
Error: rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
File: S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft (raw, json)
Hash identifier: GHxNPDQF9AU5ibZvjHPK3AXvsAk6/+SD4x6MF4palJ0=
Subject key identifier: 8F:28:DD:D2:3C:B6:5C:4C:B6:51:11:62:DC:0C:92:BD:1A:55:56:8E
Authority key identifier: 4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD
Certificate issuer: /CN=F369E115AF/serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
Certificate serial: 038B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
Manifest number: 0389
Signing time: Sat 26 Sep 2026 04:10:06 +0000
Manifest this update: Sat 26 Sep 2026 04:10:05 +0000
Manifest next update: Mon 28 Sep 2026 04:10:05 +0000
Files and hashes: 1: S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl (hash: 1PZqQJzqI8fOrQncAYkv1vOVA6akamytjIq3ULDL9vg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907 (0x38b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E115AF, serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
Validity
Not Before: Sep 26 04:10:05 2026 GMT
Not After : Sep 28 04:10:05 2026 GMT
Subject: CN=6ab7459e-feeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:d5:fa:3f:80:e4:89:1b:a1:76:ea:fb:99:
89:59:4c:4b:5c:ff:c8:ad:81:c2:45:15:92:64:ac:
e8:d9:df:89:52:82:bc:ce:06:27:82:3f:ee:c2:85:
50:cb:dd:ab:91:a2:3a:51:a5:d3:df:96:ee:26:bd:
c9:7b:fb:72:6d:c5:79:36:33:9e:4d:d3:58:10:ad:
63:57:e3:b8:c2:b3:51:49:ac:96:b3:24:43:19:38:
cb:ca:20:c3:15:d9:80:69:51:45:5b:b7:ce:8c:e0:
6a:5f:bf:0b:a6:70:e5:56:ae:60:1a:bf:9c:73:2b:
a6:3c:14:a8:f2:12:94:6c:da:98:25:53:1e:98:a8:
07:41:9e:3c:46:98:cb:19:fb:79:fe:f1:09:ec:b8:
59:af:40:85:d7:7a:c4:ad:f4:5a:eb:20:8d:e0:34:
42:04:4c:80:71:11:07:8f:b7:45:d2:78:8c:16:c6:
d5:03:94:89:40:51:89:71:fa:76:41:1f:43:3f:3a:
d8:d2:94:96:53:82:c4:9b:66:45:a4:09:d7:72:70:
72:50:c2:0e:5d:0a:13:5e:15:81:3c:22:e1:2f:6a:
7d:49:c4:a9:31:af:1b:45:37:07:54:45:01:19:f9:
20:7f:a3:6a:e1:f6:22:1c:6c:bd:2a:11:9d:8b:c9:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:DD:D2:3C:B6:5C:4C:B6:51:11:62:DC:0C:92:BD:1A:55:56:8E
X509v3 Authority Key Identifier:
keyid:4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f1:fb:00:4a:f6:ca:65:31:07:47:f3:b3:9b:88:8e:d0:03:45:
77:ac:5d:7b:7d:0b:d5:ad:18:b5:a7:d4:58:1e:76:54:3a:1d:
d0:c2:48:80:7c:b7:fd:8a:11:7b:82:db:10:83:f1:18:3b:b2:
b4:38:ae:c0:90:aa:6e:d7:76:00:19:0d:ce:ac:30:62:c4:d9:
b2:b9:da:f0:ac:98:b3:73:38:e3:c5:f1:bb:54:91:25:3d:8b:
f4:68:60:0a:11:2e:7b:a0:27:ba:02:15:1a:7d:9d:07:2b:4b:
44:ea:d0:be:cd:e7:fb:6a:bc:72:bb:f9:7c:18:17:28:08:24:
ce:69:86:46:0a:87:1a:c3:f5:c6:3a:53:88:77:4b:5f:7b:dc:
03:29:52:5f:6b:4f:cd:d3:3f:d0:f9:c8:80:b5:1d:69:f1:91:
b7:14:0e:d9:a0:50:f0:d9:4a:93:67:b3:5a:5c:76:da:88:0a:
fb:53:3b:f0:e2:4b:b8:e5:e3:db:55:dd:f7:aa:ab:c4:93:ac:
39:6c:60:5a:e4:8b:e4:16:2c:dc:29:14:81:f4:7a:18:bd:64:
26:59:c4:cc:14:4d:14:73:fb:64:74:8c:cc:3f:a9:11:29:30:
1b:c0:a1:02:b6:ef:7c:99:df:ef:e6:b8:4a:e1:11:a1:9f:e1:
3f:a9:fd:b9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA4swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUUxMTVBRjExMC8GA1UEBRMoNEJEMTI3MEI3MDBGRjI5RDE4NDIzRjE4M0I5Rjky
QjM2ODg3RDZERDAeFw0yNjA5MjYwNDEwMDVaFw0yNjA5MjgwNDEwMDVaMBgxFjAU
BgNVBAMTDTZhYjc0NTllLWZlZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIaNX6P4DkiRuhdur7mYlZTEtc/8itgcJFFZJkrOjZ34lSgrzOBieCP+7C
hVDL3auRojpRpdPflu4mvcl7+3JtxXk2M55N01gQrWNX47jCs1FJrJazJEMZOMvK
IMMV2YBpUUVbt86M4GpfvwumcOVWrmAav5xzK6Y8FKjyEpRs2pglUx6YqAdBnjxG
mMsZ+3n+8QnsuFmvQIXXesSt9FrrII3gNEIETIBxEQePt0XSeIwWxtUDlIlAUYlx
+nZBH0M/OtjSlJZTgsSbZkWkCddycHJQwg5dChNeFYE8IuEvan1JxKkxrxtFNwdU
RQEZ+SB/o2rh9iIcbL0qEZ2LyfxRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUjyjd
0jy2XEy2URFi3AySvRpVVo4wHwYDVR0jBBgwFoAUS9EnC3AP8p0YQj8YO5+Ss2iH
1t0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlFMTE1L0ZCRkVCNzY0MDNDMjExRUY5NzEzQzEwQzAxNzAwMUIxL1M5RW5D
M0FQOHAwWVFqOFlPNS1TczJpSDF0MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1M5RW5DM0FQOHAwWVFqOFlPNS1TczJpSDF0MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUUxMTUvRkJGRUI3NjQwM0MyMTFFRjk3MTNDMTBDMDE3
MDAxQjEvUzlFbkMzQVA4cDBZUWo4WU81LVNzMmlIMXQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDx+wBK9splMQdH87ObiI7QA0V3rF17
fQvVrRi1p9RYHnZUOh3QwkiAfLf9ihF7gtsQg/EYO7K0OK7AkKpu13YAGQ3OrDBi
xNmyudrwrJizczjjxfG7VJElPYv0aGAKES57oCe6AhUafZ0HK0tE6tC+zef7arxy
u/l8GBcoCCTOaYZGCocaw/XGOlOId0tfe9wDKVJfa0/N0z/Q+ciAtR1p8ZG3FA7Z
oFDw2UqTZ7NaXHbaiAr7Uzvw4ku45ePbVd33qqvEk6w5bGBa5IvkFizcKRSB9HoY
vWQmWcTMFE0Uc/tkdIzMP6kRKTAbwKECtu98md/v5rhK4RGhn+E/qf25
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:04:05 2026 by rpki-client