
Error: rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
File: An4aRGPGhfvWOGP507I7rC2TsWg.mft (raw, json)
Hash identifier: FoJtmoKpz8/Ec6iwZEXiGrzrF2OcRKMxLKjzDPKw07o=
Subject key identifier: 08:46:D6:07:7C:70:38:B7:10:55:96:0C:84:73:AC:B8:CA:D2:E9:FD
Authority key identifier: 02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68
Certificate issuer: /CN=F36252A7AF/serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
Certificate serial: 0A41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
Manifest number: 0A3A
Signing time: Fri 25 Sep 2026 01:36:29 +0000
Manifest this update: Fri 25 Sep 2026 01:36:28 +0000
Manifest next update: Sun 27 Sep 2026 01:36:28 +0000
Files and hashes: 1: An4aRGPGhfvWOGP507I7rC2TsWg.crl (hash: l3Cv2VugBeqyH+g0fx6I+SX6xLpw4CYz4wYWTWsg28U=)
2: B2E0450EE3A911E99D048322F8AEA228.roa (hash: 9hAcLh1dvKVs2136J7HCIPg/BmbZ3SUhxACWArab3Io=)
3: E9F7B7D4E3A911E9BF86B122F8AEA228.roa (hash: 9COidhiFaVCAPV0UHswnXt+QzIn+TW+J/QQrjMlznyw=)
4: 59BD768489A311F1BC93DDBDCE1D38B0.roa (hash: PnOZM4fziwXgFuIEH1/8SuyMNltqLTKgfJ/kcx4KdpE=)
5: CE979090E3A911E982D79922F8AEA228.roa (hash: ZUuGDNl5OtIqVt3JPAYRM2b5xFa0dAXmMX0QV9sXPf0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 01:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36252A7AF, serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
Validity
Not Before: Sep 25 01:36:28 2026 GMT
Not After : Sep 27 01:36:28 2026 GMT
Subject: CN=6ab5d01c-f8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:38:2b:f0:2e:d8:87:08:c2:73:6b:c5:c1:
57:eb:c4:45:12:21:d7:89:f3:73:04:fe:d5:2b:7a:
80:fb:0b:fd:3a:73:c4:1e:9a:76:59:15:d2:1f:f3:
26:db:82:ae:98:d7:6d:bf:a4:7f:d0:54:63:aa:5b:
d3:55:a1:1a:a5:9f:06:35:cf:03:af:34:7d:e8:d3:
18:d0:43:1d:d2:2c:11:d5:49:c6:a4:0b:4a:38:b7:
15:ff:24:d4:dc:78:dd:0b:ff:3f:16:09:f6:6e:6f:
02:29:46:c2:e2:15:6b:cf:63:9f:15:89:56:26:ba:
0d:e2:5f:e2:1c:be:0f:8a:80:ee:bd:16:17:06:79:
bc:63:77:f6:01:fe:11:97:4f:44:d9:de:5e:02:69:
00:da:78:1f:f7:40:84:bf:2b:19:bb:9e:a8:d1:92:
e7:25:e5:ad:38:e8:40:f7:36:6b:92:2a:78:5f:1c:
06:26:52:a3:fd:9a:1b:f5:8e:32:25:cc:7c:53:00:
d7:c0:0b:85:2c:7c:da:21:51:7b:c0:ae:19:07:8b:
bd:6a:db:45:62:ce:68:19:1d:b4:59:48:2d:89:5f:
0c:64:bd:d6:66:8b:dc:a8:2b:99:15:70:4b:47:a0:
80:2e:dc:fc:ee:40:52:9e:42:c1:33:8e:69:89:bc:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:46:D6:07:7C:70:38:B7:10:55:96:0C:84:73:AC:B8:CA:D2:E9:FD
X509v3 Authority Key Identifier:
