
Error: rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
File: YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft (raw, json)
Hash identifier: rYBJ9X6QM0niHRswwsYQauxlcD8IBpoiDYegRAL4oF0=
Subject key identifier: 7F:EA:6C:E6:3E:CA:CE:5B:61:77:5D:D4:C5:42:83:51:26:A8:B1:53
Authority key identifier: 61:89:BF:93:8C:94:C5:34:D7:84:3A:7A:03:4C:5B:6A:82:37:D5:96
Certificate issuer: /CN=F36A42DFAR/serialNumber=6189BF938C94C534D7843A7A034C5B6A8237D596
Certificate serial: 0476
Authority info access: rsync://rpki.afrinic.net/repository/arin/YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
Manifest number: 0474
Signing time: Thu 24 Sep 2026 03:43:01 +0000
Manifest this update: Thu 24 Sep 2026 03:43:00 +0000
Manifest next update: Sat 26 Sep 2026 03:43:00 +0000
Files and hashes: 1: YYm_k4yUxTTXhDp6A0xbaoI31ZY.crl (hash: 6C9e6/r9J97F3DCJXu3ly122da5NSzB1PaJ9hyKXZMY=)
2: 3D7EECA2A8A711EFA1D51794762E951A.roa (hash: W7jAbtCXoRcwI8Z2NvEM0UC/9LNhTC0NKo9Io5pOlnA=)
3: 676C625A4D6411EEBB83C7834AD9E6FC.roa (hash: iiE25Dzd3pzLzhX8ubXQvlCirPYfptGG+RIQQE+HLD4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
rsync://rpki.afrinic.net/repository/arin/YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A42DFAR, serialNumber=6189BF938C94C534D7843A7A034C5B6A8237D596
Validity
Not Before: Sep 24 03:43:00 2026 GMT
Not After : Sep 26 03:43:00 2026 GMT
Subject: CN=6ab49c45-c51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:98:c4:c3:d4:d6:85:42:40:16:48:95:d9:
9c:20:c2:18:bd:07:e9:56:c4:ef:e3:ed:0a:34:8c:
42:45:8a:f1:5f:f0:02:d9:a5:3f:34:49:98:a6:6f:
02:5d:5d:12:f0:7c:dd:94:fc:07:e5:59:a2:d7:92:
88:89:27:a2:f5:5c:86:cf:ef:6c:ae:69:95:9b:09:
ad:11:88:0a:23:69:9b:cf:34:4d:52:b2:bf:d2:81:
f3:37:81:2d:09:ef:40:54:a4:5b:49:69:e6:2b:6b:
6d:45:23:ba:4e:76:80:69:81:b3:e7:9b:de:4f:8d:
05:50:06:b7:29:23:a4:07:5a:b0:63:41:5d:5d:ce:
f2:cf:fe:bd:37:b9:2c:69:1c:4d:c2:b2:bc:c3:c7:
3f:ef:95:b5:62:69:16:0e:4d:38:5f:1f:33:15:24:
3d:52:86:2e:0a:f9:d8:45:ce:71:2c:e3:74:a2:48:
3d:18:7b:79:39:16:a3:88:26:68:7c:f3:cc:8e:04:
dc:47:53:95:92:35:2a:45:9a:6b:92:00:f7:d6:71:
cc:fa:39:cd:5d:c2:17:de:ae:9f:85:97:7f:18:4c:
fc:46:fd:75:c8:d7:d5:4b:ff:29:05:7c:c4:6b:8d:
6a:35:73:b5:12:2c:92:38:f0:1b:82:d1:a2:b6:45:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EA:6C:E6:3E:CA:CE:5B:61:77:5D:D4:C5:42:83:51:26:A8:B1:53
X509v3 Authority Key Identifier:
keyid:61:89:BF:93:8C:94:C5:34:D7:84:3A:7A:03:4C:5B:6A:82:37:D5:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:8f:19:92:b3:88:f9:0b:e9:9c:ed:eb:d6:29:b0:a8:04:15:
47:9f:47:fd:09:ed:15:76:80:67:8c:db:e1:be:a4:d2:01:ca:
89:d6:3a:2c:c0:70:2a:d4:01:b0:02:5a:93:a2:0a:16:ef:a6:
52:dc:d2:76:fd:0c:eb:32:db:cd:20:1e:1f:4e:64:30:71:27:
fb:28:98:e2:14:b1:2f:4e:e8:0a:a4:56:e3:a8:89:0c:81:6d:
7c:33:69:ea:18:73:ca:42:d1:e0:0c:81:23:62:7c:e0:db:ac:
9c:b1:fa:68:81:eb:4a:99:4d:d6:2d:8b:94:6c:cf:f8:8f:2d:
7e:f3:d3:c2:b2:e4:a5:fb:c0:f0:01:f5:ff:a1:7f:86:56:74:
7e:2e:2b:4d:b9:0a:80:4d:33:dc:7c:25:2f:60:df:97:a5:90:
e7:d2:1b:bc:e8:11:ad:5f:bf:06:f1:5a:f5:77:69:2f:1a:4c:
62:6d:d4:6c:a4:02:7d:e8:52:5f:61:b8:39:53:3d:c9:ee:59:
7f:1b:c9:5d:60:73:e3:85:9c:3a:e6:be:4e:84:23:bb:af:d2:
4d:57:df:c9:67:0e:95:0c:af:44:6d:f5:f6:cf:98:f4:ff:26:
54:c4:78:f7:63:e0:9e:0c:d6:0d:f8:e6:23:0d:e3:38:05:6e:
0f:28:b1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:13:42 2026 by rpki-client