
Error: rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft
File: 44k33jd6GDgiMIvjmfDhbdIecw0.mft (raw, json)
Hash identifier: dsbnO9fEzJWWTy/OoG/I6ynq5ff0tsH9I2k8PT787Js=
Subject key identifier: 47:4A:E5:11:62:AA:C3:6C:8D:A6:8F:B8:EC:1D:75:BB:F6:37:55:1D
Authority key identifier: E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
Certificate issuer: /CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Certificate serial: 033C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft
Manifest number: 0332
Signing time: Sun 15 Nov 2026 04:28:15 +0000
Manifest this update: Sun 15 Nov 2026 04:28:14 +0000
Manifest next update: Tue 17 Nov 2026 04:28:14 +0000
Files and hashes: 1: 44k33jd6GDgiMIvjmfDhbdIecw0.crl (hash: rQTBsdGFdcgyGPOfVC7xRo/99ihwMMUXEv+d+jNLw9M=)
2: 760E47CE8E4011EF84E06A96762E951A.roa (hash: 5247yr5gr3JcfvGZJNIVOcPn9L/w4Rzz/cS7nF3BEWM=)
3: D8F28FD87BEB11EFB2CEC399762E951A.roa (hash: IrfNf4mCYxKNNTtpjGrbLvkdxYvkdOQJJFgReOprMII=)
4: 9C4226C07BEB11EF8997B697762E951A.roa (hash: x6+OaK81Zqdqy3X1fPmupPUQGj9yEz5ZKOjSRkN7RGs=)
5: BFB4BD048E3B11EFBE6ED67A762E951A.roa (hash: 29PbBEEmS4+Pdgh0yo4HDRkml04+8Fig9BDKrXuYghg=)
6: 8F299E2C7BEC11EFA9BB029E762E951A.roa (hash: tfHTBK6vnY+YBhFxpvxT4QzHXlDBW8NE/EQetOrIEuQ=)
7: DE43A2EE73F611EFB5EFE385762E951A.roa (hash: Sd1KUMUsJPhhYi5uJUrLGrb5HVAMCLRPQBpoUaX9878=)
8: E0657DEC73F411EF8A821C7A762E951A.roa (hash: N21MoWcROs7ufQGekwsiGnUVwD+p9mSwZWAPbhoKswc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft
rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 828 (0x33c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B35B7AF, serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Validity
Not Before: Nov 15 04:28:14 2026 GMT
Not After : Nov 17 04:28:14 2026 GMT
Subject: CN=6af934df-012a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:c4:15:fa:2c:73:58:8b:11:05:ab:d3:fc:
fc:a2:b4:43:d2:d0:16:ee:ea:d0:84:b7:f0:3a:a7:
27:06:fb:78:2e:19:5c:a7:da:ee:7a:94:d1:e9:cf:
6a:1b:df:ab:0b:4b:29:89:72:99:46:61:fc:e6:da:
02:01:c6:ee:27:8f:e2:3c:1c:1f:bc:79:5e:56:3e:
0c:8e:3d:09:47:2d:d8:cd:67:89:0a:7b:bc:fb:96:
11:bf:d0:99:0c:e3:c9:5d:09:38:a6:fe:26:c5:7d:
b8:ea:73:a2:e3:fa:f8:7c:bf:92:96:81:47:07:c3:
6a:53:1b:84:59:59:07:cf:fa:2a:94:b3:a5:95:17:
bb:6e:ad:60:d8:68:5f:d6:33:db:4d:35:58:84:4c:
45:d4:a5:6c:5a:56:e8:43:d7:f3:f9:44:57:00:ce:
43:a1:b2:4b:e1:4d:d3:7b:e3:31:9f:85:ce:c2:37:
65:be:32:b5:77:37:3c:62:ae:da:90:f6:2a:ba:13:
01:c9:dd:20:96:77:75:d1:09:bb:0f:36:1e:3b:2d:
46:1b:b4:a3:73:7a:f0:d9:59:4e:ea:e9:76:7d:ca:
99:1c:80:aa:71:56:9c:6f:f9:23:95:ed:b5:7b:9c:
67:5c:83:c9:80:e4:c8:84:93:75:53:dd:1e:2e:ac:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4A:E5:11:62:AA:C3:6C:8D:A6:8F:B8:EC:1D:75:BB:F6:37:55:1D
X509v3 Authority Key Identifier:
keyid:E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:bf:49:75:33:31:36:9d:eb:b9:ad:19:1e:1f:e8:6d:67:b8:
4b:fe:59:8f:55:37:ad:6e:7c:59:8d:be:7d:81:ea:b3:93:7f:
08:e0:5b:d4:a5:db:aa:67:5f:19:1d:8b:af:9f:bc:a9:a8:05:
d4:ca:0c:a3:6e:fd:0e:04:23:03:ea:4c:91:40:c3:21:5c:72:
db:5f:3c:17:ef:ff:8d:16:f4:0d:3d:f1:22:2b:5b:d2:33:e8:
ff:6b:ae:93:ba:4b:d1:2a:e0:dc:c0:b0:d5:d8:d4:28:77:59:
4e:ff:cb:fa:2f:be:c3:f1:e9:85:43:f6:43:52:32:61:29:4c:
10:f2:ee:84:d4:e6:b9:e0:be:77:80:bc:3b:51:a9:9c:a2:e3:
93:30:e0:29:71:e5:a8:df:56:9f:c9:c2:f1:4c:42:9b:f8:d6:
ea:54:d6:da:7e:66:cc:24:f7:06:21:4c:fb:1f:94:eb:61:fe:
26:d4:32:64:6f:cf:28:f6:d5:76:d3:e6:03:ae:3d:b9:f2:59:
dc:6a:02:ab:b4:74:e4:b3:2d:95:3f:99:8a:6a:6b:db:92:0a:
38:b4:1a:76:ed:fc:6f:28:0d:4a:a2:01:73:ce:82:0d:83:54:
5a:eb:13:5a:c6:3d:8f:8e:b8:7c:23:a8:a3:87:29:1e:f2:fe:
81:78:0a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:48:36 2026 by rpki-client