da:9f:7c:33:9b:2c:86:
e0:a7:ba:cd:2e:f3:d3:d1:f6:51:f2:f9:a9:d4:da:d2:00:2f:
44:3a:f1:0f:d6:e2:6b:f1:0a:fe:f5:fd:1a:be:28:ef:43:0a:
d0:d2:ef:5f:06:3d:e4:7d:71:b3:1b:3a:39:bc:73:e0:25:cd:
eb:2f:d9:1a:eb:8f:fe:23:2b:b7:0f:5c:0b:29:2c:3f:b4:34:
98:ee:c0:a5:de:ce:09:bc:2e:2d:97:d6:aa:1f:65:37:79:53:
dd:d8:4e:fc:95:88:ed:cc:aa:74:81:7a:3e:87:8c:01:00:85:
fd:fd:49:ac:fe:59:be:57:bf:56:bb:75:e7:8b:3a:c5:47:f2:
60:3d:88:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:54:44 2026 by rpki-client