
Error: rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft
File: gyq31tewX3AP-RtzAzXuEJ-gLX8.mft (raw, json)
Hash identifier: Za5Cv7H02WjBOJUYedAWbj6AZ2RuHtkD7WP5ahw0ihM=
Subject key identifier: 9E:32:77:EC:62:93:F8:E5:29:B4:D8:AA:35:9E:A2:76:00:A6:24:91
Authority key identifier: 83:2A:B7:D6:D7:B0:5F:70:0F:F9:1B:73:03:35:EE:10:9F:A0:2D:7F
Certificate issuer: /CN=F36DBD5BAF/serialNumber=832AB7D6D7B05F700FF91B730335EE109FA02D7F
Certificate serial: 013F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gyq31tewX3AP-RtzAzXuEJ-gLX8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft
Manifest number: 013E
Signing time: Sun 20 Sep 2026 05:13:47 +0000
Manifest this update: Sun 20 Sep 2026 05:13:46 +0000
Manifest next update: Tue 22 Sep 2026 05:13:46 +0000
Files and hashes: 1: gyq31tewX3AP-RtzAzXuEJ-gLX8.crl (hash: KYRdZEfWj27nk7rYAtT1vKqkwV8w7vAOOOuspy9Gp+g=)
2: 4B9CA364BED211F09A698DD6DAE4EC9C.roa (hash: wpjf9P8gQce8p8xSJXmo+d96rtH8YAlQBHy9oW1+SUU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft
rsync://rpki.afrinic.net/repository/afrinic/gyq31tewX3AP-RtzAzXuEJ-gLX8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Sep 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBD5BAF, serialNumber=832AB7D6D7B05F700FF91B730335EE109FA02D7F
Validity
Not Before: Sep 20 05:13:46 2026 GMT
Not After : Sep 22 05:13:46 2026 GMT
Subject: CN=6aaf6b8b-4221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:23:0c:24:90:2f:b2:96:63:28:65:fe:3c:
17:af:f6:4f:53:0e:d6:46:89:9c:1d:75:08:1a:fd:
c3:77:71:5a:8a:ba:36:53:24:7e:1a:50:55:c1:6f:
4e:22:c3:e1:6b:5d:b2:ea:3e:09:35:b7:57:ae:76:
6b:11:0c:b2:31:10:d3:6c:97:22:46:cc:ea:70:72:
73:49:e0:ed:17:b4:97:0c:d5:e2:94:f7:92:aa:a2:
46:37:85:48:83:ec:d4:74:62:6a:fe:14:70:63:54:
4d:24:6a:a0:1c:c8:2c:4f:36:87:bb:0e:ec:1e:f0:
f6:38:9c:cb:59:f1:a6:aa:be:fa:31:06:0f:ed:5f:
6a:9d:7e:e5:64:d4:b5:71:27:c1:37:08:98:46:41:
59:fa:03:5f:b0:c1:5d:b6:23:1b:24:e4:97:68:30:
b4:a1:37:f0:df:3e:72:77:6f:c0:14:a6:a3:56:c1:
b7:5b:76:c6:f2:dd:22:29:fa:08:34:c9:23:40:32:
64:2c:d9:91:f4:50:a6:d8:30:c4:96:8f:c5:00:e6:
8e:3b:a0:e2:6d:27:9a:b7:99:3c:6b:cb:2e:5e:92:
84:94:34:21:2a:91:16:1e:05:b4:6d:5b:c0:c9:4e:
1e:0d:d0:d3:89:f4:6b:b4:5c:05:0a:79:18:d5:bf:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:32:77:EC:62:93:F8:E5:29:B4:D8:AA:35:9E:A2:76:00:A6:24:91
X509v3 Authority Key Identifier:
