
Error: rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
File: JV9qID5NQpmXaROm9i3oxI7sk70.mft (raw, json)
Hash identifier: MWgtu1TvJNoA0rBqLFR+pOz+vGVr5awgyZPXN9gkPgM=
Subject key identifier: 6E:55:4C:2A:82:08:95:08:83:02:34:4E:29:51:FF:94:68:5F:18:84
Authority key identifier: 25:5F:6A:20:3E:4D:42:99:97:69:13:A6:F6:2D:E8:C4:8E:EC:93:BD
Certificate issuer: /CN=F363460FAF/serialNumber=255F6A203E4D4299976913A6F62DE8C48EEC93BD
Certificate serial: 02C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JV9qID5NQpmXaROm9i3oxI7sk70.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
Manifest number: 02C6
Signing time: Sun 27 Sep 2026 04:37:49 +0000
Manifest this update: Sun 27 Sep 2026 04:37:48 +0000
Manifest next update: Tue 29 Sep 2026 04:37:48 +0000
Files and hashes: 1: JV9qID5NQpmXaROm9i3oxI7sk70.crl (hash: ZSUawPCw+ZB/Gnm82b7MZeBMctTrQ3sXenVmlgdHL0Q=)
2: 81D2A93E986211EF8DC64A77762E951A.roa (hash: XCH2tO5kEYMyiAwzUo8LnwXXodXNXur00bVM7AU5ZV0=)
3: 26DC05C4986311EFBE63827B762E951A.roa (hash: 9xkZbyUzhuxbnuEDnds0Ogy4qS4HDRlvSKhOgozHOF4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.crl
rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
rsync://rpki.afrinic.net/repository/afrinic/JV9qID5NQpmXaROm9i3oxI7sk70.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Sep 2026 00:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712 (0x2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363460FAF, serialNumber=255F6A203E4D4299976913A6F62DE8C48EEC93BD
Validity
Not Before: Sep 27 04:37:48 2026 GMT
Not After : Sep 29 04:37:48 2026 GMT
Subject: CN=6ab89d9d-cd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:e0:ff:9f:c0:ac:61:8a:f7:8b:b6:da:be:
52:7b:c1:fe:26:c5:f4:52:44:0d:84:a8:e4:c0:b4:
d9:58:48:8b:e8:48:ed:f2:96:83:65:37:5b:36:b8:
3d:19:ea:fc:68:34:16:9e:07:ee:f8:e5:e7:6b:fc:
46:77:58:7c:42:b4:80:4c:d1:d4:22:d2:20:ab:22:
3e:5f:c6:71:2c:75:30:71:30:58:ee:3b:56:81:48:
d8:a5:03:e5:60:9d:19:47:3e:3d:a3:b4:0e:36:5c:
10:a9:86:1f:85:cf:74:e7:05:5e:35:f8:0e:de:5f:
5c:60:95:c5:3e:39:7c:58:12:52:40:c5:ef:3c:cb:
49:0d:00:3a:a9:e6:65:42:57:e2:05:a4:17:cd:8b:
9e:b8:c2:72:b2:b0:cb:ce:66:bd:2d:a1:c0:17:ea:
44:56:5e:82:31:50:b9:c9:3b:de:b8:aa:98:bb:85:
4b:f4:67:ed:5c:cc:f7:16:ee:2a:8a:3f:f4:17:c6:
7b:30:e8:60:af:14:e6:b1:f1:ac:2a:ab:e3:bb:90:
4c:46:21:10:78:57:fd:1a:2f:5e:5d:9b:13:40:c4:
79:66:a6:3c:8b:49:65:c6:67:81:b3:7a:0b:04:22:
a2:8d:ca:28:a4:9d:52:65:9d:b7:bc:0e:40:72:58:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:55:4C:2A:82:08:95:08:83:02:34:4E:29:51:FF:94:68:5F:18:84
X509v3 Authority Key Identifier:
