
Error: rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
File: qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft (raw, json)
Hash identifier: 2JfZXpoKm/lb6znc3jHY0hkTthMCVTzzKMslohOYF/8=
Subject key identifier: CE:AD:56:65:15:62:88:36:2D:BE:2B:A4:4A:0A:21:C4:BA:66:D3:2A
Authority key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Certificate issuer: /CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Certificate serial: 0858
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
Manifest number: 0847
Signing time: Fri 25 Sep 2026 02:00:44 +0000
Manifest this update: Fri 25 Sep 2026 02:00:43 +0000
Manifest next update: Sun 27 Sep 2026 02:00:43 +0000
Files and hashes: 1: qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl (hash: Nvspd9ZzwMUGoujdM3twfDAjHJ8UHPtZiLmIrT6AQxU=)
2: 6E11E8C68B7011F18D00CBBBCE1D38B0.roa (hash: R6ZAuWQ1b65qdYhlJLI34DH8ImhOccUwMkIcZJKfSZ4=)
3: C76433F68B7111F1BB81E8C3CE1D38B0.roa (hash: Jyo6mTt5D+siT/5Sy486p7UlD/qKwUVTTEmDw7nQRpU=)
4: 44E2BFD6BEB611EEB2F13E55775412E6.roa (hash: 6BGl+d3/Qn7Bi9MGN7eS+0tAvnZagMzcLCnJkf/75K0=)
5: 1516EA16764311EB901D143DF8AEA228.roa (hash: NKQ3jb8Jf2A8DHKj6MSRen4+1RRngARTbxS7x9DY4og=)
6: B9DCB9DE8B7011F1A0C8D9BBCE1D38B0.roa (hash: Tkfyz7A/sSnniZvLtR3qk5hB4dmcR1R0uZM1aLmEtpE=)
7: 614715108B7211F1B8A9A6C7CE1D38B0.roa (hash: GCcG6qz6sOs6xxzlm6NT7/+vvW8mXelsZNfCKKxtonA=)
8: 64B3D22A8B7111F183D4E9BFCE1D38B0.roa (hash: 17rQOz1O2eNeJPsxK6qXRaLtzqR4vb82M+67xoEWKq0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136 (0x858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36493E2AF, serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Validity
Not Before: Sep 25 02:00:43 2026 GMT
Not After : Sep 27 02:00:43 2026 GMT
Subject: CN=6ab5d5cc-39cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:62:8b:5a:c7:56:bc:48:ba:a5:12:85:3c:
5f:fe:25:4f:36:79:58:e9:fa:3e:21:cd:64:2b:ee:
04:59:84:c6:e8:49:8a:f6:bc:f4:d2:6d:26:7d:17:
7d:70:18:15:e8:40:13:57:c4:e9:0a:a5:7e:5b:46:
5e:17:88:18:0a:fb:1e:2e:b3:6b:5a:f3:85:b4:ef:
2f:9f:69:e6:56:5e:60:4e:60:e1:89:4f:70:9e:3f:
b4:5e:8f:c9:b7:51:e5:31:3b:54:54:62:68:43:f8:
a8:9d:fd:60:21:87:cf:35:3a:3e:89:2a:00:fd:31:
d6:80:d7:21:14:31:08:49:64:2a:8e:67:b0:cf:56:
43:c4:8d:b9:e8:73:2e:ef:d9:e3:74:f2:52:99:04:
33:ce:55:0d:fa:4f:a4:d4:64:d6:31:49:10:6d:d4:
28:41:26:15:5f:0a:b6:ba:97:60:4b:95:0b:cc:5d:
93:95:d1:8a:dd:fe:7e:20:26:33:cb:28:5b:53:63:
20:6a:2a:82:2a:d1:de:13:43:d9:04:5a:34:d1:36:
3a:5d:df:f8:c5:29:9d:ee:a3:63:1c:27:af:91:58:
12:ba:97:e2:d0:b5:d9:e4:aa:dc:5f:60:81:9a:ec:
98:c9:44:b4:d5:79:a9:45:be:21:ca:c0:32:c9:f2:
