
Error: rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
File: DcakyCEJ_yyznB0aWMOOMDPFoP4.mft (raw, json)
Hash identifier: TvVbf6HXi0LK9dyXe4iUVBsH1UoOw9qSO9hcAAYGOWs=
Subject key identifier: 39:D7:22:66:C5:8F:62:A9:BC:FF:3C:AC:BB:35:23:53:7F:C9:3B:07
Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
Certificate issuer: /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Certificate serial: 03EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
Manifest number: 03D0
Signing time: Sat 14 Nov 2026 04:11:19 +0000
Manifest this update: Sat 14 Nov 2026 04:11:18 +0000
Manifest next update: Mon 16 Nov 2026 04:11:18 +0000
Files and hashes: 1: DcakyCEJ_yyznB0aWMOOMDPFoP4.crl (hash: yQIl905/0/Ykz02NsUEQqmYUkyKMmL16yprtWtGDBL4=)
2: D36F9FC09E1211F0966632AEDAE4EC9C.roa (hash: bJSVRApPrsDM0DOSvCfvAqU85OY/qAv2av1QekfCggw=)
3: 840BAFE4D5CE11EF9F26DD77762E951A.roa (hash: sKdcVkYo4xUul2xhcopwWLTEZ0Coub2IAaU4zBm9Qoc=)
4: 5391E35A514E11F0B3FBEA9BDAE4EC9C.roa (hash: FgqtDyexUlItVpAKSV/WBoPJSeqrXF4SEH2sFDGm9KI=)
5: 44F7A312514D11F0BE5B7493DAE4EC9C.roa (hash: JjfCaY/DSyk/x0PG88+ivHyCCCQmlDsXI+ZkbsOp9Bk=)
6: C4B25498D5CF11EF8B385380762E951A.roa (hash: c0lIUY0MI/RJ9MopAqogt6LcUcP2aw6oEoJwJbuApDA=)
7: 7DD153FE514D11F0A35C1C97DAE4EC9C.roa (hash: 8bWJ3tM27kTbYQCS7pka2UKCEjGC//pzMPNEA8dwKMk=)
8: 7B24675800F311F18E4DA8EBDAE4EC9C.roa (hash: gxOS892rWa//UdGze2bCZeoQIzTnFobyOT8pCY9k+UM=)
9: F28EE676D5B911EFB1FFC972762E951A.roa (hash: EzqsSk1Co9k9NgSov+FZr7H05V+t9uoO/FrO5hKwcOM=)
10: 23D3EB78D5BA11EF86DD9F74762E951A.roa (hash: G4Ai8yoQfjwUNFDDrcLjtsPrrCfGiIRKwRB24pEHxY8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Nov 2026 00:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1004 (0x3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36877BBAF, serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Validity
Not Before: Nov 14 04:11:18 2026 GMT
Not After : Nov 16 04:11:18 2026 GMT
Subject: CN=6af7df66-f679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:58:7c:13:15:44:cb:c8:c6:eb:de:80:7e:0f:
a3:5a:ec:b6:cb:4e:11:e6:87:d8:80:7b:2d:ac:5a:
e1:7c:04:13:34:af:2a:d2:5e:e0:d7:96:19:36:0e:
a6:12:6b:d4:ed:cf:8f:0a:55:af:50:56:98:69:de:
d7:08:2a:fd:e7:cb:a9:e7:a7:f2:12:78:1c:fb:ff:
b9:38:dc:00:bb:42:8e:04:9d:00:e5:ce:19:07:9e:
84:43:2f:6f:8d:cc:86:0c:5b:19:ca:3b:2e:ed:2c:
f1:43:6b:47:b7:d3:15:16:97:56:db:fa:b3:65:78:
bf:8b:db:dd:1d:ac:3f:3d:5d:33:6a:bf:4c:cd:ba:
73:2a:7d:06:d4:26:f7:77:3c:79:23:87:63:17:94:
cd:78:74:e9:5c:22:7a:4c:99:ef:c8:5b:7f:d7:f8:
c3:e1:21:f8:4c:9f:e6:c3:3b:fc:2b:a5:8c:92:20:
23:8e:65:6f:8d:5f:ad:a4:7f:e8:f5:13:8e:ec:5b:
5e:24:a3:6f:f7:32:d6:2f:59:b2:e4:f4:53:da:f4:
1b:7f:7c:e8:aa:1f:4e:51:33:da:5d:59:46:d9:2b:
b9:d4:a2:29:eb:bf:0d:33:4c:01:8e:94:94:27:a6:
e5:8b:5e:07:fa:1f:e4:bc:7f:8b:29:3f:82:cc:cb:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D7:22:66:C5:8F:62:A9:BC:FF:3C:AC:BB:35:23:53:7F:C9:3B:07
X509v3 Authority Key Identifier:
keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:a8:dc:15:7d:72:c8:b5:6a:5e:d2:3f:0c:9f:06:77:9d:a6:
a3:91:5d:af:af:7e:09:6c:84:8a:b7:48:e6:1e:84:21:28:4c:
bb:a0:20:b0:e6:ae:f0:d7:5f:83:82:6b:3f:e0:40:87:fe:bb:
42:6a:85:02:b2:c8:e4:a4:01:0b:cc:15:74:cc:c7:ff:63:84:
26:50:ea:30:24:8f:dc:32:01:78:ad:e7:dd:ed:05:0a:33:0e:
19:e2:d8:39:bf:00:08:87:31:c5:db:63:aa:1c:0f:be:10:dd:
cb:7a:6e:bc:76:63:9e:c8:b7:17:34:9c:3b:1e:8d:5f:8a:23:
61:d7:e8:bb:f3:dc:6c:54:32:55:3b:ae:df:fe:68:3b:24:54:
80:c3:61:e8:67:ff:62:ac:ca:29:4c:fa:2a:2b:ae:6f:f5:83:
68:29:f6:c6:c1:26:df:54:0f:d2:ec:13:69:38:02:4c:b1:a3:
86:05:d6:08:59:56:cf:9f:c2:20:4b:38:24:d8:aa:9a:5f:12:
40:a2:75:82:4f:f8:38:09:fc:37:fe:1e:65:55:5f:6b:37:21:
63:3f:15:1c:eb:f2:2e:e2:3b:d9:ff:b4:e9:1f:33:d6:30:53:
11:d0:bf:c3:4e:61:bd:4e:a8:75:ca:37:79:8c:1a:9d:3c:9d:
26:43:75:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:46:05 2026 by rpki-client