
Error: rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
File: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft (raw, json)
Hash identifier: zPlXNveSi/p65WTrB4+zNsLPNy8XfkwK78SyAV3ghOA=
Subject key identifier: 18:B4:FB:33:83:A8:4F:CC:B6:6C:52:CA:1F:EF:13:62:68:3F:66:33
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Certificate issuer: /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial: 0611
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
Manifest number: 0603
Signing time: Thu 24 Sep 2026 03:00:21 +0000
Manifest this update: Thu 24 Sep 2026 03:00:21 +0000
Manifest next update: Sat 26 Sep 2026 03:00:21 +0000
Files and hashes: 1: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl (hash: 61kxpISINp0sXu0L+Fo9v7F4tXGgCglkfJOYrwcMTjM=)
2: E930883CF5D411F08C13D08DDAE4EC9C.roa (hash: YuF0ZPXUrP/FErIbO1oG0qOrgfIUEuuBoE3/Li8gUZQ=)
3: 59AD6094F5D511F09117C492DAE4EC9C.roa (hash: tLC9mn7iIAWuyL5bTuMUM+l8+nADm3agRNyvn61Vsk4=)
4: D747D6E2F5D511F0B2621493DAE4EC9C.roa (hash: 4ZH2ONvWHUC5OJAskoe/2/7FyCm6fCYTywg5B4ILlVo=)
5: 548EDFBAD41611F09F8A6C9FDAE4EC9C.roa (hash: k8FRmBKTxWl53FchMRaZBeBDbnAPcS6cvBX3aUVupmA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 00:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1553 (0x611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Validity
Not Before: Sep 24 03:00:21 2026 GMT
Not After : Sep 26 03:00:21 2026 GMT
Subject: CN=6ab49245-a2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:3d:1e:45:82:91:eb:72:32:d1:1c:8b:d0:
18:b0:00:a2:a5:b4:20:e9:45:ba:6b:b1:3a:1c:55:
a8:ad:e3:2d:cd:b5:96:3a:e8:b8:a5:de:3d:9f:b1:
c3:b8:a6:af:51:e4:a6:5a:6d:46:06:8a:46:ad:24:
6d:a3:a0:25:6b:be:14:c9:77:1b:af:d9:68:63:64:
a0:b0:02:13:c7:17:90:f3:00:b0:fe:c3:53:a5:36:
5a:d0:33:22:75:68:c9:5b:e1:3c:7c:19:82:3a:9f:
c2:10:38:4c:43:65:51:b4:44:be:80:c2:e1:64:62:
fd:7b:8b:f8:72:86:a2:ba:0c:65:a2:df:b4:0c:5b:
70:6a:4b:bb:9f:d8:90:99:ff:8d:0f:f1:ef:86:a8:
3e:65:ba:42:a0:b7:9f:5f:ce:b2:a7:af:59:8e:1e:
9a:c5:00:6a:04:96:00:a3:b1:34:7a:6a:f2:44:68:
c5:89:e6:c8:d0:02:05:5b:26:65:ba:52:bc:51:f5:
7f:9e:81:85:98:be:d4:0b:4e:53:61:20:ae:62:c4:
f3:8d:f8:3f:d9:2d:eb:0f:7a:6e:eb:cd:d4:d5:77:
88:11:ba:1f:93:db:0c:18:bb:6e:c7:e6:39:50:ec:
e2:4d:7c:ab:94:51:93:24:3c:cb:20:02:c2:77:d0:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B4:FB:33:83:A8:4F:CC:B6:6C:52:CA:1F:EF:13:62:68:3F:66:33
X509v3 Authority Key Identifier:
keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a0:d3:ce:6b:6d:83:b7:12:13:c2:99:69:f9:e6:ed:bf:21:
c9:c1:3c:c2:2b:31:8c:da:eb:eb:1c:11:23:7d:6e:b3:8e:80:
e6:c3:d7:23:d0:37:6c:23:29:8b:11:51:bd:e1:07:7f:e3:d5:
40:59:c1:f5:06:f2:c5:26:62:ad:28:5b:34:f0:e2:c7:2e:85:
6f:8e:c0:6c:6d:5c:0b:43:da:fe:bb:65:ed:b7:ba:21:96:a4:
0a:9d:4f:dc:3d:d0:9a:9d:43:1c:70:3c:92:68:ce:77:5c:e1:
dd:32:00:a4:81:46:42:f7:98:8e:e4:7b:f5:cc:2f:70:a2:07:
9c:ce:31:e0:b9:bf:63:f3:08:74:9d:29:b2:e3:3d:d7:d2:4b:
3b:70:a9:fc:29:1a:b1:52:71:c1:a7:86:cb:c4:43:15:92:63:
ca:d0:75:f8:fd:e2:a1:75:cf:a8:b9:13:89:1e:7a:31:84:95:
74:d5:e9:b6:98:9d:1e:9d:94:c4:44:74:dd:30:f0:eb:be:85:
57:67:88:78:ff:7b:f2:98:2e:92:2c:3c:69:fe:5c:28:f3:fc:
79:e1:fe:8a:be:63:3e:6e:7a:60:d8:e4:32:88:21:dc:88:ab:
f2:3b:e8:a7:95:8e:11:14:00:f2:31:c9:d0:71:b6:55:d1:b7:
47:2a:72:86
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU3MjFBRjExMC8GA1UEBRMoODdGM0FEQzNBNTBBNzc3NjM4MzZBRThFMzdGNUQ5
Mzg2OTU3MTFDQTAeFw0yNjA5MjQwMzAwMjFaFw0yNjA5MjYwMzAwMjFaMBgxFjAU
BgNVBAMTDTZhYjQ5MjQ1LWEyYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFpT0eRYKR63Iy0RyL0BiwAKKltCDpRbprsTocVait4y3NtZY66Lil3j2f
scO4pq9R5KZabUYGikatJG2joCVrvhTJdxuv2WhjZKCwAhPHF5DzALD+w1OlNlrQ
MyJ1aMlb4Tx8GYI6n8IQOExDZVG0RL6AwuFkYv17i/hyhqK6DGWi37QMW3BqS7uf
2JCZ/40P8e+GqD5lukKgt59fzrKnr1mOHprFAGoElgCjsTR6avJEaMWJ5sjQAgVb
JmW6UrxR9X+egYWYvtQLTlNhIK5ixPON+D/ZLesPem7rzdTVd4gRuh+T2wwYu27H
5jlQ7OJNfKuUUZMkPMsgAsJ30Ct3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGLT7
M4OoT8y2bFLKH+8TYmg/ZjMwHwYDVR0jBBgwFoAUh/Otw6UKd3Y4Nq6ON/XZOGlX
EcowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NzIxLzREODU3OEUwMzdGRDExRURCOEEyQURGOUYxMjIyNDY4L2hfT3R3
NlVLZDNZNE5xNk9OX1haT0dsWEVjby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hfT3R3NlVLZDNZNE5xNk9OX1haT0dsWEVjby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDU3MjEvNEQ4NTc4RTAzN0ZEMTFFREI4QTJBREY5RjEy
MjI0NjgvaF9PdHc2VUtkM1k0TnE2T05fWFpPR2xYRWNvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANoNPOa22DtxITwplp+ebtvyHJwTzC
KzGM2uvrHBEjfW6zjoDmw9cj0DdsIymLEVG94Qd/49VAWcH1BvLFJmKtKFs08OLH
LoVvjsBsbVwLQ9r+u2Xtt7ohlqQKnU/cPdCanUMccDySaM53XOHdMgCkgUZC95iO
5Hv1zC9wogeczjHgub9j8wh0nSmy4z3X0ks7cKn8KRqxUnHBp4bLxEMVkmPK0HX4
/eKhdc+ouROJHnoxhJV01em2mJ0enZTERHTdMPDrvoVXZ4h4/3vymC6SLDxp/lwo
8/x54f6KvmM+bnpg2OQyiCHciKvyO+inlY4RFADyMcnQcbZV0bdHKnKG
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:32:08 2026 by rpki-client