
Error: rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
File: Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft (raw, json)
Hash identifier: sv5iRfDc2RKqZagg/i3miHSYt9W7MlRuSzQd+x7/JGw=
Subject key identifier: A5:5B:7F:76:9D:08:92:3D:AB:3C:F7:3D:DC:70:99:C4:B4:E1:FF:79
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Certificate issuer: /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial: 0197
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
Manifest number: 018F
Signing time: Wed 23 Sep 2026 05:08:35 +0000
Manifest this update: Wed 23 Sep 2026 05:08:35 +0000
Manifest next update: Fri 25 Sep 2026 05:08:35 +0000
Files and hashes: 1: Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl (hash: 56dSBaSRb+nGZXqV3KymXwiDiDEQ7yfUePx6jm+N9aM=)
2: 611421F4963611F1931026A9CE1D38B0.roa (hash: tWLHDOBkRMEzQ3q95dvL/0lstFSuE+RsrJDK/J7YVe8=)
3: 75FD7FDC965611F1BD8175EACE1D38B0.roa (hash: A++E8QHj4hLBa8riAmj4iXBzww6dIixtvtgIi87wQME=)
4: 997B259C963611F185D10DABCE1D38B0.roa (hash: VUPSKE+i4O/810Cyv4p8XUMEeYicWchejkyI7vEvZBk=)
5: 02C2AD14963611F18EF006A9CE1D38B0.roa (hash: 7yVk5ub6iRzjmfjduXsEWGHprN8WJb/0ehVAu7gjU0c=)
6: CD46F55C965611F1A1D42EEECE1D38B0.roa (hash: ZwoPyYleTm8OIOtZdDUeO9ZjDDm126xieIwJh5NqR2U=)
7: A1D222A8755811F19E5F6DAFCE1D38B0.roa (hash: 8lf/svP1VF+sA26loOVd0lxvdI5wOxWStMGhERk0FVI=)
8: 7A8E9D30755211F1A6F15909CF1D38B0.roa (hash: q6y+hzQYmx0hO6P1zdgO/Rqo1yAI57rkaFbZAachqLo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 05:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Validity
Not Before: Sep 23 05:08:35 2026 GMT
Not After : Sep 25 05:08:35 2026 GMT
Subject: CN=6ab35ed3-a0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:2c:5e:96:cd:ef:92:cb:26:ad:07:0c:40:
fd:42:fd:a9:36:dd:94:89:eb:ca:93:81:19:b4:f3:
99:8f:b0:28:42:42:dd:f0:a3:80:17:6a:ee:4f:dd:
c6:cd:98:3e:9b:cc:b3:f9:cc:c0:df:d3:f2:3a:c2:
f7:f2:7f:f5:f4:e9:38:ce:89:89:01:f5:cb:f4:ba:
34:59:0b:39:8c:1b:68:fa:93:4f:c7:4b:de:51:31:
9e:6f:be:78:b2:64:3b:4a:6f:96:17:9a:67:3d:de:
3e:8f:aa:2f:2d:5e:8f:c1:35:0e:8d:59:c9:3c:df:
c2:ee:ae:fd:74:55:56:7a:eb:c9:67:b2:ac:42:5a:
cf:3e:11:6e:b7:22:8f:41:98:8e:2e:a8:5b:c2:2c:
c9:4e:75:8b:4a:11:26:3e:d8:74:5e:7a:80:8a:e8:
5a:bd:97:68:c4:7f:1b:7a:6c:04:3e:36:75:c8:67:
4b:ad:ae:33:05:89:11:93:e5:35:41:dc:64:2d:31:
20:15:06:a2:dc:aa:dc:82:4c:53:1e:15:78:22:e6:
f4:f0:87:bd:c2:67:8c:73:9b:e9:e3:87:16:5c:c9:
27:11:99:be:dc:ca:56:bc:cd:05:31:78:1e:37:75:
0b:b1:8f:a3:6f:63:b6:20:87:f3:cc:bc:be:58:2d:
f6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5B:7F:76:9D:08:92:3D:AB:3C:F7:3D:DC:70:99:C4:B4:E1:FF:79
X509v3 Authority Key Identifier:
keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:d8:12:1c:4e:e6:3e:20:22:cd:c0:9d:8c:51:17:f8:74:ba:
2e:2a:fc:ad:34:1a:f1:95:7a:8a:36:d2:36:3e:7f:bc:b5:11:
0c:c3:35:37:b1:24:19:bb:ba:98:d1:68:ef:b2:ce:52:86:6e:
09:2c:c2:30:b1:b6:04:22:54:10:82:e2:07:79:df:c7:df:cc:
7a:a7:c2:eb:cd:e3:d7:af:46:5b:8b:de:98:a5:39:b4:d4:79:
a4:05:f9:9a:e9:6e:a8:6d:45:0d:b4:b4:3d:aa:36:3f:d7:68:
78:c8:80:a7:5a:f3:35:2a:14:8d:6d:84:89:11:02:75:e9:c5:
c0:1b:53:1d:f4:24:00:e6:87:bd:26:b7:d3:99:ba:af:8a:ee:
59:a0:bf:4d:08:9c:86:57:8a:30:78:bc:d3:74:b4:4b:51:30:
86:f1:70:15:a1:ee:2f:50:93:3e:88:c3:94:32:34:2c:b4:ce:
06:29:44:9d:d4:2f:b3:58:c4:2d:57:ed:e6:d7:05:dc:3f:a5:
ba:85:e3:8e:e9:57:49:7e:ad:a1:4f:bb:dd:eb:b3:39:94:80:
43:45:5b:aa:18:70:f5:bd:6d:5c:d0:bc:6e:7b:96:92:ba:bf:
79:1d:69:6c:d5:29:78:e9:71:a8:83:c6:8f:ad:60:71:81:4e:
aa:f1:30:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:42:40 2026 by rpki-client