keyid:25:5F:6A:20:3E:4D:42:99:97:69:13:A6:F6:2D:E8:C4:8E:EC:93:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JV9qID5NQpmXaROm9i3oxI7sk70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:74:6e:f5:ee:21:d0:4f:24:8f:86:f3:99:00:df:7e:aa:46:
f4:76:88:ef:1a:1a:3f:ac:6a:b2:1e:64:ee:2a:28:ad:0c:5e:
2f:59:b9:b2:07:99:2d:aa:26:68:a2:73:6b:19:71:93:e5:92:
ac:18:0f:17:27:da:87:84:c5:68:3c:8c:03:db:92:2b:3c:51:
17:9b:0e:b8:a1:43:36:87:a2:be:d6:0f:87:7a:1d:64:2e:22:
64:92:48:34:f4:c5:2b:2d:ef:c3:17:59:05:01:70:a5:53:6a:
28:87:79:66:2c:a0:e1:e0:e2:28:e9:dd:98:72:3d:08:12:37:
62:98:a4:7d:cd:fa:5f:fb:ba:fd:3e:f2:63:10:85:0c:aa:7b:
22:5f:3e:93:88:15:51:0b:0f:07:24:e9:8a:87:4f:77:3e:36:
b2:29:8c:00:b7:44:40:35:b0:72:09:d5:0c:4b:8f:46:18:02:
d0:bb:98:99:77:7f:1f:c4:c7:cf:96:d5:89:5e:30:44:26:d0:
a0:f2:c3:20:a8:a1:ba:5b:75:04:ac:e5:ea:91:11:8e:bd:43:
bb:3f:41:b3:a1:9f:b1:86:90:3e:07:04:2e:17:f4:f2:e1:f7:
de:2a:9a:28:c3:4c:16:dd:a8:41:c8:57:44:a5:ff:ae:94:ad:
09:3d:c2:ac
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzQ2MEZBRjExMC8GA1UEBRMoMjU1RjZBMjAzRTRENDI5OTk3NjkxM0E2RjYyREU4
QzQ4RUVDOTNCRDAeFw0yNjA5MjcwNDM3NDhaFw0yNjA5MjkwNDM3NDhaMBgxFjAU
BgNVBAMTDTZhYjg5ZDlkLWNkNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDACeD/n8CsYYr3i7bavlJ7wf4mxfRSRA2EqOTAtNlYSIvoSO3yloNlN1s2
uD0Z6vxoNBaeB+745edr/EZ3WHxCtIBM0dQi0iCrIj5fxnEsdTBxMFjuO1aBSNil
A+VgnRlHPj2jtA42XBCphh+Fz3TnBV41+A7eX1xglcU+OXxYElJAxe88y0kNADqp
5mVCV+IFpBfNi564wnKysMvOZr0tocAX6kRWXoIxULnJO964qpi7hUv0Z+1czPcW
7iqKP/QXxnsw6GCvFOax8awqq+O7kExGIRB4V/0aL15dmxNAxHlmpjyLSWXGZ4Gz
egsEIqKNyiiknVJlnbe8DkByWCWZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUblVM
KoIIlQiDAjROKVH/lGhfGIQwHwYDVR0jBBgwFoAUJV9qID5NQpmXaROm9i3oxI7s
k70wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM0NjBGLzA5QjVCN0IyOTg2MTExRUZCQzNBN0Y2RTc2MkU5NTFBL0pWOXFJ
RDVOUXBtWGFST205aTNveEk3c2s3MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pWOXFJRDVOUXBtWGFST205aTNveEk3c2s3MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzQ2MEYvMDlCNUI3QjI5ODYxMTFFRkJDM0E3RjZFNzYy
RTk1MUEvSlY5cUlENU5RcG1YYVJPbTlpM294STdzazcwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCldG717iHQTySPhvOZAN9+qkb0dojv
Gho/rGqyHmTuKiitDF4vWbmyB5ktqiZoonNrGXGT5ZKsGA8XJ9qHhMVoPIwD25Ir
PFEXmw64oUM2h6K+1g+Heh1kLiJkkkg09MUrLe/DF1kFAXClU2ooh3lmLKDh4OIo
6d2Ycj0IEjdimKR9zfpf+7r9PvJjEIUMqnsiXz6TiBVRCw8HJOmKh093PjayKYwA
t0RANbByCdUMS49GGALQu5iZd38fxMfPltWJXjBEJtCg8sMgqKG6W3UErOXqkRGO
vUO7P0GzoZ+xhpA+BwQuF/Ty4ffeKpoow0wW3ahByFdEpf+ulK0JPcKs
-----END CERTIFICATE-----
Generated at Mon Sep 28 02:56:24 2026 by rpki-client