
Error: rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
File: DoVnb92LLIvqeU6JUNJzTz-JMME.mft (raw, json)
Hash identifier: UtNfS0Ap8+fVotLcrkH1tHA2nV1lNCAJ9Sdwkm8gvHc=
Subject key identifier: 6A:9B:63:1C:30:60:8E:B7:0B:E2:AE:AC:2E:78:7B:A8:2B:26:91:81
Authority key identifier: 0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
Certificate issuer: /CN=F3694A3EAF/serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Certificate serial: 02C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
Manifest number: 02C5
Signing time: Fri 25 Sep 2026 04:36:47 +0000
Manifest this update: Fri 25 Sep 2026 04:36:46 +0000
Manifest next update: Sun 27 Sep 2026 04:36:46 +0000
Files and hashes: 1: DoVnb92LLIvqeU6JUNJzTz-JMME.crl (hash: S+Rl3mxwxwXYJvMTuYVneMBkocrA5JUdYB/ScPYC+io=)
2: 0F329508984711EF85483C4D762E951A.roa (hash: a0BidHbztDQTPkWjYpuerywnpAYxfdwn5c2aRLRiLtE=)
3: 551A9F322CCD11F09F73B0B5DAE4EC9C.roa (hash: qDJZJ73fwcMimn2oqNCcTPQF5DF0ccPRcwR3NYTQ2dI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 04:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711 (0x2c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3694A3EAF, serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Validity
Not Before: Sep 25 04:36:46 2026 GMT
Not After : Sep 27 04:36:46 2026 GMT
Subject: CN=6ab5fa5f-5f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:e7:99:5c:26:75:3f:a1:1e:51:94:c9:cd:
3e:24:88:24:a0:15:20:e8:97:a8:b5:77:dc:ee:01:
e0:b9:dc:93:0d:1a:4b:cd:07:0e:88:98:78:1b:23:
f2:2f:38:72:1c:21:0f:78:b5:8a:95:f0:c9:f5:54:
ec:07:20:56:e8:9f:bd:9f:46:25:20:01:4a:9f:21:
f8:08:6b:b9:d0:1c:93:9e:78:dc:f6:15:de:71:ef:
77:ad:24:a7:9d:76:da:d3:03:e4:9a:ee:0c:53:1d:
1d:6c:0d:44:19:1a:bb:94:67:b7:97:25:37:e3:b5:
fc:48:0d:d9:7a:48:24:31:6a:93:a3:a2:59:1d:ab:
40:88:25:b8:5c:d7:0b:4f:9c:b7:bd:51:b7:87:4b:
98:f4:68:40:70:b3:61:53:e0:0e:26:e5:52:78:0b:
0c:eb:62:63:1e:c8:b4:91:0f:32:11:8b:75:4a:ae:
9c:30:54:2f:fb:69:9d:7c:18:b3:75:db:6c:5f:d1:
38:cc:0f:4c:80:c3:13:01:d3:0d:f7:3e:7e:24:7a:
4c:58:de:3f:bf:69:ea:ba:e6:6c:fc:17:ec:32:38:
70:c9:95:ba:45:e6:6b:99:d2:20:e9:8b:d9:2c:79:
4e:79:cc:5c:49:15:35:69:2c:d6:97:aa:0e:91:7e:
f3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9B:63:1C:30:60:8E:B7:0B:E2:AE:AC:2E:78:7B:A8:2B:26:91:81
X509v3 Authority Key Identifier:
keyid:0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:34:44:94:9f:b1:f6:68:af:66:d9:33:84:05:19:1d:df:d9:
d7:a8:87:39:6a:6a:f7:bd:53:1f:34:64:46:8c:d9:e8:aa:f2:
e6:7f:41:48:a2:23:08:31:c2:a1:e4:bd:ea:7e:22:07:78:73:
62:9a:af:4a:ab:81:ac:d1:8e:e6:0e:97:77:f0:4c:73:c0:17:
72:6d:9e:0c:54:9b:e7:3e:16:c2:ee:46:72:3f:05:f3:d1:c1:
37:bc:e1:76:99:f1:99:f4:a7:05:46:08:18:d0:35:50:1f:0e:
38:41:dd:c3:fb:91:16:eb:7d:0e:5f:c7:5e:d0:70:72:8e:6f:
48:79:a4:cc:cc:59:24:29:9f:06:85:47:37:be:16:c8:1b:eb:
6d:2d:69:39:71:7b:a8:96:25:d8:ae:b4:29:d4:b0:84:56:5b:
bc:97:16:32:00:34:9b:6c:0e:25:c9:87:6e:10:2b:fc:d4:76:
9a:3f:39:66:3f:71:c8:1c:0d:a6:cf:b0:30:e8:a6:d6:e6:53:
94:11:c6:66:f3:f6:86:a7:17:64:ed:0d:6c:aa:84:a4:2c:1d:
53:1e:ad:20:de:86:0a:c4:74:28:85:71:f3:6c:b6:24:0a:93:
e3:fc:f3:63:55:26:7a:2b:85:e0:f4:45:03:be:09:50:35:bc:
fb:10:eb:49
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAscwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTRBM0VBRjExMC8GA1UEBRMoMEU4NTY3NkZERDhCMkM4QkVBNzk0RTg5NTBEMjcz
NEYzRjg5MzBDMTAeFw0yNjA5MjUwNDM2NDZaFw0yNjA5MjcwNDM2NDZaMBgxFjAU
BgNVBAMTDTZhYjVmYTVmLTVmOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCq4ueZXCZ1P6EeUZTJzT4kiCSgFSDol6i1d9zuAeC53JMNGkvNBw6ImHgb
I/IvOHIcIQ94tYqV8Mn1VOwHIFbon72fRiUgAUqfIfgIa7nQHJOeeNz2Fd5x73et
JKeddtrTA+Sa7gxTHR1sDUQZGruUZ7eXJTfjtfxIDdl6SCQxapOjolkdq0CIJbhc
1wtPnLe9UbeHS5j0aEBws2FT4A4m5VJ4CwzrYmMeyLSRDzIRi3VKrpwwVC/7aZ18
GLN122xf0TjMD0yAwxMB0w33Pn4kekxY3j+/aeq65mz8F+wyOHDJlbpF5muZ0iDp
i9kseU55zFxJFTVpLNaXqg6RfvOhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUaptj
HDBgjrcL4q6sLnh7qCsmkYEwHwYDVR0jBBgwFoAUDoVnb92LLIvqeU6JUNJzTz+J
MMEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk0QTNFL0E0MDVCNTkyOTg0MzExRUZCOTcwRjRCNjc2MkU5NTFBL0RvVm5i
OTJMTEl2cWVVNkpVTkp6VHotSk1NRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RvVm5iOTJMTEl2cWVVNkpVTkp6VHotSk1NRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTRBM0UvQTQwNUI1OTI5ODQzMTFFRkI5NzBGNEI2NzYy
RTk1MUEvRG9WbmI5MkxMSXZxZVU2SlVOSnpUei1KTU1FLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCvNESUn7H2aK9m2TOEBRkd39nXqIc5
amr3vVMfNGRGjNnoqvLmf0FIoiMIMcKh5L3qfiIHeHNimq9Kq4Gs0Y7mDpd38Exz
wBdybZ4MVJvnPhbC7kZyPwXz0cE3vOF2mfGZ9KcFRggY0DVQHw44Qd3D+5EW630O
X8de0HByjm9IeaTMzFkkKZ8GhUc3vhbIG+ttLWk5cXuoliXYrrQp1LCEVlu8lxYy
ADSbbA4lyYduECv81HaaPzlmP3HIHA2mz7Aw6KbW5lOUEcZm8/aGpxdk7Q1sqoSk
LB1THq0g3oYKxHQohXHzbLYkCpPj/PNjVSZ6K4Xg9EUDvglQNbz7EOtJ
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:10:23 2026 by rpki-client