
Error: rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft
File: eekHF2z7dQa9kWBW83X6OM5BzaM.mft (raw, json)
Hash identifier: ed3oitXvPDVpD+bnZ0fl6srE+XNSfQ3g+UeEK3M4CHM=
Subject key identifier: 71:AD:D7:C0:93:AC:F7:72:3A:B5:48:A3:81:1E:2D:FB:BF:C6:BD:66
Authority key identifier: 79:E9:07:17:6C:FB:75:06:BD:91:60:56:F3:75:FA:38:CE:41:CD:A3
Certificate issuer: /CN=F36AB5C3AF/serialNumber=79E907176CFB7506BD916056F375FA38CE41CDA3
Certificate serial: 04BE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eekHF2z7dQa9kWBW83X6OM5BzaM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft
Manifest number: 04BC
Signing time: Thu 24 Sep 2026 03:33:57 +0000
Manifest this update: Thu 24 Sep 2026 03:33:56 +0000
Manifest next update: Sat 26 Sep 2026 03:33:56 +0000
Files and hashes: 1: eekHF2z7dQa9kWBW83X6OM5BzaM.crl (hash: LsHd4ZTMXs0tFKAePVEMSOYL+RqDJ7rR2LStg/2BCMg=)
2: 5323458C184611EEAA09D5184AD9E6FC.roa (hash: A8xuzCyGtjAq6hsUbNjHYuJn81F3LK8LOnUy2g8YDWc=)
3: A73392CCAE9711F1A00EA6A2CE1D38B0.roa (hash: SoNB2m9m9E178Eutxr7TAZFF/JbCBpcc4cAfwqIDNcQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft
rsync://rpki.afrinic.net/repository/afrinic/eekHF2z7dQa9kWBW83X6OM5BzaM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 03:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214 (0x4be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AB5C3AF, serialNumber=79E907176CFB7506BD916056F375FA38CE41CDA3
Validity
Not Before: Sep 24 03:33:56 2026 GMT
Not After : Sep 26 03:33:56 2026 GMT
Subject: CN=6ab49a25-0f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c5:9c:fb:16:76:43:a6:cf:f3:42:2a:12:3b:
a5:37:b8:1a:95:d5:ac:c3:f8:4a:bd:2c:73:6a:27:
28:77:53:4b:f7:dc:08:94:44:6e:73:1b:bd:60:d9:
30:59:56:3c:65:c1:6a:24:47:46:c1:93:ca:f0:28:
e8:30:ee:53:25:2e:41:61:1d:6a:d0:1c:f5:bd:4f:
e6:76:68:26:22:24:34:e2:c0:95:c4:34:a1:20:ec:
ea:97:82:11:50:6d:bb:b6:4b:cc:55:d7:74:6b:3c:
d3:24:4d:e2:76:66:65:3a:90:c4:bf:0f:49:b7:59:
fc:65:a7:d4:42:9f:11:5a:2c:9f:48:75:bd:91:7e:
0f:76:83:dc:23:9c:4d:e5:24:ff:1d:55:e1:26:35:
2e:81:6b:76:02:88:1d:cd:b3:f3:9c:9a:76:be:ca:
e7:8a:e4:ed:df:c3:ab:23:ea:e9:eb:d3:c1:37:77:
11:74:a8:04:0b:f6:7c:96:e4:4b:f6:6d:f5:1d:03:
0b:33:9d:72:88:e5:7f:6b:a4:9c:85:13:56:77:b9:
55:ea:42:1a:6a:ff:97:32:4d:85:48:e2:68:93:c2:
8d:50:92:d7:7c:fe:6e:99:5f:81:52:40:4b:06:82:
ba:3f:65:6d:70:1e:03:05:7a:4e:31:f9:93:b9:a5:
7e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AD:D7:C0:93:AC:F7:72:3A:B5:48:A3:81:1E:2D:FB:BF:C6:BD:66
X509v3 Authority Key Identifier:
keyid:79:E9:07:17:6C:FB:75:06:BD:91:60:56:F3:75:FA:38:CE:41:CD:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eekHF2z7dQa9kWBW83X6OM5BzaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:18:16:03:c6:1e:01:54:33:a7:ae:b6:7b:53:03:3b:a0:91:
96:9f:3e:d2:1b:7c:80:ac:c7:a8:a9:65:63:91:2a:31:01:c3:
f4:9e:bb:f6:e2:f5:65:8d:f1:fd:4e:a5:bf:bf:fd:23:76:88:
fd:9d:e4:84:de:01:fe:ea:25:a0:1c:3b:92:20:9b:a0:d8:6d:
33:56:d5:e6:4a:c8:03:3d:78:fd:fb:44:4e:2c:42:12:f6:0f:
a6:de:a8:0c:b5:6f:39:f4:43:49:70:51:73:65:6b:71:19:ab:
32:89:17:7d:fe:da:b7:a6:ad:88:e4:db:b4:c4:b1:8e:1b:33:
65:76:9e:f4:de:25:c2:50:a6:dc:6d:56:bb:80:43:c4:7d:ec:
f9:a0:c6:9d:6d:01:45:79:cc:44:5f:3e:d5:41:34:59:d2:b8:
07:98:c2:14:8f:86:e0:9c:df:ee:a1:a7:7a:8b:bb:76:af:28:
b7:17:03:d7:12:87:86:c7:45:81:2b:2a:ca:6f:19:2b:26:d6:
e6:92:2d:ab:de:46:c2:33:24:46:a9:c0:01:7d:c9:63:02:22:
0e:12:b1:bf:cb:b8:b2:47:5b:c0:76:17:80:b1:c1:3c:47:e1:
31:93:41:89:7c:16:2e:b1:e7:a6:fd:44:13:e0:76:bb:42:5c:
94:f3:18:b0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUI1QzNBRjExMC8GA1UEBRMoNzlFOTA3MTc2Q0ZCNzUwNkJEOTE2MDU2RjM3NUZB
MzhDRTQxQ0RBMzAeFw0yNjA5MjQwMzMzNTZaFw0yNjA5MjYwMzMzNTZaMBgxFjAU
BgNVBAMTDTZhYjQ5YTI1LTBmNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDixZz7FnZDps/zQioSO6U3uBqV1azD+Eq9LHNqJyh3U0v33AiURG5zG71g
2TBZVjxlwWokR0bBk8rwKOgw7lMlLkFhHWrQHPW9T+Z2aCYiJDTiwJXENKEg7OqX
ghFQbbu2S8xV13RrPNMkTeJ2ZmU6kMS/D0m3Wfxlp9RCnxFaLJ9Idb2Rfg92g9wj
nE3lJP8dVeEmNS6Ba3YCiB3Ns/Ocmna+yueK5O3fw6sj6unr08E3dxF0qAQL9nyW
5Ev2bfUdAwsznXKI5X9rpJyFE1Z3uVXqQhpq/5cyTYVI4miTwo1Qktd8/m6ZX4FS
QEsGgro/ZW1wHgMFek4x+ZO5pX6JAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUca3X
wJOs93I6tUijgR4t+7/GvWYwHwYDVR0jBBgwFoAUeekHF2z7dQa9kWBW83X6OM5B
zaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFCNUMzL0YxQzgyNTZFMTg0NTExRUU5RTU2OTkxNzRBRDlFNkZDL2Vla0hG
Mno3ZFFhOWtXQlc4M1g2T001QnphTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2Vla0hGMno3ZFFhOWtXQlc4M1g2T001QnphTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUI1QzMvRjFDODI1NkUxODQ1MTFFRTlFNTY5OTE3NEFE
OUU2RkMvZWVrSEYyejdkUWE5a1dCVzgzWDZPTTVCemFNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKGBYDxh4BVDOnrrZ7UwM7oJGWnz7S
G3yArMeoqWVjkSoxAcP0nrv24vVljfH9TqW/v/0jdoj9neSE3gH+6iWgHDuSIJug
2G0zVtXmSsgDPXj9+0ROLEIS9g+m3qgMtW859ENJcFFzZWtxGasyiRd9/tq3pq2I
5Nu0xLGOGzNldp703iXCUKbcbVa7gEPEfez5oMadbQFFecxEXz7VQTRZ0rgHmMIU
j4bgnN/uoad6i7t2ryi3FwPXEoeGx0WBKyrKbxkrJtbmki2r3kbCMyRGqcABfclj
AiIOErG/y7iyR1vAdheAscE8R+Exk0GJfBYuseem/UQT4Ha7QlyU8xiw
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:24:18 2026 by rpki-client