
Error: rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft
File: E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft (raw, json)
Hash identifier: X/SBZbcwXZPJHhbVzHNwY3QbZGjNiKN8VsF4xiqR8Oc=
Subject key identifier: BE:EF:23:2A:D7:2E:4C:6E:CA:FE:DF:08:4B:E7:79:5D:39:96:27:5F
Authority key identifier: 13:AA:2F:70:5F:4E:0F:D3:68:44:7C:F2:87:81:3B:56:81:2D:56:D4
Certificate issuer: /CN=F3655DF0AF/serialNumber=13AA2F705F4E0FD368447CF287813B56812D56D4
Certificate serial: 35
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft
Manifest number: 33
Signing time: Sun 27 Sep 2026 05:50:13 +0000
Manifest this update: Sun 27 Sep 2026 05:50:12 +0000
Manifest next update: Tue 29 Sep 2026 05:50:12 +0000
Files and hashes: 1: E6ovcF9OD9NoRHzyh4E7VoEtVtQ.crl (hash: Zo+lZJQCY2R7l0ArA8QL1hAoZ9wU5/k7tlfUm6XGFqg=)
2: 819517FE94D711F1A3C9E0D4CE1D38B0.roa (hash: KGYLp5bJccYbpYXZZ1ntigtAMQHrt+LgJKaGPbfZ2Nc=)
3: B2DD966094D711F1B577ECD4CE1D38B0.roa (hash: gMWCBqKn+1mGnPLNY0688GoAzfso8FSk//fc3bwqGJA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft
rsync://rpki.afrinic.net/repository/afrinic/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Sep 2026 05:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655DF0AF, serialNumber=13AA2F705F4E0FD368447CF287813B56812D56D4
Validity
Not Before: Sep 27 05:50:12 2026 GMT
Not After : Sep 29 05:50:12 2026 GMT
Subject: CN=6ab8ae95-98cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:89:fd:a5:7b:18:8a:e7:63:e5:d6:ac:60:27:
9d:8b:2c:94:b4:1d:9d:b0:2e:d6:04:1c:28:cc:6f:
d6:60:71:82:81:37:8b:55:f8:3c:02:8c:60:8f:4a:
59:e9:7a:61:b8:8a:d4:1b:99:83:df:13:b9:83:ab:
7d:98:48:ce:2f:af:fc:6b:83:fd:1c:d8:14:4e:04:
3f:c6:13:66:e9:0d:40:08:0a:9a:e5:78:ac:92:53:
3d:17:1c:b3:07:7b:02:5d:29:ad:9d:09:95:f9:78:
98:a0:f4:10:63:b4:21:7b:c5:e6:25:a0:18:34:6f:
c6:10:6e:2f:06:fe:2a:c5:93:6a:0c:20:fc:c8:55:
0b:97:87:1d:da:33:5f:92:3a:c5:3d:4b:6f:dd:7b:
a0:bd:4c:6a:22:e5:91:79:0b:b4:e6:93:8e:a9:96:
e4:e8:4a:5a:2e:40:9d:11:22:21:a8:de:12:4e:b7:
6c:28:18:6b:d6:7b:15:23:87:4d:78:1f:b0:75:16:
cd:62:11:1c:cd:0f:64:f1:66:a8:cc:ba:c8:b0:53:
ef:e5:5b:cc:c3:5c:b7:0b:a2:bf:b1:4e:ba:7f:93:
c4:cb:96:bd:38:dd:cf:ca:02:56:be:dc:62:ac:4b:
e3:b2:a8:d1:bb:55:1a:fc:89:aa:3e:d4:ba:89:70:
e1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EF:23:2A:D7:2E:4C:6E:CA:FE:DF:08:4B:E7:79:5D:39:96:27:5F
X509v3 Authority Key Identifier:
