
Error: rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
File: KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft (raw, json)
Hash identifier: v6msvWQkuTfvWRE/RdgvIu28wZLGqTj7S/nP7ov5418=
Subject key identifier: 1D:89:D5:F7:E9:50:BA:67:69:AD:51:25:B7:8B:95:E7:95:63:6D:50
Authority key identifier: 29:1E:8D:95:8C:16:21:20:44:38:73:BE:45:CA:7D:A3:85:DE:A2:DA
Certificate issuer: /CN=F36389A7AF/serialNumber=291E8D958C162120443873BE45CA7DA385DEA2DA
Certificate serial: 9D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
Manifest number: 9B
Signing time: Tue 22 Sep 2026 05:35:13 +0000
Manifest this update: Tue 22 Sep 2026 05:35:12 +0000
Manifest next update: Thu 24 Sep 2026 05:35:12 +0000
Files and hashes: 1: KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl (hash: DV5A7eqhY8szNCAm+ejC01ljb4x6BxJWekqXc038lFE=)
2: 7E30C2D43F0A11F19414901BCF1D38B0.roa (hash: a3fLxBrz8eR53/R7V1Vq4Dtsvla7z1WL/GBJqhWYWag=)
3: CCFE35183F0A11F181E5E91BCF1D38B0.roa (hash: E47585gvu1JN7Cv2RL9H7/HF9eVQoG0TjloqbMPCF0I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl
rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 05:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36389A7AF, serialNumber=291E8D958C162120443873BE45CA7DA385DEA2DA
Validity
Not Before: Sep 22 05:35:12 2026 GMT
Not After : Sep 24 05:35:12 2026 GMT
Subject: CN=6ab21391-bd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:1b:f9:af:10:97:0c:89:e5:49:61:23:9a:
1f:03:1b:a5:3f:28:4a:f5:06:6c:67:b9:a0:9c:7a:
df:28:4b:c7:e9:ba:9c:5e:f6:45:15:75:92:01:09:
ad:64:53:78:91:51:25:fb:c1:47:80:c6:cb:0a:d8:
eb:f0:52:b1:71:cb:1f:a7:f2:7e:2b:62:05:16:6e:
1b:84:5a:e0:94:de:47:31:82:27:ce:b3:36:5f:1a:
d1:ca:26:11:53:b2:05:c6:d4:6f:6a:c8:2a:bb:4a:
ed:45:99:10:e1:bd:27:7a:d6:43:ca:6c:b3:60:7b:
98:54:35:ac:c4:ba:a4:04:b6:68:2b:e1:da:0b:75:
67:c1:34:1f:7d:4c:2a:37:f1:3e:da:dd:b9:cd:21:
c8:da:c3:51:05:f1:c0:0d:09:af:4d:eb:ef:86:05:
6d:58:ce:69:71:e4:98:58:3f:61:d9:a4:28:b1:04:
c7:e3:6f:b3:6a:8f:f8:d8:c9:a8:1f:a3:2a:c7:d1:
ef:e5:1d:5a:61:a2:cf:41:a8:f3:2f:a8:13:4c:98:
9d:2d:a1:d9:32:36:99:aa:8b:ee:13:b8:d1:be:a2:
01:d4:98:17:a6:1e:6c:e7:c7:d9:72:77:37:99:1d:
eb:33:16:12:c0:68:55:06:5e:73:ca:f0:7f:70:3f:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:89:D5:F7:E9:50:BA:67:69:AD:51:25:B7:8B:95:E7:95:63:6D:50
X509v3 Authority Key Identifier:
keyid:29:1E:8D:95:8C:16:21:20:44:38:73:BE:45:CA:7D:A3:85:DE:A2:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:f8:b2:3a:16:fb:cf:f3:70:2a:32:fc:9e:ba:38:0b:6b:50:
32:b1:5d:63:72:6f:02:f0:2e:25:96:bd:1b:6b:0b:94:72:0f:
33:70:b3:7a:9e:0b:8f:2a:8a:77:53:51:2f:97:fc:d9:95:ea:
52:96:dd:b8:38:74:6e:ed:ff:8c:2e:a3:4e:d0:dc:3d:96:d6:
4f:68:a0:13:32:3e:d3:4d:87:20:95:63:1e:a0:4a:88:5e:f6:
67:3e:5d:32:3f:3e:6f:e1:de:2a:43:35:47:0d:d2:c3:32:a0:
67:c0:16:82:35:38:c5:d9:62:75:3f:3d:bc:6b:28:0e:b1:ab:
b3:4d:f3:01:17:eb:71:07:f8:e4:a9:ff:b1:26:06:28:37:27:
1a:66:7a:85:db:3a:7b:3b:97:11:81:97:fa:49:ec:f4:5f:1a:
07:c3:76:1a:e4:d1:70:c4:cd:ca:6b:87:9e:29:90:3e:51:c6:
2e:1b:38:68:f5:3a:5b:b2:c4:2b:3b:1f:63:f3:ce:a4:ef:b7:
53:fe:28:bb:e4:5b:07:3c:2c:ef:1d:a9:b0:2d:2c:87:07:87:
b4:2f:ae:65:b5:8e:c3:ca:05:9e:ea:c4:c3:21:7f:1d:87:64:
2d:41:24:c4:09:84:eb:58:5e:25:6f:b0:2c:f5:f4:46:87:3b:
a6:f6:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:35:22 2026 by rpki-client