keyid:83:2A:B7:D6:D7:B0:5F:70:0F:F9:1B:73:03:35:EE:10:9F:A0:2D:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gyq31tewX3AP-RtzAzXuEJ-gLX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:3d:11:89:e5:02:e9:3b:69:f6:86:cd:47:93:f7:3f:f9:fc:
31:2f:5a:1f:25:c3:ef:c3:b9:00:30:cd:84:98:4b:8b:31:de:
8a:96:2c:f4:c9:2c:98:d7:93:b7:27:3d:04:9f:d0:b8:5b:ee:
b3:25:48:58:e4:a8:48:bf:c7:d7:63:0b:3a:fc:56:cb:b7:f0:
16:32:17:99:0f:4a:5f:8f:7e:be:6f:6c:85:67:c1:f7:30:9e:
49:e2:89:87:34:b9:c7:79:e4:c5:8f:cc:16:28:81:74:f6:e7:
60:6e:46:6e:dc:9e:12:c2:fe:77:2e:c4:71:4a:b5:ab:68:a8:
b9:d3:22:68:dc:5f:2f:6a:3d:b4:b3:36:15:0b:a8:4f:ad:8a:
e4:5b:c1:d3:40:e5:0e:ec:c5:d4:04:2f:0d:44:81:10:a5:f0:
34:51:0e:8b:8a:55:f1:67:ae:cf:12:cb:85:73:f5:ab:ca:b3:
90:e0:ac:4c:11:79:72:75:6e:67:05:55:e4:81:b6:c9:1a:a2:
53:03:18:fa:e7:5a:9b:cf:b2:b4:70:8b:f7:7a:cd:77:71:75:
f9:1b:09:fd:b4:3e:7a:b9:7f:e0:37:b4:6f:03:d1:ee:e5:53:
8a:4d:98:89:a9:dc:e2:b2:d8:f7:43:86:99:19:56:30:05:26:
3c:0e:32:4b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REJENUJBRjExMC8GA1UEBRMoODMyQUI3RDZEN0IwNUY3MDBGRjkxQjczMDMzNUVF
MTA5RkEwMkQ3RjAeFw0yNjA5MjAwNTEzNDZaFw0yNjA5MjIwNTEzNDZaMBgxFjAU
BgNVBAMTDTZhYWY2YjhiLTQyMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPGSMMJJAvspZjKGX+PBev9k9TDtZGiZwddQga/cN3cVqKujZTJH4aUFXB
b04iw+FrXbLqPgk1t1eudmsRDLIxENNslyJGzOpwcnNJ4O0XtJcM1eKU95KqokY3
hUiD7NR0Ymr+FHBjVE0kaqAcyCxPNoe7Duwe8PY4nMtZ8aaqvvoxBg/tX2qdfuVk
1LVxJ8E3CJhGQVn6A1+wwV22Ixsk5JdoMLShN/DfPnJ3b8AUpqNWwbdbdsby3SIp
+gg0ySNAMmQs2ZH0UKbYMMSWj8UA5o47oOJtJ5q3mTxryy5ekoSUNCEqkRYeBbRt
W8DJTh4N0NOJ9Gu0XAUKeRjVv7xhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnjJ3
7GKT+OUptNiqNZ6idgCmJJEwHwYDVR0jBBgwFoAUgyq31tewX3AP+RtzAzXuEJ+g
LX8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCRDVCLzNDNzk1RUFBQkVEMTExRjBCMEFEOEZEMURBRTRFQzlDL2d5cTMx
dGV3WDNBUC1SdHpBelh1RUotZ0xYOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d5cTMxdGV3WDNBUC1SdHpBelh1RUotZ0xYOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REJENUIvM0M3OTVFQUFCRUQxMTFGMEIwQUQ4RkQxREFF
NEVDOUMvZ3lxMzF0ZXdYM0FQLVJ0ekF6WHVFSi1nTFg4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEPRGJ5QLpO2n2hs1Hk/c/+fwxL1of
JcPvw7kAMM2EmEuLMd6Kliz0ySyY15O3Jz0En9C4W+6zJUhY5KhIv8fXYws6/FbL
t/AWMheZD0pfj36+b2yFZ8H3MJ5J4omHNLnHeeTFj8wWKIF09udgbkZu3J4Swv53
LsRxSrWraKi50yJo3F8vaj20szYVC6hPrYrkW8HTQOUO7MXUBC8NRIEQpfA0UQ6L
ilXxZ67PEsuFc/WryrOQ4KxMEXlydW5nBVXkgbbJGqJTAxj651qbz7K0cIv3es13
cXX5Gwn9tD56uX/gN7RvA9Hu5VOKTZiJqdzistj3Q4aZGVYwBSY8DjJL
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:34:06 2026 by rpki-client