
Error: rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
File: 9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft (raw, json)
Hash identifier: CqAo8rZ7jUHmbTaKJj2V/5+WZE24IhSdj5VaesHaPdg=
Subject key identifier: 13:03:DA:E8:40:C3:EB:FE:3A:57:68:00:1E:8E:A7:F7:19:C9:6B:B3
Authority key identifier: F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3
Certificate issuer: /CN=F36848BCAF/serialNumber=F72445BFF5EA83351F2E660D4D812D8F3481ECF3
Certificate serial: 020C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
Manifest number: 0209
Signing time: Fri 25 Sep 2026 04:51:49 +0000
Manifest this update: Fri 25 Sep 2026 04:51:49 +0000
Manifest next update: Sun 27 Sep 2026 04:51:49 +0000
Files and hashes: 1: 9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl (hash: vixDRS1LLMEXN1x2d/m/xXfdyWm1ciuK85HnOBDXc48=)
2: 91C51C4457F911F0AC734B88DAE4EC9C.roa (hash: jLmJyUTO89F5T9pEtytMOZ40rOclSZZKyrwwRKMAe9A=)
3: 37918F14420411F18E38FBD0CE1D38B0.roa (hash: huC/6fmrz67aK5tVBCfKdufN8eEHqz7qMufHoZTK9SA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 04:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36848BCAF, serialNumber=F72445BFF5EA83351F2E660D4D812D8F3481ECF3
Validity
Not Before: Sep 25 04:51:49 2026 GMT
Not After : Sep 27 04:51:49 2026 GMT
Subject: CN=6ab5fde5-715f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:b4:d7:79:6e:85:10:ae:3d:a7:0d:48:02:
ea:15:ef:8d:e5:98:c7:cb:af:49:db:3f:8e:ca:64:
94:f4:5b:a0:78:df:26:8e:c4:77:e7:51:aa:13:cf:
36:32:71:a6:d0:cd:68:da:49:2c:7d:8b:36:ad:de:
60:e4:66:e4:97:04:16:86:79:87:24:a5:4e:f5:8e:
59:42:1a:c4:4f:df:b2:5a:be:26:23:aa:46:1e:c4:
94:2a:23:a2:ca:ca:bc:d1:79:ba:24:7f:20:97:69:
2a:b8:73:d2:14:a0:7b:5c:06:01:29:88:ca:30:04:
33:47:8b:30:4f:07:ac:df:ff:ec:d6:ab:af:05:3d:
1e:89:3b:17:e2:c6:6a:f5:10:6d:d9:07:1e:2e:f1:
96:74:ac:8e:c8:f6:f8:79:b5:67:13:1e:c2:6f:a9:
d6:b3:39:0b:5f:ac:68:de:10:19:61:5a:5a:57:e9:
7b:58:46:8b:9d:18:f2:50:bc:6c:26:44:03:75:7f:
2c:88:75:8b:e4:d6:73:06:5f:89:e4:b5:d5:86:ba:
b9:1c:73:f9:3c:6c:7b:1d:03:ff:f8:6b:ba:83:f5:
97:ff:98:8c:f1:41:79:88:e6:ab:74:a0:38:c0:c8:
a9:c0:29:de:81:52:43:41:17:67:45:31:b3:b5:a8:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:03:DA:E8:40:C3:EB:FE:3A:57:68:00:1E:8E:A7:F7:19:C9:6B:B3
X509v3 Authority Key Identifier:
keyid:F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:d2:fe:98:d6:a6:f8:95:be:be:cc:21:db:be:19:d2:d8:fb:
3f:28:a1:8b:5c:2a:8f:b2:de:f6:6f:1a:28:ce:c8:55:f3:a5:
6c:74:98:fe:99:90:6c:5a:95:19:43:ad:74:56:64:7f:8e:c7:
28:6a:22:08:4f:3d:79:fb:4c:16:10:c1:0a:00:6d:cc:e0:c9:
f9:7e:3b:eb:a1:29:ca:6b:8f:67:61:de:e1:d1:97:51:1b:c3:
5f:78:bd:9f:d8:07:64:70:a2:5c:8c:dd:12:53:da:5b:49:d5:
68:d5:eb:be:35:2d:24:37:00:7a:a9:05:68:a0:d3:90:dd:8c:
2b:8f:86:d6:8f:bf:e7:6f:aa:15:15:01:19:d1:31:1e:64:e3:
0f:16:79:6b:05:9a:a3:82:b4:2a:f0:6a:e2:7c:f7:90:8e:70:
19:0a:41:8e:79:23:1f:79:90:31:56:cf:28:bd:bf:a1:86:89:
30:83:7e:95:44:a6:82:22:8d:16:3f:75:7d:6f:bb:86:2c:39:
18:49:04:8e:9d:ff:e1:cc:d7:48:08:6f:6f:33:4e:cd:50:b1:
4e:e6:a8:2f:d5:46:70:32:c4:6b:94:a6:29:9e:10:33:89:db:
08:92:ef:16:49:06:f0:c4:d5:d8:e7:35:ff:c3:dd:8a:02:c2:
59:d7:65:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:56:30 2026 by rpki-client