
Error: rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.mft
File: a3fSZSdSIpMFr-1TE57kNToxbvc.mft (raw, json)
Hash identifier: tQakhjwAUNo/KPMKkPooipJIS0FBUXGipRvrVar2PPc=
Subject key identifier: 16:89:FC:7B:7E:EF:B6:7B:3D:F5:3C:DF:37:BA:0C:23:9A:E4:58:B9
Authority key identifier: 6B:77:D2:65:27:52:22:93:05:AF:ED:53:13:9E:E4:35:3A:31:6E:F7
Certificate issuer: /CN=F36894B8AF/serialNumber=6B77D2652752229305AFED53139EE4353A316EF7
Certificate serial: 0D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/a3fSZSdSIpMFr-1TE57kNToxbvc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.mft
Manifest number: 0C
Signing time: Thu 24 Sep 2026 05:56:00 +0000
Manifest this update: Thu 24 Sep 2026 05:56:00 +0000
Manifest next update: Sat 26 Sep 2026 05:56:00 +0000
Files and hashes: 1: a3fSZSdSIpMFr-1TE57kNToxbvc.crl (hash: g2NnOiftClZH4GVoCz/8IlAhChdJbi9Tdzz3dxad24s=)
2: 85849A60B03411F1A5F655E2CE1D38B0.roa (hash: hqZDJvBVHj8Bj9yBtyWBSvYs2bDB7xmpzCOtPt5CHuA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.mft
rsync://rpki.afrinic.net/repository/afrinic/a3fSZSdSIpMFr-1TE57kNToxbvc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 05:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36894B8AF, serialNumber=6B77D2652752229305AFED53139EE4353A316EF7
Validity
Not Before: Sep 24 05:56:00 2026 GMT
Not After : Sep 26 05:56:00 2026 GMT
Subject: CN=6ab4bb70-4794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:aa:71:d5:50:66:db:f8:43:55:5d:80:96:
b7:1b:b1:64:ab:2c:e1:1f:e5:74:65:4b:df:ff:f1:
9f:f6:8e:8f:53:09:26:22:41:98:46:c1:2e:99:67:
fc:68:98:5e:34:31:af:a7:ed:12:f6:9c:96:bf:f8:
7b:a5:cf:35:67:75:f2:7e:79:8d:78:1a:5b:41:4f:
d6:31:20:54:78:b5:da:89:8a:97:0c:c8:03:81:31:
a9:4a:bf:c9:65:c4:d5:7b:2c:7f:c4:d1:98:2a:f3:
4d:fe:7e:e7:75:f5:fa:50:0f:a5:a0:3b:94:76:5d:
df:c0:0a:15:6a:b8:7b:45:1f:ea:34:94:03:56:63:
ad:78:ac:d1:b9:ea:4f:86:1d:00:7e:07:a5:be:9c:
e9:50:80:28:3c:47:0d:d1:50:f6:3c:d8:3f:b1:f8:
c6:40:26:40:d1:87:76:e8:24:79:f6:36:93:07:7d:
e0:75:05:21:6b:63:0c:dc:04:3d:a1:89:c7:58:18:
ad:0b:ef:04:1a:18:d1:31:c4:e1:c0:2e:61:50:c0:
f5:00:a0:b8:5b:fb:c2:87:bb:d3:03:9c:7b:f8:fa:
53:5b:23:64:9b:d5:e7:75:8b:36:3f:0c:a0:20:fd:
e1:43:62:6b:3b:90:07:a5:70:d8:d8:2c:66:74:ea:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:89:FC:7B:7E:EF:B6:7B:3D:F5:3C:DF:37:BA:0C:23:9A:E4:58:B9
X509v3 Authority Key Identifier:
keyid:6B:77:D2:65:27:52:22:93:05:AF:ED:53:13:9E:E4:35:3A:31:6E:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a3fSZSdSIpMFr-1TE57kNToxbvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a9:60:b0:84:dc:6c:25:7e:7b:c7:cb:a1:d4:52:cf:6e:94:
3e:81:db:f2:bf:76:e7:61:e1:08:06:64:80:2d:25:f6:67:50:
54:a0:0c:de:48:e2:f9:f6:a9:e4:78:b2:6f:6b:98:1a:7c:0e:
0e:dc:1d:83:30:71:e9:e3:a2:07:ef:52:93:12:bb:d3:43:df:
76:b4:7f:a1:2c:87:e9:01:58:90:47:c8:f9:e7:ee:8f:18:7f:
55:e8:54:d8:d1:e6:74:c4:5d:ed:3e:06:0f:f1:ac:a1:e0:e1:
b9:39:57:af:3d:d5:4e:44:71:e9:76:01:36:0a:71:cb:f4:ea:
2b:42:7b:45:f6:19:42:81:d5:67:94:9e:1e:9b:c7:cd:83:d5:
77:df:e1:b3:4a:da:c9:7a:88:e6:59:bf:70:f8:fc:8d:df:fa:
00:97:bb:7e:e9:c8:20:49:f2:b5:ca:91:0f:5e:50:bd:30:57:
b8:fe:8f:5a:91:2c:9f:db:bc:6f:82:d8:a0:cd:71:93:7a:56:
68:1c:60:26:0e:cc:17:b9:13:a6:0e:79:9e:6e:09:3d:b2:bb:
4a:1c:ff:01:7f:62:85:9f:b1:23:c0:0e:f0:30:81:66:fb:33:
5f:cb:fa:f7:4e:b2:02:33:d8:e1:81:2c:25:43:b2:3e:20:9d:
28:11:80:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:37:39 2026 by rpki-client