keyid:02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:03:6c:9b:35:74:28:ef:ee:13:c6:30:cc:73:0f:03:5e:24:
a5:23:48:49:72:7f:7c:f5:84:c3:59:0b:09:96:fb:fd:fa:0f:
c9:b4:2b:10:cf:19:24:60:60:7c:4f:50:30:89:24:e6:98:58:
9d:04:30:f3:d6:4b:21:3d:16:c5:80:b0:03:67:ec:3a:a3:6d:
7f:51:e7:a2:71:72:13:19:a7:49:56:7a:f2:f2:1e:4c:3f:20:
f9:ac:64:34:62:be:9c:be:63:80:96:54:43:13:d0:cc:50:45:
f6:44:03:61:f5:12:8b:42:f1:a7:9e:e3:86:cb:7c:63:7c:52:
d4:93:09:10:e8:f0:b0:4b:ca:e1:76:c7:d5:24:cf:05:fb:d4:
9c:49:60:c1:56:ed:20:f9:68:9e:36:be:51:a6:dd:57:94:7b:
6a:8c:1d:d7:a9:13:b4:00:4f:41:52:22:36:d9:e5:49:44:a3:
95:c0:08:cd:e2:2a:85:5d:fd:96:af:88:5d:79:f4:57:91:63:
2c:42:84:ac:15:1b:06:77:c5:6a:4e:db:74:59:26:4f:dc:bd:
54:9c:5b:4d:c3:69:ec:68:a5:53:0e:82:b3:96:80:f5:7d:4d:
2b:f8:5c:af:18:5f:55:76:4b:ae:23:d0:9f:46:43:87:7a:16:
26:30:f0:b4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjUyQTdBRjExMC8GA1UEBRMoMDI3RTFBNDQ2M0M2ODVGQkQ2Mzg2M0Y5RDNCMjNC
QUMyRDkzQjE2ODAeFw0yNjA5MjUwMTM2MjhaFw0yNjA5MjcwMTM2MjhaMBgxFjAU
BgNVBAMTDTZhYjVkMDFjLWY4YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+qDgr8C7YhwjCc2vFwVfrxEUSIdeJ83ME/tUreoD7C/06c8QemnZZFdIf
8ybbgq6Y122/pH/QVGOqW9NVoRqlnwY1zwOvNH3o0xjQQx3SLBHVScakC0o4txX/
JNTceN0L/z8WCfZubwIpRsLiFWvPY58ViVYmug3iX+Icvg+KgO69FhcGebxjd/YB
/hGXT0TZ3l4CaQDaeB/3QIS/Kxm7nqjRkucl5a046ED3NmuSKnhfHAYmUqP9mhv1
jjIlzHxTANfAC4UsfNohUXvArhkHi71q20VizmgZHbRZSC2JXwxkvdZmi9yoK5kV
cEtHoIAu3PzuQFKeQsEzjmmJvKYBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCEbW
B3xwOLcQVZYMhHOsuMrS6f0wHwYDVR0jBBgwFoAUAn4aRGPGhfvWOGP507I7rC2T
sWgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI1MkE3Lzg5NDk3QTYwRTM4MzExRTk5RTU1RjU4NUY4QUVBMjI4L0FuNGFS
R1BHaGZ2V09HUDUwN0k3ckMyVHNXZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FuNGFSR1BHaGZ2V09HUDUwN0k3ckMyVHNXZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjUyQTcvODk0OTdBNjBFMzgzMTFFOTlFNTVGNTg1RjhB
RUEyMjgvQW40YVJHUEdoZnZXT0dQNTA3STdyQzJUc1dnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNA2ybNXQo7+4TxjDMcw8DXiSlI0hJ
cn989YTDWQsJlvv9+g/JtCsQzxkkYGB8T1AwiSTmmFidBDDz1kshPRbFgLADZ+w6
o21/UeeicXITGadJVnry8h5MPyD5rGQ0Yr6cvmOAllRDE9DMUEX2RANh9RKLQvGn
nuOGy3xjfFLUkwkQ6PCwS8rhdsfVJM8F+9ScSWDBVu0g+WieNr5Rpt1XlHtqjB3X
qRO0AE9BUiI22eVJRKOVwAjN4iqFXf2Wr4hdefRXkWMsQoSsFRsGd8VqTtt0WSZP
3L1UnFtNw2nsaKVTDoKzloD1fU0r+FyvGF9VdkuuI9CfRkOHehYmMPC0
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:11:36 2026 by rpki-client