
Error: rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
File: KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft (raw, json)
Hash identifier: w9gWWJisFbEDPaCUX3aXEvp0+JP9E/inB/zqa7Ew9nc=
Subject key identifier: 0A:8D:39:47:13:96:BB:19:18:76:E5:97:04:09:10:E0:55:4D:BC:62
Authority key identifier: 29:1E:8D:95:8C:16:21:20:44:38:73:BE:45:CA:7D:A3:85:DE:A2:DA
Certificate issuer: /CN=F36389A7AF/serialNumber=291E8D958C162120443873BE45CA7DA385DEA2DA
Certificate serial: D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
Manifest number: D0
Signing time: Sat 14 Nov 2026 05:34:15 +0000
Manifest this update: Sat 14 Nov 2026 05:34:14 +0000
Manifest next update: Mon 16 Nov 2026 05:34:14 +0000
Files and hashes: 1: KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl (hash: psFYyuAxnL4SS3Br6qeew8HeQiGz0cuiPnFHs+OMPw8=)
2: 7E30C2D43F0A11F19414901BCF1D38B0.roa (hash: a3fLxBrz8eR53/R7V1Vq4Dtsvla7z1WL/GBJqhWYWag=)
3: CCFE35183F0A11F181E5E91BCF1D38B0.roa (hash: E47585gvu1JN7Cv2RL9H7/HF9eVQoG0TjloqbMPCF0I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl
rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Nov 2026 00:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36389A7AF, serialNumber=291E8D958C162120443873BE45CA7DA385DEA2DA
Validity
Not Before: Nov 14 05:34:14 2026 GMT
Not After : Nov 16 05:34:14 2026 GMT
Subject: CN=6af7f2d6-3797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:a7:26:e2:3b:b1:3f:45:e4:77:f3:22:43:
b1:27:b2:a5:a0:80:f1:96:0a:bf:ce:45:26:b7:7f:
d5:36:cf:08:5f:d1:cd:eb:e9:3b:5a:32:60:10:59:
8e:85:95:8a:5e:ad:5f:31:e1:1e:04:28:e0:c7:02:
fe:81:4c:8e:9c:46:5a:2f:a3:54:c6:55:5a:de:25:
14:46:a5:10:95:e7:e9:91:59:e1:f8:ba:06:d6:0f:
60:14:fb:aa:36:af:76:44:2d:f4:c5:59:4e:e2:93:
77:f8:b8:a7:8e:db:4a:54:73:72:42:73:66:7d:af:
ff:c0:39:92:e9:51:f6:8b:a3:d6:3a:6e:5b:be:f4:
fd:0b:15:99:a6:89:7d:aa:3d:5a:ec:d6:15:6c:55:
a6:a6:da:16:48:6d:5b:bd:25:f4:de:4b:5f:f2:89:
c0:b3:af:9a:28:57:61:67:67:51:e6:b8:68:07:fe:
bd:1d:76:75:a1:4c:8d:72:72:26:f7:0c:b8:bd:de:
82:a1:5e:02:2b:39:2a:9e:2d:1a:2f:93:bd:2c:3b:
83:d3:e3:31:cc:c2:17:08:57:5e:da:71:ef:7b:7a:
52:f4:cf:7f:e0:00:17:64:b3:21:43:51:89:cd:e0:
9f:cb:8f:4c:f2:ce:38:f9:a2:f1:d5:17:dc:21:6b:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8D:39:47:13:96:BB:19:18:76:E5:97:04:09:10:E0:55:4D:BC:62
X509v3 Authority Key Identifier:
keyid:29:1E:8D:95:8C:16:21:20:44:38:73:BE:45:CA:7D:A3:85:DE:A2:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fc:7f:34:e6:20:3f:2f:0f:c1:71:4c:9b:2b:e1:9b:61:77:
39:20:e0:67:70:95:a2:63:b6:63:ef:58:71:84:6e:be:a5:5e:
34:b1:c7:a5:1f:c2:af:c4:f5:36:e2:d8:f7:57:22:a1:ec:63:
ad:32:aa:2f:94:23:ae:cd:c4:50:c8:95:86:52:19:9c:2a:77:
fa:03:67:86:6f:7e:c9:f4:e6:97:4e:8c:7b:36:09:c3:85:89:
b6:b4:b4:c6:dd:7f:9b:e7:2c:de:d9:32:a8:46:43:ed:bb:fa:
1b:17:5c:9a:92:46:b8:da:72:e2:e6:fe:af:94:42:13:26:56:
2f:86:a5:5c:5d:2f:14:27:f2:f2:f1:66:cc:9f:b4:34:54:f2:
13:e6:35:74:9c:a1:e7:08:ba:91:8e:41:21:67:a7:8d:02:dc:
15:cc:b6:92:42:bf:74:19:e5:50:f2:c5:b2:c7:dc:ac:4b:88:
50:dd:71:51:e1:e2:3d:9c:cf:22:d0:6d:bf:d7:27:3b:4e:83:
ba:89:e8:0a:b1:8b:6b:35:1e:03:31:0a:f9:3c:15:ef:53:e3:
ed:ac:2c:20:f5:e1:6c:2b:cd:15:7d:85:a0:b1:ab:ab:6a:ee:
a8:f3:a8:4d:2c:95:a0:89:b2:02:31:8a:cb:6e:ae:eb:e6:09:
7e:f8:fc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:45:45 2026 by rpki-client