
Error: rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
File: ypQWvryVa0rVjBysHB1Gn2gzUFI.mft (raw, json)
Hash identifier: Pqex24ptc5IlO+s9Z7Dbz6NuE4w84JOB9KHZ/cqfrZA=
Subject key identifier: 6F:04:78:11:FD:5F:54:D5:87:93:1E:7A:6B:C2:2B:E8:18:3D:E0:B9
Authority key identifier: CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52
Certificate issuer: /CN=F36914A7AF/serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
Certificate serial: 0A24
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
Manifest number: 0A22
Signing time: Sat 10 Oct 2026 01:37:27 +0000
Manifest this update: Sat 10 Oct 2026 01:37:27 +0000
Manifest next update: Mon 12 Oct 2026 01:37:27 +0000
Files and hashes: 1: ypQWvryVa0rVjBysHB1Gn2gzUFI.crl (hash: BmtM5k2n2TWorAlFmtzmcGp7ZGC9anlxeFxl6mqtRyo=)
2: 1AF2F83CFBFE11E992573048F8AEA228.roa (hash: oouCj0bsgLv2TuhXp8fmEvLXf8LLF9rpmnAY9E+k4nY=)
3: F6BF2196FC8111E9AC6A242CF8AEA228.roa (hash: Fd+NxiRRn35EHOCt2v/UUPEoB3ED4QaRhjwZJZVQOG4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2596 (0xa24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36914A7AF, serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
Validity
Not Before: Oct 10 01:37:27 2026 GMT
Not After : Oct 12 01:37:27 2026 GMT
Subject: CN=6ac996d7-128c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:27:c5:b7:b8:9a:cc:13:71:09:2d:0a:38:
f7:4c:49:bc:4b:f8:dd:d3:ca:a5:7f:71:da:33:e0:
fd:f8:41:da:b4:03:6f:c3:7c:44:24:62:b3:98:3c:
17:27:23:4f:80:c9:2c:86:20:e9:38:63:9a:9f:0f:
33:0f:5d:ed:5f:1d:f4:d5:03:96:4a:61:24:d1:56:
5c:08:29:f9:47:d7:98:d6:b3:1f:a4:5a:3b:e1:d8:
e4:42:84:de:c6:56:0e:16:9d:4a:fb:a0:d6:cc:10:
22:ba:ae:8e:1f:43:c2:8e:12:29:d7:ed:b3:3f:92:
76:16:e1:0e:93:43:50:3a:1c:d6:7b:51:68:39:a6:
40:77:71:83:d2:6d:59:cd:8a:ba:50:b5:a8:99:db:
95:e6:64:88:41:ed:7d:e2:cb:22:31:d0:b1:e1:7c:
60:6b:53:3c:3a:d5:2f:8d:c2:dd:35:8a:40:7e:ab:
b2:99:3f:d8:20:5e:c3:b3:55:9b:88:75:ee:9a:de:
9e:29:3d:e9:14:55:34:2b:8f:53:9e:d8:8a:5a:b5:
5e:ec:b8:29:8e:12:5a:31:4c:f8:3f:4f:06:0c:48:
c0:46:c7:63:a3:d1:3c:72:f1:1b:71:25:57:ad:c3:
a8:24:a7:5f:28:a5:d4:3e:71:1e:61:f9:bb:fb:06:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:04:78:11:FD:5F:54:D5:87:93:1E:7A:6B:C2:2B:E8:18:3D:E0:B9
X509v3 Authority Key Identifier:
keyid:CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3d:2b:71:22:87:d3:8a:97:84:e5:05:01:27:7b:61:49:07:
dc:03:82:17:2c:db:0e:f7:3c:e5:58:7c:60:fb:c1:44:e9:fc:
90:61:85:e7:37:cd:09:0f:32:86:bf:92:b4:38:9c:df:93:62:
3a:44:0e:63:82:ec:ac:76:19:fa:c8:0a:d8:ce:cd:56:a1:6a:
56:06:62:ed:74:19:17:b8:e3:a6:bb:f9:72:76:fc:4d:0d:96:
c3:7f:da:38:e6:5a:8f:72:7c:e9:f3:84:c7:21:37:2e:4a:78:
77:9e:76:a6:70:46:97:c8:9b:f0:e6:ac:56:67:81:15:5c:01:
ea:87:9d:e5:1e:01:99:8d:2f:0d:aa:5f:8f:c1:5b:07:54:f6:
ee:d0:04:6f:5a:da:a8:5e:f5:d6:bb:7f:ba:45:bc:cc:30:99:
da:f3:14:4f:51:b6:39:14:38:11:52:45:f9:e7:6d:55:62:d9:
06:f1:37:e8:db:dd:9f:6d:b5:24:de:6f:5a:c3:3a:b7:ca:b9:
1c:4c:c1:df:69:a0:05:00:fa:43:41:20:62:ea:cd:ed:f5:c1:
ef:97:2a:fd:8d:d0:d7:8c:12:ec:86:71:9a:dd:a7:0f:51:84:
d6:4e:b9:0a:71:f2:a5:6c:db:75:72:6e:86:bf:98:5c:e6:3e:
ee:01:8c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:17:26 2026 by rpki-client