keyid:13:AA:2F:70:5F:4E:0F:D3:68:44:7C:F2:87:81:3B:56:81:2D:56:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:5d:d8:3e:34:76:07:aa:ac:57:dd:79:76:f7:5a:fe:01:52:
e7:91:b1:49:4b:df:99:41:69:ed:c7:b8:d7:0c:81:99:ad:a3:
e2:fc:46:ba:20:8e:dc:e2:68:a0:04:fa:85:56:fb:1e:dc:79:
3a:98:7e:bb:85:c9:c2:e0:cb:6a:ed:82:d3:e3:d1:dd:7f:ad:
eb:3c:50:6b:a9:4d:60:96:d6:d8:79:2c:96:4e:41:5e:71:09:
0f:a1:43:ed:44:36:b0:67:34:ff:ca:8f:11:61:d5:7f:e0:fe:
2f:25:d0:35:f8:b4:70:25:bb:4e:c0:07:f8:3f:4c:2d:f8:11:
fb:48:fd:95:00:ce:ae:2a:49:5c:e9:b6:0a:ac:73:bd:84:89:
d3:41:21:66:5a:32:20:27:08:02:97:70:ff:86:d3:e4:60:72:
7d:ee:c5:48:18:1e:2b:56:59:59:28:41:79:20:54:ae:08:96:
82:26:cc:a8:f7:3e:aa:3e:a3:dd:1f:39:04:ba:38:30:b4:12:
40:b9:3c:4e:ca:8e:d1:57:dc:3d:b3:e5:bf:e0:2d:48:42:12:
56:e5:f1:e6:9a:d5:19:40:48:07:77:9d:fb:a8:cd:24:04:b3:
3e:ae:74:80:9c:09:e4:82:89:7e:dc:b0:1a:d4:73:82:90:f4:
99:71:87:ec
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBNTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
NURGMEFGMTEwLwYDVQQFEygxM0FBMkY3MDVGNEUwRkQzNjg0NDdDRjI4NzgxM0I1
NjgxMkQ1NkQ0MB4XDTI2MDkyNzA1NTAxMloXDTI2MDkyOTA1NTAxMlowGDEWMBQG
A1UEAxMNNmFiOGFlOTUtOThjYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO+J/aV7GIrnY+XWrGAnnYsslLQdnbAu1gQcKMxv1mBxgoE3i1X4PAKMYI9K
Wel6YbiK1BuZg98TuYOrfZhIzi+v/GuD/RzYFE4EP8YTZukNQAgKmuV4rJJTPRcc
swd7Al0prZ0Jlfl4mKD0EGO0IXvF5iWgGDRvxhBuLwb+KsWTagwg/MhVC5eHHdoz
X5I6xT1Lb917oL1MaiLlkXkLtOaTjqmW5OhKWi5AnREiIajeEk63bCgYa9Z7FSOH
TXgfsHUWzWIRHM0PZPFmqMy6yLBT7+VbzMNctwuiv7FOun+TxMuWvTjdz8oCVr7c
YqxL47Ko0btVGvyJqj7Uuolw4Y8CAwEAAaOCArgwggK0MB0GA1UdDgQWBBS+7yMq
1y5Mbsr+3whL53ldOZYnXzAfBgNVHSMEGDAWgBQTqi9wX04P02hEfPKHgTtWgS1W
1DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTVERjAvQjcwQjRCNTQ5NENGMTFGMTk5RjE5OEE4Q0UxRDM4QjAvRTZvdmNG
OU9EOU5vUkh6eWg0RTdWb0V0VnRRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvRTZvdmNGOU9EOU5vUkh6eWg0RTdWb0V0VnRRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY1NURGMC9CNzBCNEI1NDk0Q0YxMUYxOTlGMTk4QThDRTFE
MzhCMC9FNm92Y0Y5T0Q5Tm9SSHp5aDRFN1ZvRXRWdFEubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAIdd2D40dgeqrFfdeXb3Wv4BUueRsUlL
35lBae3HuNcMgZmto+L8RrogjtziaKAE+oVW+x7ceTqYfruFycLgy2rtgtPj0d1/
res8UGupTWCW1th5LJZOQV5xCQ+hQ+1ENrBnNP/KjxFh1X/g/i8l0DX4tHAlu07A
B/g/TC34EftI/ZUAzq4qSVzptgqsc72EidNBIWZaMiAnCAKXcP+G0+Rgcn3uxUgY
HitWWVkoQXkgVK4IloImzKj3Pqo+o90fOQS6ODC0EkC5PE7KjtFX3D2z5b/gLUhC
Elbl8eaa1RlASAd3nfuozSQEsz6udICcCeSCiX7csBrUc4KQ9Jlxh+w=
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:16:39 2026 by rpki-client