
Error: rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File: nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier: UBIltCPWyg+Jnch0wyxNkNP1Bgg1kYiiV9I9lzv0Srk=
Subject key identifier: 89:A0:D4:37:ED:A9:E4:7E:8E:06:7C:00:D8:0D:8F:2B:D1:17:AB:FC
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer: /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial: 0ADC
Authority info access: rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number: 0AD7
Signing time: Tue 29 Sep 2026 01:19:32 +0000
Manifest this update: Tue 29 Sep 2026 01:19:32 +0000
Manifest next update: Thu 01 Oct 2026 01:19:32 +0000
Files and hashes: 1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: 6vXke+j2GZ4SR/SCz+fapX8YwpAzT2QxRl++yElnZyI=)
2: 2080E9B0188C11F1AB23ECE6DAE4EC9C.roa (hash: 7+2h/hAR0ZH797eWYPIRfzQR4D387dc0Npd3o5pHyjg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 Oct 2026 00:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2780 (0xadc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Validity
Not Before: Sep 29 01:19:32 2026 GMT
Not After : Oct 1 01:19:32 2026 GMT
Subject: CN=6abb1224-674d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:7d:58:5c:f8:58:a7:5a:f1:44:64:3e:b5:
8d:86:e8:a7:64:42:d0:c0:a2:02:dc:5e:b3:30:19:
02:2a:75:38:61:3a:11:59:b3:b7:b4:a6:28:86:73:
d4:7e:c6:03:fd:f8:a3:98:37:ea:01:9f:86:f2:c3:
b7:91:13:2f:1b:bc:a5:ff:d7:1a:6e:ee:a4:87:42:
25:02:c5:94:5c:4e:0c:e3:b3:96:a1:4f:07:9b:02:
93:fe:e9:4d:cb:f2:5c:c5:f6:57:89:72:92:3b:57:
78:3a:2d:88:cf:2c:cd:9a:34:11:f4:9e:ea:a1:c5:
93:3c:85:79:c4:04:cb:75:42:4f:90:d5:29:e8:6e:
00:f9:f7:a0:f7:c3:4a:eb:7b:6c:2c:b8:56:14:da:
58:b0:d2:aa:18:9c:ef:50:49:05:68:61:a1:bb:d0:
03:20:75:e5:9c:08:49:d7:b6:92:d8:7e:86:d0:24:
a5:a5:4f:94:31:1c:25:a4:af:30:ae:7e:8c:17:b8:
b7:7d:72:3a:3d:1c:d5:7b:f0:0f:d0:31:c1:2a:f4:
90:9a:60:33:5e:80:6e:61:9e:1a:96:13:6e:93:a3:
3c:a5:55:b0:46:0f:19:12:1f:71:a8:08:17:06:b4:
8c:25:b1:c3:fa:88:be:13:b4:76:1d:c8:58:7f:72:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:D4:37:ED:A9:E4:7E:8E:06:7C:00:D8:0D:8F:2B:D1:17:AB:FC
X509v3 Authority Key Identifier:
keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:60:5b:15:fc:ab:5c:e9:89:8e:2c:cb:37:2f:77:e8:03:5b:
4d:6b:33:6d:48:05:4f:46:ef:24:9a:73:c1:03:7d:3c:c2:67:
db:5c:8a:2f:0e:73:91:95:f8:f5:18:80:09:95:94:19:92:b2:
8d:d9:98:62:ab:a8:c9:e6:5c:8a:ad:8c:6f:16:66:0a:0a:9c:
39:0f:74:7a:f8:76:d5:b5:ea:57:0a:9b:7d:31:32:92:6f:3f:
94:38:1f:e1:48:87:a2:61:77:6f:b8:64:90:25:9e:b2:d8:92:
c0:87:2e:39:a2:a6:10:9c:2e:8f:4d:66:34:43:93:cb:0f:f4:
e6:72:ef:24:88:e6:a9:99:9e:c9:1f:93:17:44:dc:3d:30:56:
f2:5a:47:6d:c3:4c:6a:d9:0a:e2:56:b3:d4:06:69:c0:62:8a:
5f:43:26:be:43:43:11:bb:d0:85:ee:ce:f5:e7:bd:07:1f:ea:
1b:cb:d1:ee:93:6c:11:4f:64:f6:79:3d:c4:c0:e8:32:e2:d1:
db:40:71:f3:10:28:4e:c3:d9:ca:63:13:79:e9:e5:69:da:6a:
5e:e7:b5:4f:67:5a:ca:12:bb:ee:8f:3c:49:95:ca:27:ff:c5:
9a:cb:9b:76:3b:74:51:e9:15:e1:f7:d3:d3:94:73:21:1a:0f:
5d:80:b5:61
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCtwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0YyNkRSSTExMC8GA1UEBRMoOUQ4N0IzMTE3QUExQkQ3ODI4QjdERDQ2NEQ3MzA3
NkJBRThEQ0M5NjAeFw0yNjA5MjkwMTE5MzJaFw0yNjEwMDEwMTE5MzJaMBgxFjAU
BgNVBAMTDTZhYmIxMjI0LTY3NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQMX1YXPhYp1rxRGQ+tY2G6KdkQtDAogLcXrMwGQIqdThhOhFZs7e0piiG
c9R+xgP9+KOYN+oBn4byw7eREy8bvKX/1xpu7qSHQiUCxZRcTgzjs5ahTwebApP+
6U3L8lzF9leJcpI7V3g6LYjPLM2aNBH0nuqhxZM8hXnEBMt1Qk+Q1SnobgD596D3
w0rre2wsuFYU2liw0qoYnO9QSQVoYaG70AMgdeWcCEnXtpLYfobQJKWlT5QxHCWk
rzCufowXuLd9cjo9HNV78A/QMcEq9JCaYDNegG5hnhqWE26TozylVbBGDxkSH3Go
CBcGtIwlscP6iL4TtHYdyFh/chgbAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUiaDU
N+2p5H6OBnwA2A2PK9EXq/wwHwYDVR0jBBgwFoAUnYezEXqhvXgot91GTXMHa66N
zJYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGMjZELzNGNDA0MUZDNzBCOTExRTlBN0YyNUQzRkY4QUVBMjI4L25ZZXpF
WHFodlhnb3Q5MUdUWE1IYTY2TnpKWS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L25ZZXpFWHFodlhnb3Q5MUdUWE1IYTY2TnpKWS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0YyNkQvM0Y0MDQxRkM3MEI5MTFFOUE3RjI1RDNGRjhBRUEy
MjgvblllekVYcWh2WGdvdDkxR1RYTUhhNjZOekpZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyYFsV/Ktc6YmOLMs3L3foA1tNazNtSAVP
Ru8kmnPBA308wmfbXIovDnORlfj1GIAJlZQZkrKN2Zhiq6jJ5lyKrYxvFmYKCpw5
D3R6+HbVtepXCpt9MTKSbz+UOB/hSIeiYXdvuGSQJZ6y2JLAhy45oqYQnC6PTWY0
Q5PLD/Tmcu8kiOapmZ7JH5MXRNw9MFbyWkdtw0xq2QriVrPUBmnAYopfQya+Q0MR
u9CF7s71570HH+oby9Huk2wRT2T2eT3EwOgy4tHbQHHzEChOw9nKYxN56eVp2mpe
57VPZ1rKErvujzxJlcon/8Way5t2O3RR6RXh99PTlHMhGg9dgLVh
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:27:13 2026 by rpki-client