
Error: rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
File: 3tjUZmQoMBoc4GZckKo0Jgr_74k.mft (raw, json)
Hash identifier: H75HoXGeppF6tS6UZplAiRDc8H0/64e6VWxlOOCTmo4=
Subject key identifier: 1A:31:26:34:E8:BF:0F:35:27:C9:6E:74:CE:23:2C:2D:C5:39:A6:39
Authority key identifier: DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89
Certificate issuer: /CN=F36A8A05AF/serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
Certificate serial: 02E3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
Manifest number: 02E2
Signing time: Sat 26 Sep 2026 04:33:14 +0000
Manifest this update: Sat 26 Sep 2026 04:33:13 +0000
Manifest next update: Mon 28 Sep 2026 04:33:13 +0000
Files and hashes: 1: 3tjUZmQoMBoc4GZckKo0Jgr_74k.crl (hash: HYfM5KoM1hzhigKOiP+dVcaRz0BLd492hhXljp2zCW4=)
2: 9058BEEA816411EF8E2AA088762E951A.roa (hash: RCn22Xwu4T2MS/ROjl1vK38sisW96USMCz48c97gNCE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A8A05AF, serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
Validity
Not Before: Sep 26 04:33:13 2026 GMT
Not After : Sep 28 04:33:13 2026 GMT
Subject: CN=6ab74b0a-b4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:fd:56:14:1d:1b:a5:c4:6e:53:25:dd:b7:
7f:93:24:2b:dc:dd:29:6e:3b:a2:a8:f5:e6:36:24:
29:db:1b:bf:1d:5e:c9:00:47:2e:78:e4:5b:ed:ed:
ea:d1:c9:71:5a:02:3f:91:96:f8:17:52:74:9d:c9:
db:14:15:3d:57:dc:24:ef:b9:31:fe:68:d4:cf:38:
ca:84:ab:50:69:93:ab:f5:5f:70:7b:a7:07:80:6b:
91:09:a4:99:27:d5:01:1a:f8:5f:55:a9:f3:e0:f3:
23:4e:9a:7b:78:54:53:e0:cb:37:5a:a4:6f:42:68:
3f:fe:85:7c:68:3f:b8:a4:02:b1:92:57:25:35:e2:
34:d5:6a:a2:7a:30:a6:6a:71:b9:b5:c9:58:6f:0d:
17:cd:56:d7:51:76:cd:c8:3a:41:6e:6a:37:47:9f:
5e:13:42:8f:81:e1:fb:99:61:27:b2:2c:53:c3:ef:
aa:a8:27:84:78:57:c1:87:45:bd:65:9b:07:89:3b:
29:06:84:54:e9:74:ac:2d:60:6e:64:4a:2d:76:42:
2a:60:b0:81:23:06:1f:00:71:82:f0:cb:39:85:89:
45:cc:12:2c:dc:d2:bc:69:4d:55:13:7a:56:02:67:
3c:f0:e9:b7:63:9f:cd:1f:33:e7:33:d4:93:87:ce:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:31:26:34:E8:BF:0F:35:27:C9:6E:74:CE:23:2C:2D:C5:39:A6:39
X509v3 Authority Key Identifier:
keyid:DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:35:5e:58:58:d4:74:e2:d7:ef:3d:43:0b:76:ce:6f:24:f3:
ff:d7:d3:9d:c8:eb:77:69:89:21:5c:f9:d4:7b:62:1b:e0:f0:
df:ad:6d:db:f1:b8:0a:fd:6f:86:57:0b:85:a8:72:49:f0:06:
b4:ce:98:b4:b3:31:f8:31:38:e7:78:c7:08:71:bd:ab:eb:6d:
06:7d:ec:13:7a:b7:c8:25:8f:8c:88:d5:31:d9:20:ee:a5:33:
a5:52:6a:8b:1f:11:1b:f8:10:cb:15:23:26:19:f2:e6:a3:65:
30:40:2e:40:9d:97:b7:37:6f:88:4b:ff:7a:c9:49:e4:91:d3:
0c:62:0a:21:8d:52:a4:38:d1:4f:6f:77:90:d0:cb:0d:2f:e2:
ec:84:4e:83:3e:43:05:fc:bf:d3:9e:8c:c3:12:27:72:96:cc:
39:62:33:3b:75:c6:58:9b:2c:38:49:2c:d2:d3:c8:8c:1d:a0:
85:24:98:3d:d0:1f:5e:4c:ca:d9:4a:e4:54:c2:b0:dd:ef:86:
45:cb:3f:ea:f8:fd:f2:5e:7a:8c:ed:04:bc:f5:a8:51:f6:50:
e7:be:2f:6a:c4:4c:07:f8:9d:69:67:53:c5:87:f9:f8:ca:b9:
55:d6:30:e6:f8:ea:a8:09:c5:bd:8a:43:40:b3:11:92:fb:57:
02:b4:43:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:54:56 2026 by rpki-client