
Error: rpki.afrinic.net/repository/member_repository/F36E373D/61A328A28B7311E99BC16668F8AEA228/gjOn_C8XCLxgH6b3xfeCJ36wTTU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E373D/61A328A28B7311E99BC16668F8AEA228/gjOn_C8XCLxgH6b3xfeCJ36wTTU.mft
File: gjOn_C8XCLxgH6b3xfeCJ36wTTU.mft (raw, json)
Hash identifier: qKlHsGhWOnN4T/GoGA3WLOoc+pwkTuNSpX8J97R0YFM=
Subject key identifier: 74:07:0E:E1:D6:5E:36:C0:B7:53:AB:4E:02:DB:9C:43:4A:B5:D9:6B
Authority key identifier: 82:33:A7:FC:2F:17:08:BC:60:1F:A6:F7:C5:F7:82:27:7E:B0:4D:35
Certificate issuer: /CN=F36E373DAR/serialNumber=8233A7FC2F1708BC601FA6F7C5F782277EB04D35
Certificate serial: 0AC6
Authority info access: rsync://rpki.afrinic.net/repository/arin/gjOn_C8XCLxgH6b3xfeCJ36wTTU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/61A328A28B7311E99BC16668F8AEA228/gjOn_C8XCLxgH6b3xfeCJ36wTTU.mft
Manifest number: 0AC1
Signing time: Sun 11 Oct 2026 01:28:03 +0000
Manifest this update: Sun 11 Oct 2026 01:28:02 +0000
Manifest next update: Tue 13 Oct 2026 01:28:02 +0000
Files and hashes: 1: gjOn_C8XCLxgH6b3xfeCJ36wTTU.crl (hash: 1LpCLDVWuTo9YzkCR/DRsSJFftsqOdB1mtoNAuRC+SI=)
2: 8F7C0326681C11EAA512AD3AF8AEA228.roa (hash: 5w0zjB9zrr7JPUe6E+UZp70x6v9PtVvXJ2pL8t6LK4I=)
3: 592FD6C0681D11EA83CCC43BF8AEA228.roa (hash: v2NNekjIm02OWpemTutfgvCxos1GPu94FGQS7tyLC+k=)
4: EEE984F0681C11EA9F6A323BF8AEA228.roa (hash: 1YVSNhH0hc5JS4oVbbc6hL2rxWXxAoZtPZWaxS/mjW8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/61A328A28B7311E99BC16668F8AEA228/gjOn_C8XCLxgH6b3xfeCJ36wTTU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E373D/61A328A28B7311E99BC16668F8AEA228/gjOn_C8XCLxgH6b3xfeCJ36wTTU.mft
rsync://rpki.afrinic.net/repository/arin/gjOn_C8XCLxgH6b3xfeCJ36wTTU.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2758 (0xac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E373DAR, serialNumber=8233A7FC2F1708BC601FA6F7C5F782277EB04D35
Validity
Not Before: Oct 11 01:28:02 2026 GMT
Not After : Oct 13 01:28:02 2026 GMT
Subject: CN=6acae623-95ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5d:ac:81:4d:bc:97:a1:19:32:d0:ba:75:13:
84:51:dd:1c:a7:27:ef:8c:ba:76:5e:c6:23:83:8e:
24:d6:4f:e2:90:5e:94:f8:ef:94:ca:15:7a:be:57:
ec:29:cd:bd:28:89:e0:53:2a:bb:47:05:14:d0:4a:
38:c7:0a:31:12:19:34:ff:c2:77:87:ab:a5:fe:97:
5c:d9:44:c5:3f:13:7f:5a:d0:40:99:25:a5:ae:41:
a8:fc:e6:8c:56:04:fa:34:f3:a9:25:f6:82:60:93:
c8:29:e9:00:c1:46:9a:3a:d1:92:41:bc:4e:ea:12:
95:03:73:f5:32:de:a2:38:c0:ef:b2:f3:9a:ea:15:
cd:eb:61:7b:ed:8c:f3:10:73:91:79:a5:ab:78:6c:
5a:ff:21:cb:52:de:13:1f:3b:63:50:17:17:cd:aa:
6e:20:5a:8e:d6:83:e5:28:57:8f:60:de:54:b5:b4:
7e:72:dc:30:64:55:8b:9e:3c:4d:61:c5:a9:cd:71:
90:da:ff:e5:36:c3:40:5c:4f:69:94:33:c9:48:d2:
57:69:1a:ef:20:9d:43:89:4a:f5:d3:18:50:0a:c0:
80:7f:1c:0a:96:b1:6f:c5:c3:5a:c4:48:bf:8f:47:
b7:1f:28:65:e9:5a:75:e7:e5:0e:09:8e:77:b2:5c:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:07:0E:E1:D6:5E:36:C0:B7:53:AB:4E:02:DB:9C:43:4A:B5:D9:6B
X509v3 Authority Key Identifier:
keyid:82:33:A7:FC:2F:17:08:BC:60:1F:A6:F7:C5:F7:82:27:7E:B0:4D:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/61A328A28B7311E99BC16668F8AEA228/gjOn_C8XCLxgH6b3xfeCJ36wTTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/gjOn_C8XCLxgH6b3xfeCJ36wTTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/61A328A28B7311E99BC16668F8AEA228/gjOn_C8XCLxgH6b3xfeCJ36wTTU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:10:e0:35:94:50:23:ca:da:da:07:36:43:5b:f3:5d:f3:6b:
ef:40:f3:de:51:69:92:f4:6c:87:8d:c4:b0:44:14:12:04:a8:
bf:30:c5:3d:d7:c4:b5:48:59:04:f0:54:43:b0:8d:ab:f5:db:
e5:32:9e:53:1c:6f:c6:79:04:1f:90:78:82:2f:23:6a:14:b6:
0e:22:4b:d4:9f:e4:6f:0c:b3:ae:e0:19:d0:56:0a:69:30:09:
f6:50:3a:ad:d4:66:7e:ce:81:d8:32:c3:37:c1:85:7a:e0:56:
7e:40:6f:b9:05:ae:30:b7:65:ad:77:19:92:2a:b7:5f:12:a8:
d9:86:2b:c4:70:65:6f:12:1e:a4:34:1a:48:3e:af:ac:32:8e:
12:92:13:a6:eb:2f:07:4e:58:9a:f1:58:bb:42:c7:3a:e2:ec:
cb:9d:9d:b3:36:ff:c2:d4:17:d2:34:87:8c:c2:3e:e9:9f:72:
c9:f9:20:57:54:ae:a9:5a:f8:6c:af:7f:ca:c1:3a:7d:6e:e0:
67:bf:54:28:97:84:e5:a0:52:39:b2:3e:21:24:1a:c4:58:a6:
f0:4b:ac:6f:ea:48:cb:45:1d:2b:6f:1f:1b:e6:d4:df:12:d5:
f3:95:01:14:b6:b4:ea:8c:3c:a8:2e:61:93:be:8e:04:1a:bb:
91:84:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:05:30 2026 by rpki-client