6a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AD:56:65:15:62:88:36:2D:BE:2B:A4:4A:0A:21:C4:BA:66:D3:2A
X509v3 Authority Key Identifier:
keyid:A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ab:9b:7a:2e:e4:73:df:36:65:33:7e:b3:c8:9a:f2:50:20:
d0:8c:fa:d4:63:2d:29:8b:33:e2:9f:ba:77:6c:51:14:02:9c:
a1:f9:e6:02:20:03:0d:80:38:ca:1f:e7:bd:3f:2b:c4:49:5f:
d6:1d:66:7d:2d:5f:62:f3:e6:8f:8a:3e:b4:e4:27:43:e5:21:
e6:a7:de:0f:4a:de:a3:28:38:86:b5:9e:87:73:78:c7:cf:b3:
f2:d7:a2:59:cf:28:23:16:2a:90:5b:ea:05:dd:50:3e:92:76:
f0:36:57:09:9d:9d:5e:b0:89:c8:17:8e:e5:65:ad:b7:98:53:
a8:f3:bd:55:96:59:e7:57:be:d0:be:b7:30:e8:0a:58:40:21:
2e:81:52:37:d1:d7:47:9e:e8:fd:52:1f:ed:bd:e6:8b:b2:4d:
5a:fb:ec:bf:05:68:c3:e2:7c:9e:0d:48:b4:7a:ab:a4:02:75:
a8:4f:56:96:ea:04:9d:63:2d:18:23:6c:61:d6:fc:0c:55:b5:
af:11:11:65:5e:2e:ab:ed:47:05:85:d7:bf:97:d0:08:7f:3d:
19:6b:61:ab:09:1f:ba:61:39:11:8d:a8:5c:af:28:20:ad:df:
c4:6a:94:20:18:0c:14:95:97:15:82:ad:c7:79:ca:1d:a5:d9:
8e:a6:53:4f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDkzRTJBRjExMC8GA1UEBRMoQThBMUFGMDJGOTZDMUJBOTJEOTNBNTIyQ0FCRTlF
RDhFNTI5NTE1MzAeFw0yNjA5MjUwMjAwNDNaFw0yNjA5MjcwMjAwNDNaMBgxFjAU
BgNVBAMTDTZhYjVkNWNjLTM5Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTGGKLWsdWvEi6pRKFPF/+JU82eVjp+j4hzWQr7gRZhMboSYr2vPTSbSZ9
F31wGBXoQBNXxOkKpX5bRl4XiBgK+x4us2ta84W07y+faeZWXmBOYOGJT3CeP7Re
j8m3UeUxO1RUYmhD+Kid/WAhh881Oj6JKgD9MdaA1yEUMQhJZCqOZ7DPVkPEjbno
cy7v2eN08lKZBDPOVQ36T6TUZNYxSRBt1ChBJhVfCra6l2BLlQvMXZOV0Yrd/n4g
JjPLKFtTYyBqKoIq0d4TQ9kEWjTRNjpd3/jFKZ3uo2McJ6+RWBK6l+LQtdnkqtxf
YIGa7JjJRLTVealFviHKwDLJ8mr1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzq1W
ZRViiDYtviukSgohxLpm0yowHwYDVR0jBBgwFoAUqKGvAvlsG6ktk6Uiyr6e2OUp
UVMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ5M0UyL0NEMERDQzEwNkZEQzExRUI5RkY3N0I1OEY4QUVBMjI4L3FLR3ZB
dmxzRzZrdGs2VWl5cjZlMk9VcFVWTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FLR3ZBdmxzRzZrdGs2VWl5cjZlMk9VcFVWTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDkzRTIvQ0QwRENDMTA2RkRDMTFFQjlGRjc3QjU4RjhB
RUEyMjgvcUtHdkF2bHNHNmt0azZVaXlyNmUyT1VwVVZNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuq5t6LuRz3zZlM36zyJryUCDQjPrU
Yy0pizPin7p3bFEUApyh+eYCIAMNgDjKH+e9PyvESV/WHWZ9LV9i8+aPij605CdD
5SHmp94PSt6jKDiGtZ6Hc3jHz7Py16JZzygjFiqQW+oF3VA+knbwNlcJnZ1esInI
F47lZa23mFOo871VllnnV77Qvrcw6ApYQCEugVI30ddHnuj9Uh/tveaLsk1a++y/
BWjD4nyeDUi0equkAnWoT1aW6gSdYy0YI2xh1vwMVbWvERFlXi6r7UcFhde/l9AI
fz0Za2GrCR+6YTkRjahcryggrd/EapQgGAwUlZcVgq3HecodpdmOplNP
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:25:16 2026 by rpki-client