
Error: rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
File: YCmqMiQ3H_80BW6mdrX5npQG208.mft (raw, json)
Hash identifier: 7v9JOWAmzscGLduz13bnzUlJ+kioU5JNtung+fdjL8k=
Subject key identifier: 7B:AF:1B:E6:70:14:1F:41:4E:2A:76:D7:7F:49:90:D8:CB:49:2B:6D
Authority key identifier: 60:29:AA:32:24:37:1F:FF:34:05:6E:A6:76:B5:F9:9E:94:06:DB:4F
Certificate issuer: /CN=F362BDD7AF/serialNumber=6029AA3224371FFF34056EA676B5F99E9406DB4F
Certificate serial: 02DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
Manifest number: 02DD
Signing time: Mon 28 Sep 2026 04:35:45 +0000
Manifest this update: Mon 28 Sep 2026 04:35:44 +0000
Manifest next update: Wed 30 Sep 2026 04:35:44 +0000
Files and hashes: 1: YCmqMiQ3H_80BW6mdrX5npQG208.crl (hash: yUGhZHPb8X6MrwPjJc/l98jzs3z1pX6z+q5BnRkCYfo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.crl
rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362BDD7AF, serialNumber=6029AA3224371FFF34056EA676B5F99E9406DB4F
Validity
Not Before: Sep 28 04:35:44 2026 GMT
Not After : Sep 30 04:35:44 2026 GMT
Subject: CN=6ab9eea1-32e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:f7:3f:04:0f:39:28:1a:ac:af:56:e0:d1:
88:6f:bb:ab:e0:f0:1e:1a:b9:54:83:04:9f:31:57:
b5:70:d3:9c:d5:bb:b9:23:bd:40:af:91:cd:e0:06:
c0:0b:dc:0e:32:f7:c1:72:a8:3a:f1:70:42:e3:95:
66:db:54:c9:0a:1f:3f:7b:7c:90:d7:26:a9:1d:f3:
fe:32:75:33:6a:9d:12:35:65:75:10:bd:d8:f2:47:
67:7c:31:f1:70:00:c5:b3:bd:f1:14:d0:5b:50:bd:
60:89:0c:33:03:37:fa:c5:2b:e8:dd:d6:a3:d6:60:
f5:b5:b3:45:22:cd:21:a4:54:d7:46:64:ef:1c:15:
83:37:e3:fe:87:8c:82:a5:7c:29:31:7b:58:ea:85:
ba:12:c3:25:c7:d2:9d:9b:de:63:c9:5d:20:2a:41:
7f:49:2d:51:b4:b7:bf:24:d8:c2:4f:3e:d1:90:84:
3e:21:70:66:cd:0a:28:53:7a:37:26:e6:7b:df:8d:
5e:c1:01:16:bc:8c:ab:46:fd:8c:29:28:21:9e:35:
37:0f:45:ee:ee:97:42:53:e8:dc:8e:c5:82:1c:89:
83:d2:0e:2d:15:cc:60:70:42:a5:ce:cc:70:a4:a6:
ac:a5:4f:6c:d6:84:4b:f8:19:74:9e:1f:b6:13:5e:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AF:1B:E6:70:14:1F:41:4E:2A:76:D7:7F:49:90:D8:CB:49:2B:6D
X509v3 Authority Key Identifier:
keyid:60:29:AA:32:24:37:1F:FF:34:05:6E:A6:76:B5:F9:9E:94:06:DB:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:53:17:ae:a7:bd:94:60:65:b1:a9:29:3e:d0:a6:a6:59:79:
96:84:c6:a6:6d:a6:cb:e1:71:82:0e:1f:26:d8:a8:20:47:3f:
5a:5d:31:fb:50:31:9a:2e:2a:9d:17:3b:aa:3b:fa:1d:cf:c9:
50:6d:e8:a4:5b:ef:60:cc:2e:6f:b7:a9:4d:63:2b:1c:c7:76:
d6:99:05:f3:40:22:ba:f5:2f:07:5d:2f:93:61:d8:63:86:0c:
b5:8e:61:ab:87:90:ee:59:57:c6:36:18:48:7e:90:5b:b9:b7:
69:63:21:ba:d8:fa:01:c4:79:cf:ff:35:53:56:e5:db:7c:85:
ea:26:85:5f:f4:4f:af:e0:62:ed:e6:5e:ba:3f:9b:22:d7:e4:
b9:ed:e7:ca:7d:29:5e:af:d3:44:49:94:00:4f:48:e5:50:d2:
b4:dd:3d:ca:30:3a:7e:56:79:7c:2d:87:8d:4b:ac:ec:9e:52:
16:d9:54:19:14:5d:62:6e:a3:7b:dc:72:79:f9:59:f8:05:a3:
c5:79:a2:87:7a:89:37:69:58:37:c9:cb:10:40:f1:32:3a:d5:
e9:b2:4d:10:42:a9:a1:7b:9d:80:ef:09:2d:91:8c:3b:d4:f8:
a5:a8:31:66:ec:90:4e:06:1b:ee:b1:05:94:46:0f:25:94:3c:
e7:da:1b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:20:40 2026 by rpki-client