
Error: rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
File: qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft (raw, json)
Hash identifier: jz2grMUnD4TSGtWu/YGt5e3qlODrfNUM+4JtSrfZZ+8=
Subject key identifier: FA:3C:5E:0D:3B:81:E8:B0:6F:30:B6:FB:20:1D:B3:C1:8B:2B:04:7E
Authority key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Certificate issuer: /CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Certificate serial: 088A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
Manifest number: 0879
Signing time: Sat 14 Nov 2026 02:00:29 +0000
Manifest this update: Sat 14 Nov 2026 02:00:28 +0000
Manifest next update: Mon 16 Nov 2026 02:00:28 +0000
Files and hashes: 1: qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl (hash: Zqx0KxUXf5v8IPwq0l6ozJv0UNHby1W0N2lBYIDToLA=)
2: 6E11E8C68B7011F18D00CBBBCE1D38B0.roa (hash: R6ZAuWQ1b65qdYhlJLI34DH8ImhOccUwMkIcZJKfSZ4=)
3: C76433F68B7111F1BB81E8C3CE1D38B0.roa (hash: Jyo6mTt5D+siT/5Sy486p7UlD/qKwUVTTEmDw7nQRpU=)
4: 44E2BFD6BEB611EEB2F13E55775412E6.roa (hash: 6BGl+d3/Qn7Bi9MGN7eS+0tAvnZagMzcLCnJkf/75K0=)
5: 1516EA16764311EB901D143DF8AEA228.roa (hash: NKQ3jb8Jf2A8DHKj6MSRen4+1RRngARTbxS7x9DY4og=)
6: B9DCB9DE8B7011F1A0C8D9BBCE1D38B0.roa (hash: Tkfyz7A/sSnniZvLtR3qk5hB4dmcR1R0uZM1aLmEtpE=)
7: 614715108B7211F1B8A9A6C7CE1D38B0.roa (hash: GCcG6qz6sOs6xxzlm6NT7/+vvW8mXelsZNfCKKxtonA=)
8: 64B3D22A8B7111F183D4E9BFCE1D38B0.roa (hash: 17rQOz1O2eNeJPsxK6qXRaLtzqR4vb82M+67xoEWKq0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Nov 2026 00:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186 (0x88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36493E2AF, serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Validity
Not Before: Nov 14 02:00:28 2026 GMT
Not After : Nov 16 02:00:28 2026 GMT
Subject: CN=6af7c0bd-fa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:7e:27:6d:90:2d:54:cd:76:f5:59:81:70:
9e:d0:47:aa:88:b5:50:41:40:37:3e:14:a4:09:62:
69:ee:0a:1c:6f:21:48:d8:c3:18:94:35:b3:96:33:
7c:f8:f7:ad:c7:34:4c:74:0b:34:a0:4d:d0:1a:15:
0e:24:4e:c4:79:cd:52:8b:96:fa:68:2a:72:5f:28:
80:ed:61:e5:ad:77:9d:a2:bd:66:25:fc:f4:29:df:
0f:5a:9c:f6:17:0b:47:28:86:29:2e:9c:50:af:c2:
1e:35:f4:56:c1:dd:a7:77:8f:a4:62:16:6c:2b:41:
f1:84:c5:a9:03:b5:d3:92:b5:bc:d1:38:27:d8:76:
d7:d5:86:cd:1e:90:84:28:a1:52:2b:73:13:44:b1:
f7:3a:08:6a:42:59:33:97:a7:56:90:25:ba:dd:32:
f6:b9:eb:d5:a6:26:e1:de:ce:6c:0c:5f:70:e5:1f:
1e:61:2e:48:04:13:c2:55:94:9f:fb:23:db:41:53:
8c:a4:d8:c3:83:48:5b:1e:32:16:b3:59:01:c8:29:
90:eb:95:48:70:a5:01:10:a5:b1:05:5b:61:2b:77:
ad:16:e0:06:47:93:86:4f:cf:e6:cd:07:fb:a6:d5:
2f:8b:72:40:2f:85:f3:f1:54:f0:22:9f:72:91:c7:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3C:5E:0D:3B:81:E8:B0:6F:30:B6:FB:20:1D:B3:C1:8B:2B:04:7E
X509v3 Authority Key Identifier:
keyid:A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:31:e0:6e:9e:e9:5e:4e:f8:56:ba:2b:f4:32:c7:7a:f1:69:
d5:fb:de:1f:01:a7:4a:d9:22:91:cb:8b:a4:2e:d5:64:05:eb:
36:f9:4b:a0:92:dd:3e:af:50:09:4e:22:ca:ff:db:92:3c:6c:
01:5e:b6:0b:ef:72:e2:fa:e4:fa:38:11:49:db:5d:62:e7:92:
64:5c:db:81:3f:b4:df:15:b2:14:1f:37:53:98:ae:4a:0d:96:
1c:cf:b7:80:f3:ac:01:f8:85:40:65:94:c5:9c:42:3a:07:81:
15:0f:33:7b:e8:2e:95:ad:4b:42:64:b3:74:b5:a6:82:bd:ce:
63:c1:56:2a:70:ee:e8:93:1f:70:66:cb:c0:87:0a:29:0c:9e:
e7:c6:e1:20:6e:e8:60:fd:9c:49:c5:bc:59:1b:41:26:b0:56:
f4:12:04:ef:47:5b:fd:91:db:82:3b:e2:31:3e:eb:50:35:45:
68:60:b6:0a:42:a0:c2:ad:16:a6:9e:b5:e3:11:71:76:22:52:
6e:c5:47:4a:85:ff:c6:c7:33:de:4e:1d:18:42:a3:95:9c:7a:
38:ce:45:60:ff:c7:92:8b:cb:18:55:f7:2c:7a:e7:d1:64:40:
76:24:62:80:cd:d7:23:83:b5:91:16:1f:ba:73:81:8c:47:60:
c2:e4:00:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:51:43 2026 by rpki-client