
Error: rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
File: 3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft (raw, json)
Hash identifier: ChJaf7nf76G/Lht39OwFsuD2UOxreFnVWwtVycC/ou0=
Subject key identifier: DA:39:0F:45:1D:E8:8E:D8:85:17:8E:D7:45:D9:BA:F3:81:7D:09:84
Authority key identifier: DC:6B:9A:A9:79:B5:F9:B3:76:CA:32:99:A5:82:A7:5E:38:16:AB:41
Certificate issuer: /CN=F36167D3AF/serialNumber=DC6B9AA979B5F9B376CA3299A582A75E3816AB41
Certificate serial: 0269
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
Manifest number: 0267
Signing time: Sun 11 Oct 2026 04:48:04 +0000
Manifest this update: Sun 11 Oct 2026 04:48:03 +0000
Manifest next update: Tue 13 Oct 2026 04:48:03 +0000
Files and hashes: 1: 3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl (hash: tUVQewZvmD4yz4dKH9ZWG9lH4aZXRpGt7ZtEL2yZSPY=)
2: 319E7D9025E111F1AAB2D0A6DAE4EC9C.roa (hash: t0hHr5N29exi7ePnnuqEX6ghsA9Kp7S/3DQ8eMKksBQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl
rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36167D3AF, serialNumber=DC6B9AA979B5F9B376CA3299A582A75E3816AB41
Validity
Not Before: Oct 11 04:48:03 2026 GMT
Not After : Oct 13 04:48:03 2026 GMT
Subject: CN=6acb1504-039b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:9b:c9:83:7d:dc:84:9e:ab:8b:8d:89:6d:
63:38:c2:49:cf:e5:37:e7:7b:cc:df:9b:ce:a1:d9:
ae:7d:c3:c8:22:91:8c:97:ee:27:85:34:d3:32:34:
3c:e6:2a:6b:68:08:1c:f4:7f:9f:47:b2:24:62:ab:
1e:25:48:44:18:95:17:0c:ca:ed:0b:ea:81:18:a9:
e4:6a:77:14:6e:43:d1:60:d0:f8:47:2e:bd:e6:d7:
2e:45:54:f3:2e:8e:df:19:64:3a:1b:97:7c:ca:77:
9b:6d:3b:16:12:75:ca:41:84:67:52:d2:7d:95:de:
7e:38:d7:75:1b:c4:bc:a1:48:08:00:75:f1:0e:e3:
4d:64:07:c7:ad:19:60:b4:de:fe:1c:01:19:08:fe:
ec:92:79:1a:5f:ee:a8:9c:93:70:8b:f4:e8:ab:e1:
55:01:aa:f0:ba:08:08:2e:b1:91:04:ee:e7:71:94:
cd:c5:7a:46:3b:67:d0:39:22:d4:57:4b:75:35:34:
3e:ac:81:9f:18:77:5d:12:53:94:8c:98:a3:66:5d:
c8:0e:17:ec:c9:0b:23:48:c7:c9:a0:bb:df:93:a7:
61:03:03:ea:bc:cc:13:cf:9b:32:b2:d3:5d:60:22:
1e:a0:cc:5b:6f:0a:b6:48:66:6a:e6:4c:6b:14:40:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:39:0F:45:1D:E8:8E:D8:85:17:8E:D7:45:D9:BA:F3:81:7D:09:84
X509v3 Authority Key Identifier:
keyid:DC:6B:9A:A9:79:B5:F9:B3:76:CA:32:99:A5:82:A7:5E:38:16:AB:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:cf:7c:b4:97:4e:98:5f:23:2d:f9:fb:84:5b:99:c5:03:ef:
bd:5d:39:72:a4:09:56:a2:dd:d2:c5:27:d2:e4:cf:d2:b3:bc:
44:14:2b:da:a9:b9:ff:53:e2:3a:e1:06:1b:0f:85:3f:d8:ea:
48:2d:23:14:ef:e7:16:a7:7a:35:9b:27:ae:e2:1a:c1:6b:04:
99:26:82:61:b0:da:04:48:c1:7c:d9:13:01:9b:2d:2c:52:2e:
49:ba:9c:63:e3:a0:a4:cd:00:0e:99:b5:b0:5f:3d:32:5c:88:
29:fc:b3:49:7a:1d:20:de:0c:a4:36:bc:a5:52:24:c6:89:17:
1c:76:78:40:50:c6:ef:ef:e6:ae:1c:89:69:d5:a0:e8:53:33:
82:a0:51:55:42:6e:56:eb:3f:a7:03:90:0b:02:3d:41:6c:5b:
b7:21:51:7b:03:a1:df:2b:0b:0f:e0:fd:bf:08:99:fe:d7:11:
0e:f8:6e:65:0a:cf:66:bb:12:10:8f:81:81:b9:37:f4:9a:7a:
c2:49:49:83:e4:56:fa:37:25:3b:a3:ec:61:89:9e:55:cc:da:
e2:7d:ad:3f:68:e1:f6:72:84:4a:13:bd:a3:70:91:77:0e:3f:
ce:bb:59:67:f4:78:69:1e:bc:20:9e:b3:9f:95:3f:e8:1d:a6:
89:24:5d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:25:45 2026 by rpki-client