
Error: rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
File: kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft (raw, json)
Hash identifier: FPHtVDQM7tFZoiGOpccPFskOW0uJIG6GZtlhUBF5oZI=
Subject key identifier: 58:63:E1:67:3F:E5:F4:3D:71:4F:DE:C2:36:F4:5A:C1:78:86:FC:22
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Certificate issuer: /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial: 0385
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
Manifest number: 0376
Signing time: Sun 04 Oct 2026 04:11:53 +0000
Manifest this update: Sun 04 Oct 2026 04:11:52 +0000
Manifest next update: Tue 06 Oct 2026 04:11:52 +0000
Files and hashes: 1: kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl (hash: 3G2DIIT2rhnOADbID6BYg09sd9tnUszxxaBN/SBNWlM=)
2: 200F261EAA7611F18D325219CF1D38B0.roa (hash: wwYzLUthjIrNOs+qkhOO2LuhV5ABxOLx5maCLZPDfGc=)
3: 12F98C3A322C11F09C0E00A8DAE4EC9C.roa (hash: 3/y2xPCMLAqnZ9fL5r4SiXDKczBJPyz466opmOdw+x8=)
4: AA49DBAA0BBA11F0ABCF1C53762E951A.roa (hash: 1gTiKBvUuN5Hp+vmaDEDs42+vihpN5KZK723GLEruGs=)
5: C21173B24F4811EF8A277884762E951A.roa (hash: Af8VqHnpag7lv/aOf7jeqaTrvvKqqPvGk8sXdY9C8oE=)
6: 2BFA32F04F4911EF85B98B88762E951A.roa (hash: VLnmys2y2qLTP9i5IM1gmNfB2WyHqNq5FeIYAdMqXMg=)
7: 62A764BA4D5511F1B840B716CF1D38B0.roa (hash: bJTjExMhaMX3ZBR8/uY7C7E1lDCmRfterL/t1acckIw=)
8: 3128F838389511F1B959E80BCF1D38B0.roa (hash: o3mY/PHhe4PtkVQyaPKBNxFpCBc+yL0m9QVPhkGqaLs=)
9: 8F09B9704F4811EF95C0F883762E951A.roa (hash: Jb7IC1uL5aUvVn+T0mFpr5lxOWcWzHI+l9IojCLU5sE=)
10: 4691B7064F4811EFB5EC1580762E951A.roa (hash: Y7dEtQLSXLs6SEUJz5C6Rgx6jukPXe2EL/tguL6OuEc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 06 Oct 2026 04:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901 (0x385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AE219AF, serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Validity
Not Before: Oct 4 04:11:52 2026 GMT
Not After : Oct 6 04:11:52 2026 GMT
Subject: CN=6ac1d209-c043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:fc:96:ef:a3:3f:c0:46:c3:09:6f:fb:9e:
90:84:f5:0d:00:6a:f1:5f:a9:41:05:e9:32:92:7d:
25:0a:88:85:89:06:53:44:af:44:f0:97:6a:75:6a:
0e:9d:07:5a:9a:6e:44:e0:da:b7:46:37:c2:b3:bc:
10:95:bb:20:ce:b5:99:ba:b7:db:de:f2:55:af:2e:
97:39:30:a3:ca:bf:cf:06:fa:8b:22:9c:c2:90:aa:
3e:af:40:c8:79:58:0d:e7:a8:f5:ba:5e:45:de:f2:
fd:f6:d5:e8:ed:4e:21:33:98:9e:02:f7:48:f0:ef:
79:b1:e4:1d:e6:d0:48:fd:02:20:93:a1:7d:67:8e:
6c:89:1e:49:69:b0:f1:a6:d2:4b:88:3f:44:00:23:
69:ce:48:3c:f7:cd:c8:ed:6f:ee:11:32:58:b8:21:
48:81:b0:d1:d0:50:9f:e2:58:f0:8a:fd:89:3d:d6:
5a:39:f0:90:c6:81:c8:f7:40:0b:31:83:e2:7a:56:
dc:0a:b5:16:65:ce:67:d0:5f:22:d5:7a:57:0e:fc:
11:b2:66:0b:26:22:ae:13:8d:92:5e:ea:8d:22:92:
af:0a:9a:94:7f:5d:49:fa:3a:f0:cd:58:27:f7:cc:
61:44:b4:ee:c8:62:3e:61:bd:63:13:c9:42:75:93:
59:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:63:E1:67:3F:E5:F4:3D:71:4F:DE:C2:36:F4:5A:C1:78:86:FC:22
X509v3 Authority Key Identifier:
keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:09:5a:51:8e:7e:9b:69:11:c1:6f:15:dd:bf:79:0d:ed:31:
4b:97:22:ac:c0:1a:d2:7f:9b:9e:18:f8:73:46:4f:21:a0:e1:
38:04:58:67:4e:34:06:c1:cf:c6:2b:11:b1:0e:1f:be:62:c9:
e9:e2:8c:da:16:be:0e:20:98:46:d5:91:08:b0:ee:05:97:6e:
aa:18:4a:87:43:ce:d4:bb:5e:37:5b:c8:67:07:0b:e9:04:e3:
54:90:8d:16:fd:6b:44:17:85:94:69:3d:b6:5c:24:70:e0:b3:
7d:94:4e:51:5f:5f:1e:6d:98:56:55:9d:bb:2c:eb:c5:bd:1c:
7f:84:db:f7:83:91:62:af:ce:b5:ee:a9:f3:59:5b:32:d1:d6:
f3:04:b7:bd:b1:9b:50:6c:e1:fa:f2:f2:8a:df:2e:10:d9:c8:
2c:d4:28:0a:42:9c:61:69:7e:df:56:4c:f8:0e:d1:e4:4b:df:
9f:1b:96:8e:9c:70:9f:57:52:b9:c9:71:2a:26:14:fc:4c:76:
89:81:d0:77:11:c8:c6:f4:f5:59:fb:0a:7f:b9:77:99:82:0f:
0a:81:3c:75:a0:40:ac:80:f5:1f:fe:da:0d:08:bf:93:2f:18:
3e:bd:ab:5a:26:11:11:2c:6f:b6:d9:75:53:55:9c:47:91:79:
7b:2f:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:06:31 2026 by rpki-client