
Error: rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
File: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft (raw, json)
Hash identifier: +FqkO9aUDu+Dm6v6a65A2O2rl7iYYO3eaaRkon/Gtog=
Subject key identifier: 93:B3:65:BD:2E:E4:03:30:B9:60:7D:28:35:24:A6:79:4A:36:0C:3C
Authority key identifier: E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
Certificate issuer: /CN=F36AA888AR/serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
Certificate serial: 0AC2
Authority info access: rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
Manifest number: 0AC1
Signing time: Wed 14 Oct 2026 01:26:35 +0000
Manifest this update: Wed 14 Oct 2026 01:26:34 +0000
Manifest next update: Fri 16 Oct 2026 01:26:34 +0000
Files and hashes: 1: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl (hash: ZlZxL0r17rhoX2M42fMXZwhKix5/KNztoUhlw6hgeug=)
2: 58B26BA4886211E99B31DD63F8AEA228.roa (hash: nvT/Y3DEz1TX+5D/zLT7HQfvvtuHBy4pd0aYSFdPAvg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 Oct 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2754 (0xac2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AA888AR, serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
Validity
Not Before: Oct 14 01:26:34 2026 GMT
Not After : Oct 16 01:26:34 2026 GMT
Subject: CN=6aceda4b-c3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:83:96:28:dd:9b:ee:3e:8e:ff:3c:df:71:
de:15:4d:cf:30:7e:0b:d7:cd:92:57:39:d5:a1:b7:
f2:72:c2:95:e0:e3:a7:32:1d:fb:a1:3e:ea:6e:63:
c2:bf:00:b5:33:2f:57:c0:5f:a6:cb:a4:ab:ee:1e:
29:95:4f:48:a9:79:bc:7a:6d:92:0b:b4:ba:8d:f3:
d4:fe:34:80:34:ec:91:96:c4:f8:fc:7b:f8:66:95:
0f:44:fd:42:c0:2a:31:32:56:24:90:40:36:ac:eb:
9f:a2:27:83:2a:77:dd:c1:ef:78:36:75:08:e5:b0:
86:32:09:29:13:bf:d1:39:c5:c9:d4:22:d4:1c:79:
b5:ef:0e:e3:18:34:09:23:35:74:49:48:55:7c:60:
62:94:0a:6e:9b:3c:be:06:1a:10:61:4c:9d:ad:18:
d3:86:d0:a5:91:c9:84:f9:e3:3b:80:34:3d:ed:7c:
0c:5a:06:21:33:7f:ee:6c:fc:64:34:d5:d2:6f:86:
8a:42:f4:c8:61:f6:a3:77:b9:c5:7f:f4:f1:25:c9:
b8:ac:75:3e:50:60:98:39:d5:c6:c7:e3:10:33:3e:
5a:f1:f6:91:25:64:84:56:fa:5b:a3:58:70:f1:53:
01:a5:11:49:b1:5b:bd:98:fa:86:1d:bd:df:7a:16:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B3:65:BD:2E:E4:03:30:B9:60:7D:28:35:24:A6:79:4A:36:0C:3C
X509v3 Authority Key Identifier:
keyid:E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6e:5d:a5:98:88:85:d6:c0:97:a1:a6:64:5f:4b:c0:e6:c4:
26:8b:60:e5:a9:f9:2a:ae:0f:2a:70:64:3f:0c:76:36:52:6a:
60:03:1b:e5:5c:1d:e5:c3:48:63:19:a9:51:8b:7b:ba:98:f4:
ce:de:fb:ab:66:4f:24:64:3e:44:f8:17:6d:b5:8c:67:9f:78:
78:0d:01:41:71:c1:86:ce:46:f5:9e:5e:de:b8:06:28:f0:a7:
46:ea:8f:6f:a0:f9:54:d3:f9:bf:56:a4:3e:a4:fe:f2:0b:06:
4d:c0:7c:ee:42:b0:7c:46:03:cb:7b:72:d7:4a:13:3d:57:50:
73:6a:1d:eb:26:3c:7d:cd:88:42:52:f3:41:04:78:7b:a4:1a:
b4:03:45:c3:e4:8b:ef:4f:3f:87:f3:eb:fc:10:9b:b1:74:f2:
ed:40:4c:e8:49:48:43:1c:02:0f:ff:c0:dc:9a:30:f0:11:33:
fc:1a:2e:64:04:c5:c4:fc:75:0e:1c:c3:3a:cd:59:3d:07:1d:
19:97:41:d9:c4:6f:ae:dc:47:fe:86:6b:49:9b:21:4d:6a:ce:
fe:35:0d:45:ec:32:af:c8:fc:1b:0d:8e:fc:08:16:51:98:d5:
ce:a7:e5:e8:6a:19:93:aa:df:8b:9b:18:2b:d7:c9:9b:76:f9:
f4:36:51:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:08:25 2026 by rpki-client